
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa
File: dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa (raw, json)
Hash identifier: pZJL1QI1Gg91sMJK3/HxdbrOqg73FrG27XU5+SN/OhY=
Subject key identifier: B9:0B:96:8C:EB:77:D6:88:0A:E1:59:B0:D3:70:11:E2:F2:2A:C9:58
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584F4F0801AD17B51CCF289F94D0
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa
Signing time: Sun 27 Sep 2026 01:00:12 +0000
ROA not before: Sun 27 Sep 2026 01:00:12 +0000
ROA not after: Sat 26 Dec 2026 02:00:12 +0000
asID: 834
IP address blocks: 66.253.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:4f:08:01:ad:17:b5:1c:cf:28:9f:94:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: Sep 27 01:00:12 2026 GMT
Not After : Dec 26 02:00:12 2026 GMT
Subject: CN=e918f637-1d8f-4cf7-8c9d-a4def097b606
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:81:0b:6b:1d:4e:6c:a9:02:14:de:68:92:90:
e1:68:fc:8e:b0:56:92:cd:a5:eb:18:35:7b:38:56:
54:50:bd:7f:16:38:e3:cc:66:f1:43:b3:cc:96:59:
b6:75:86:47:24:fd:35:05:55:94:2c:35:5d:fb:45:
22:a6:93:0b:e6:38:a3:cf:cf:7c:61:93:a0:1c:b3:
f6:0f:7b:36:41:56:ea:fe:b2:1b:da:42:30:6e:63:
f2:21:f5:70:d6:40:60:58:28:21:b0:e6:57:d3:ea:
07:71:60:f0:c8:2f:1f:a1:78:07:45:ae:d9:f2:2f:
65:80:f6:53:f4:13:b6:49:65:1f:19:99:40:e8:0e:
15:21:c5:56:d1:ca:2d:d4:45:fc:c0:89:77:ce:6d:
80:c2:34:78:bc:72:cd:97:28:cb:64:75:53:0e:08:
03:1e:46:92:7a:e5:73:e8:63:7a:82:34:f7:b6:53:
4b:f4:77:3d:ae:99:b8:8b:6c:ee:c5:d9:05:fa:10:
ee:e2:f8:9a:14:d1:11:f1:1a:f2:80:d7:1e:87:e0:
89:7e:21:e4:b2:3b:a6:84:d7:5a:2d:28:53:e0:19:
a8:fd:43:c6:3c:d9:e5:e9:1c:85:78:db:69:d8:2a:
b6:5a:bb:d6:61:c3:3c:b8:0d:c5:83:15:2b:84:78:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:0B:96:8C:EB:77:D6:88:0A:E1:59:B0:D3:70:11:E2:F2:2A:C9:58
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/dfc1c6ca-4e05-319b-af21-9825088e6fc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:d4:49:5c:b9:bd:88:08:57:79:b3:a8:b1:75:30:fc:0d:73:
83:62:ce:94:2c:f6:78:8c:bd:19:28:a8:c4:f9:43:ab:1f:0e:
03:fe:47:51:32:08:3b:92:22:4f:ea:f5:85:70:39:53:76:13:
c0:22:13:6d:c7:98:76:92:7c:be:a1:5a:9c:7c:7a:63:24:a2:
05:51:f0:fe:20:4a:a0:d9:27:6f:4d:b9:4e:a0:87:1d:af:ad:
24:2c:6c:89:ca:5e:a6:af:86:b2:6f:24:17:18:d5:67:54:02:
2d:a6:c1:e9:7f:24:d2:9e:e9:cf:7d:b0:62:58:3f:cd:91:5a:
17:37:b3:9e:cb:30:ff:cd:8e:3c:ae:ea:1e:1b:69:83:2a:3e:
6d:0b:ff:75:ce:07:b4:d0:88:23:c4:a5:0b:29:71:b3:f7:39:
4e:1e:e2:50:89:41:3a:89:85:98:63:98:2c:11:40:4c:47:92:
a3:9e:36:8e:5e:4f:32:0c:51:7e:89:f6:55:6d:0b:ac:11:1d:
71:3d:44:33:af:07:6e:33:46:1c:24:e2:5c:f7:7f:ca:f0:88:
20:eb:1c:81:4b:17:46:56:1c:92:6c:89:cd:a9:ec:28:2b:8b:
7b:f1:46:99:d1:2e:8d:9c:e0:84:eb:cd:90:9d:e5:fc:bb:c0:
e2:df:01:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 05:22:04 2026 by rpki-client