
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa
File: cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa (raw, json)
Hash identifier: YWqlVeNp1AORlkKx/898Hr9QDVQ1KS0BtIjyUcOtpC0=
Subject key identifier: 39:75:F4:C0:98:8A:23:AE:DA:16:42:E9:32:EB:03:2A:24:37:3A:06
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584CAA2732AC29B56DA6D36BC6E0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa
Signing time: Tue 27 Jan 2026 14:00:36 +0000
ROA not before: Tue 27 Jan 2026 14:00:36 +0000
ROA not after: Mon 27 Apr 2026 13:00:36 +0000
asID: 7018
IP address blocks: 66.92.100.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:aa:27:32:ac:29:b5:6d:a6:d3:6b:c6:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Jan 27 14:00:36 2026 GMT
Not After : Apr 27 13:00:36 2026 GMT
Subject: CN=d93ecb31-96c1-4b0c-abdf-029c41a63211
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:06:84:07:0c:2a:1c:18:5a:0c:41:e8:ac:2d:
05:bf:aa:2b:c1:66:99:d0:66:b9:df:d9:32:1c:de:
a3:f5:93:cc:65:d1:52:38:50:0d:68:c0:c5:e3:fe:
81:7c:4c:0c:b9:a9:ff:37:eb:4c:38:47:4f:e0:11:
f1:84:70:32:4e:5f:b4:87:b4:7a:b7:fc:8b:c2:d3:
15:13:14:25:d8:08:fe:f2:79:ca:4f:29:da:23:63:
c0:f8:a6:a7:5e:fd:88:ad:81:f6:a6:3c:9f:ca:18:
c2:78:3d:ec:e7:7a:b5:01:d3:9d:00:b7:6f:81:8b:
af:d1:88:7d:27:c4:fe:30:ae:b6:4b:71:6d:13:bb:
64:54:c2:4c:fd:73:6e:d9:b5:19:4f:0e:3d:57:dd:
5f:d7:5a:7b:d2:10:e2:83:e2:83:31:00:ff:f8:be:
bf:9d:1f:ac:08:17:a3:9c:e8:ba:84:07:32:03:12:
ed:25:60:27:b9:62:e3:09:a9:8d:31:f3:ee:30:e9:
6b:c7:52:28:14:6c:03:2f:7b:58:4b:c9:57:f5:39:
ef:ac:3e:43:f3:37:ba:c2:da:01:ae:87:46:42:a7:
02:ad:6e:ac:a8:90:53:46:5e:70:37:a9:c4:41:d8:
91:83:5e:0a:d7:4f:c0:ee:73:ec:aa:f0:8b:ba:4e:
ba:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:75:F4:C0:98:8A:23:AE:DA:16:42:E9:32:EB:03:2A:24:37:3A:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/cfbd4dd5-2ee6-3403-b0ed-77f4dec740e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.92.100.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:b1:16:e8:c5:49:79:c1:d8:0e:a7:8b:51:59:78:fd:54:7e:
f4:0c:82:f1:e6:9d:29:ea:f1:66:34:53:72:0b:c9:fe:01:0e:
37:9e:a4:5c:ae:18:5a:bc:84:97:60:72:03:db:5d:23:21:ca:
8a:30:61:0d:d3:39:0f:80:c5:46:0c:83:f2:5e:f3:3f:f7:ce:
ce:eb:a2:6f:a1:f6:25:a8:ff:67:ba:43:68:0f:b0:f7:0d:e6:
7c:d8:9c:6f:92:1d:2e:00:e0:ed:dd:17:21:6c:db:59:7b:11:
04:3c:f9:69:c6:e0:1b:a5:6b:82:40:a5:f7:91:da:93:34:46:
36:f5:53:9d:5f:d9:8a:bd:fc:cb:02:70:f7:02:03:06:f1:67:
35:44:01:61:69:81:e2:b1:07:79:78:00:82:50:85:d0:bd:fb:
ed:b2:ac:c4:72:37:99:fd:11:8d:b7:06:86:b9:6a:22:87:50:
97:c4:e5:e7:54:03:19:76:55:44:4a:0a:46:d0:e8:f4:c1:0b:
3b:89:2b:52:7d:99:b0:98:44:d2:11:c1:25:6d:41:0b:6d:a1:
12:48:5d:96:83:83:6d:79:59:7f:f9:4a:55:d8:e9:94:1b:8c:
35:6a:1d:4e:fd:e0:9f:64:86:2a:0c:12:a4:7f:b3:b2:d0:df:
1a:58:a6:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:58:47 2026 by rpki-client