
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/64902b0b-5e5c-306e-bd31-54f885d0a0aa.roa
File: 64902b0b-5e5c-306e-bd31-54f885d0a0aa.roa (raw, json)
Hash identifier: IWCRxWuI9kSgtrLVMZ+GMiqpNE4UelWPG08ZYrCj7Zc=
Subject key identifier: F3:DC:D1:6E:9A:CB:65:02:41:AC:3A:E3:A1:BB:D4:23:BB:DE:BE:52
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584CB121A7F20ED658304F2BA5C0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/64902b0b-5e5c-306e-bd31-54f885d0a0aa.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 25818
IP address blocks: 66.234.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:a7:f2:0e:d6:58:30:4f:2b:a5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=ce953cdd-1099-4b29-aa57-60feeded792e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:5d:6d:b6:92:ec:a3:bb:67:f0:d1:6a:c3:a9:
00:e3:1b:de:00:21:c4:f5:46:a1:c1:71:56:48:86:
7e:9e:6a:2a:26:df:fa:d8:7e:03:92:74:70:a6:76:
74:07:58:81:e1:16:67:46:ef:ca:26:e3:48:2d:b7:
26:7b:2e:4c:54:e8:7f:91:e5:10:e0:7d:2d:e2:71:
7d:2b:10:77:68:a6:8e:cb:e6:bb:c1:66:40:1d:fd:
a8:b2:12:60:84:b8:86:1f:f8:13:a0:e2:a5:53:06:
f4:39:10:40:1b:af:b5:52:c3:ee:a9:9c:b3:bb:38:
9c:dd:dd:2d:8f:02:51:2b:ca:81:64:12:98:38:43:
98:8c:85:c4:72:65:cb:1e:74:6e:a2:ba:43:38:5a:
f0:56:70:1c:21:a1:22:6f:af:af:fa:f6:65:a9:17:
08:73:6c:2b:0f:c1:7a:17:4d:44:96:9b:5d:0f:0f:
f7:38:96:d3:9e:9f:88:b3:91:49:bb:62:80:d0:b2:
0b:eb:6a:1c:d0:09:1f:5a:d2:cf:9f:2c:1e:4a:6e:
a4:20:ce:dc:f8:37:ba:94:80:f4:fb:da:ee:d1:d7:
32:e1:65:5d:20:3f:b1:21:78:38:01:15:b6:81:ac:
93:84:99:1b:d0:5a:df:c2:0a:b8:6f:21:a5:bd:5a:
61:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:DC:D1:6E:9A:CB:65:02:41:AC:3A:E3:A1:BB:D4:23:BB:DE:BE:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/64902b0b-5e5c-306e-bd31-54f885d0a0aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.234.229.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:6c:53:16:04:28:43:26:37:4e:96:03:12:43:96:a0:88:e8:
db:ef:65:2d:b6:51:5c:6c:9a:ef:d3:38:87:12:be:85:94:9a:
2e:23:a2:db:33:af:5e:d7:e7:6f:bd:79:3a:cf:92:31:b3:60:
ba:ad:ec:2c:e2:b2:f5:d6:26:02:3e:d2:7e:df:6e:7b:ed:66:
02:4c:f2:18:a5:42:fb:d1:92:19:97:2f:1d:95:5b:84:8d:29:
2e:19:0b:16:57:4c:24:8e:72:28:a7:00:f5:54:e1:65:01:25:
97:a1:66:77:0d:d4:f1:1a:3a:fe:46:b7:58:a1:e4:46:78:ec:
34:d9:73:9c:ae:46:d9:55:a2:a9:9b:2f:27:d2:7e:a0:62:dc:
b9:65:75:9f:a3:46:f2:f8:40:78:03:21:fa:26:b5:6f:c9:fd:
02:76:8d:30:ec:04:f7:95:cd:8a:60:fc:52:cd:74:27:d1:33:
92:e5:ac:cd:b4:ec:68:5c:83:27:f8:a9:1e:d6:14:a0:ab:fa:
cf:1d:79:4c:c5:50:0b:77:d2:00:84:a1:d2:41:dd:9a:9d:40:
06:e8:7c:aa:eb:8a:80:8f:2f:48:c8:0e:24:11:7e:23:4e:8e:
28:5b:45:e1:9e:e7:1e:aa:bf:c9:e8:e2:08:c7:bf:a6:be:58:
11:ef:66:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:48:36 2026 by rpki-client