
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
File: 3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa (raw, json)
Hash identifier: ZM+jvXWEocT08T/UOuFqerLSFcLNbLoBDrdwjA/DovY=
Subject key identifier: 3C:AF:79:1A:51:AC:B9:C5:37:F9:D9:E5:66:87:CC:32:46:EE:23:34
Certificate issuer: /CN=b6f28d10-5739-4e40-a446-935c60d79169
Certificate serial: 010D0C9F4328584DFA70A0B638514A0131C2DC00
Authority key identifier: E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
Signing time: Thu 28 May 2026 01:00:10 +0000
ROA not before: Thu 28 May 2026 01:00:10 +0000
ROA not after: Wed 26 Aug 2026 01:00:10 +0000
asID: 1403
IP address blocks: 66.158.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fa:70:a0:b6:38:51:4a:01:31:c2:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6f28d10-5739-4e40-a446-935c60d79169
Validity
Not Before: May 28 01:00:10 2026 GMT
Not After : Aug 26 01:00:10 2026 GMT
Subject: CN=c088bbc0-208e-4d1b-a9a9-f31531596120
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:3e:ca:17:e7:61:c9:36:a9:66:27:93:43:
63:03:65:14:73:68:98:71:6c:7d:7b:70:e5:42:c0:
57:95:d8:3e:e7:c9:66:22:3b:b8:65:60:bc:79:6c:
57:0e:82:9d:d5:31:c2:4c:ed:74:c0:dc:7e:07:3b:
28:d9:8b:27:a9:b1:97:2e:71:fb:1d:da:e6:3f:81:
cc:33:5c:bc:39:6f:1e:4a:34:57:fe:9c:7e:a9:9f:
51:e4:bb:6a:5e:96:4f:5d:82:24:7a:1b:c5:19:75:
3e:c2:03:f4:cb:a3:92:8b:ba:72:9d:79:e9:8e:37:
c6:ad:26:e7:63:65:b9:d2:c0:0c:1b:0c:e8:2a:0f:
ee:11:b5:18:cd:27:66:c9:49:b1:69:e9:af:02:40:
c9:d7:09:85:2f:16:98:7e:9e:29:45:6e:99:c6:2a:
6a:d1:26:37:bb:30:97:ed:e7:00:3e:74:c5:c8:30:
cc:5d:1b:62:28:b9:b3:00:35:f2:ae:14:bc:d6:a8:
10:dc:39:d3:e7:68:61:24:f7:62:c5:d5:28:63:0f:
2b:bd:df:ac:06:a4:0e:69:77:da:af:c7:0d:57:61:
7f:a8:ba:12:b6:9f:96:66:54:64:56:e6:73:d2:ec:
d2:4d:ae:df:75:4e:db:22:a7:e5:07:e1:2b:39:3b:
46:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:AF:79:1A:51:AC:B9:C5:37:F9:D9:E5:66:87:CC:32:46:EE:23:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/3b0ac8dd-0424-30b0-b0d5-7fcd28b150e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169/b6f28d10-5739-4e40-a446-935c60d79169.crl
X509v3 Authority Key Identifier:
keyid:E8:EA:CF:14:D1:FD:74:AB:31:C2:B1:A6:F0:7E:AF:A6:44:84:08:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b6f28d10-5739-4e40-a446-935c60d79169.cer
sbgp-ipAddrBlock: critical
IPv4:
66.158.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:b8:93:e3:2a:3c:da:e7:a0:75:63:61:8c:76:83:37:6e:be:
73:5e:92:27:c3:6f:de:77:65:a2:6a:a1:05:1c:ac:98:ad:2a:
32:d1:f7:05:f3:b9:18:79:ae:a1:0d:e9:d2:7c:b0:52:94:f5:
d3:60:7f:c2:82:f9:43:7a:66:ea:35:2a:cf:39:4c:3e:45:38:
1d:86:e2:c8:c1:87:af:1b:79:7d:de:3f:3d:22:1b:2c:fd:ed:
55:e2:8f:f8:8e:d5:09:da:2a:b7:84:7a:dd:fd:23:a4:8c:4d:
43:50:c4:66:87:80:18:75:80:5d:1f:28:a9:1b:43:a3:bb:3b:
19:b1:fa:2a:43:ed:12:58:07:88:ac:75:c7:28:0d:a9:81:ed:
89:54:cc:9c:d2:29:8c:d7:15:d0:3d:d9:cf:f7:11:bb:6a:72:
3b:41:6a:1a:8a:a9:28:3a:58:90:0b:2a:54:9f:4a:7d:38:6d:
0f:fa:69:9d:aa:66:74:4c:cc:1b:31:c1:7b:fe:32:ab:06:c9:
26:da:92:d6:29:bc:07:5f:c0:26:ca:d6:d7:44:e7:c3:eb:50:
77:8f:51:35:88:18:8d:b7:3b:bf:db:47:91:1c:4c:cb:6a:55:
eb:eb:0f:d0:22:a3:78:94:1a:38:80:70:87:c4:3b:1b:dd:a3:
ef:02:42:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 19:51:02 2026 by rpki-client