
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
File: d46d8569-5b81-3f6c-b7a8-027002156fc2.roa (raw, json)
Hash identifier: E70BtifwMognbmO1ktY2xueBQ7ji34HyU4B4qFNrAzo=
Subject key identifier: 28:F4:3E:DD:E8:C3:9F:20:B6:E2:C5:08:E5:D1:B4:44:67:56:A9:6B
Certificate issuer: /CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Certificate serial: 010D0C9F4328584F497675B68C20840643B5B0E0
Authority key identifier: 2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40545
IP address blocks: 66.115.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 15 Oct 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:76:75:b6:8c:20:84:06:43:b5:b0:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd37bf6-6955-4ed5-8347-2896767afab0
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=84aae530-d766-4775-9968-677719402cc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cb:bf:79:f8:b2:fc:28:7d:b3:ca:42:e5:ed:
d9:6e:b9:4c:f1:c4:f4:6d:6e:2d:e7:2c:0b:a5:37:
87:4a:9e:8b:4a:4a:f0:52:e1:4c:0a:4f:45:3c:0b:
ac:09:0a:44:0f:94:21:56:b9:e0:c7:66:64:61:49:
4b:7b:a2:96:37:18:80:d9:3a:10:59:fa:65:2a:5d:
24:d2:61:54:c5:47:02:c9:96:b3:95:b4:cc:7e:8a:
e7:2e:2c:2e:0f:f9:23:8e:53:b7:f3:07:3b:b8:4a:
80:d2:20:0f:aa:f0:a1:9e:f7:ea:05:f5:ff:d6:92:
7d:f8:18:c5:b4:c2:1b:c7:8b:14:c7:09:22:6f:25:
7b:9a:41:e1:04:22:9b:c0:d3:c3:74:08:36:a8:f5:
72:a0:7e:ec:80:2e:83:f7:c0:08:59:da:5f:0d:25:
52:1d:c8:72:14:d4:6c:a6:4a:25:9d:32:a7:70:a6:
bc:47:51:3c:3d:2a:a2:6c:b9:aa:b6:da:83:8b:91:
64:99:98:5b:35:b6:87:3a:c6:b0:6b:d4:7b:ed:09:
e4:97:80:d2:46:5e:82:f8:aa:78:fe:28:45:be:b8:
5f:7e:50:e1:d8:e2:de:0b:b6:2a:84:4d:67:14:b5:
2d:db:a0:9c:bc:89:df:63:a5:ee:18:cc:51:c1:d6:
f0:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:F4:3E:DD:E8:C3:9F:20:B6:E2:C5:08:E5:D1:B4:44:67:56:A9:6B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/d46d8569-5b81-3f6c-b7a8-027002156fc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0/3fd37bf6-6955-4ed5-8347-2896767afab0.crl
X509v3 Authority Key Identifier:
keyid:2C:DA:ED:C1:B2:77:C1:C9:C1:4F:A9:F9:F3:3D:2C:EE:A5:59:DB:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3fd37bf6-6955-4ed5-8347-2896767afab0.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:c5:ec:1e:20:ff:63:b7:cf:a1:15:c0:10:f3:c0:7a:73:64:
fe:e2:a1:48:3c:a2:b5:ba:26:60:65:2e:5e:66:a2:2f:6a:53:
1f:ca:16:c3:7a:42:6e:b6:b7:2c:08:66:1b:3a:79:38:9a:ed:
9c:5c:17:08:7e:40:c2:55:70:e4:67:08:b6:ed:b3:47:75:4e:
38:29:4b:c4:a4:5f:5e:8c:51:8f:50:78:44:9d:5d:61:cf:63:
e6:0a:2b:bd:6a:6b:7c:fd:3c:0c:88:ed:07:91:17:e1:c3:76:
22:30:b1:67:cf:67:0a:ef:0a:5e:08:0c:4d:00:f0:ed:04:ae:
fc:cf:87:04:e1:6b:a0:8a:b5:d9:59:0f:2b:0b:e8:ae:30:70:
8e:96:96:85:79:e5:a0:ce:ef:86:e2:d4:25:e5:df:61:1b:65:
13:8f:04:06:69:c7:41:f9:e3:8c:ee:8d:34:a9:c7:ff:b2:b3:
2a:ba:52:ea:18:87:80:b0:5d:4b:9d:49:74:0d:7b:a7:c7:76:
e6:c6:65:aa:35:6d:8c:49:e4:6b:21:ec:a5:62:64:64:b9:42:
86:c4:7f:5d:3a:83:b7:b7:24:66:a4:47:4f:c4:09:e6:38:31:
5c:0f:9c:62:87:68:69:df:10:ca:ae:4b:5a:5b:b0:16:25:c7:
e9:bd:ee:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 14 10:39:39 2026 by rpki-client