
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa
File: 4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa (raw, json)
Hash identifier: KX87AIO0D/moM2Kh4aQURslANWTsGFkmBcADs9+y3oM=
Subject key identifier: 01:B0:B1:A0:49:F5:A5:25:63:2C:45:BC:8B:87:F0:09:DD:59:93:0E
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584D7E35AD4464C9B23AC8FB0380
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa
Signing time: Mon 13 Apr 2026 13:01:35 +0000
ROA not before: Mon 13 Apr 2026 13:01:35 +0000
ROA not after: Sun 12 Jul 2026 13:01:35 +0000
asID: 153671
IP address blocks: 66.253.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7e:35:ad:44:64:c9:b2:3a:c8:fb:03:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Apr 13 13:01:35 2026 GMT
Not After : Jul 12 13:01:35 2026 GMT
Subject: CN=ec2f0b54-28ce-4d97-b0b3-11725b4ec54b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:34:3f:6a:9d:a6:2c:a3:b1:8c:c6:b4:9f:dd:
60:4b:64:49:60:7f:4b:e7:ee:fa:13:66:35:e3:0d:
5a:10:3b:e0:95:fd:95:9d:95:70:ed:63:a3:d2:9a:
ec:e7:57:80:3c:e6:a9:8b:7e:1f:f7:bc:00:21:8d:
33:9b:1d:88:a0:a7:a7:2f:38:69:28:76:f3:df:53:
a7:4e:4b:8b:66:6f:21:26:03:cc:27:66:5d:fb:30:
0a:b4:dd:51:f7:48:ab:dd:07:05:b7:e0:fd:ef:8e:
65:d1:69:89:94:d8:b7:37:99:89:12:57:6f:2c:fc:
32:31:b0:24:68:ec:ba:a1:bb:8a:76:cf:0b:9e:13:
e8:50:3b:bf:4e:78:52:ba:6a:ea:b1:48:a5:f5:cd:
42:da:a2:ea:91:08:f3:f4:3b:ef:92:e7:45:b7:de:
0d:d5:3c:53:3a:78:3d:e2:92:5d:dc:87:4d:2e:bb:
df:87:48:4f:36:c3:b2:45:72:5f:93:4c:2d:0b:be:
47:78:7c:ee:f3:27:fa:08:9b:7d:10:c2:d5:ae:a4:
6d:4b:7a:09:38:28:97:0a:18:e9:67:d4:d6:61:fe:
4e:9f:d9:36:ec:78:e7:c2:4d:48:32:07:2e:4c:d8:
1d:4c:3a:c7:cf:e8:1b:66:a8:e5:47:dd:95:f9:15:
8a:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:B0:B1:A0:49:F5:A5:25:63:2C:45:BC:8B:87:F0:09:DD:59:93:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/4d5de1d3-a084-3890-8cd7-86a465b55fe3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bc:0b:4a:af:f8:bc:ee:ab:8d:06:b8:51:df:9a:05:57:67:bf:
d5:20:df:68:b6:a9:26:76:a4:07:69:57:e6:44:7a:78:22:c5:
50:da:13:2c:98:ab:7f:02:e9:cd:5d:6a:19:d2:e7:04:87:50:
79:9f:4c:bf:96:ab:99:dc:a5:c1:86:52:b2:9a:09:53:26:bc:
8f:f7:48:fb:c9:4c:5c:28:91:2f:24:bc:fd:c4:2c:2e:67:c2:
e5:7e:a5:2c:ea:0b:0e:b4:76:33:d9:0b:d2:85:42:ea:8c:55:
c6:b9:29:ba:47:8c:c5:f3:6a:41:dd:ff:3d:06:ab:dd:0e:a0:
d8:68:6e:fe:18:f5:18:59:b2:1d:02:88:0a:61:e2:df:e9:70:
cf:fc:00:7d:cb:c2:a1:2a:0a:23:f7:10:e9:12:38:5a:c6:d6:
db:37:dc:f0:21:b5:b8:ea:1b:7f:de:e9:68:1e:c4:d8:fc:7e:
26:54:a9:9b:c4:a4:86:11:f7:0d:e5:77:cb:91:36:7f:a4:b9:
d9:40:53:1b:e9:d1:7c:03:89:c7:e0:eb:28:3b:b2:f9:95:13:
c7:d5:fb:ce:65:81:3f:fa:fb:c6:9e:cf:50:27:62:64:af:55:
9c:a4:a8:02:8f:81:9f:92:c9:d8:37:60:3b:9a:44:46:c6:e0:
8f:66:29:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:20:12 2026 by rpki-client