
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa
File: aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa (raw, json)
Hash identifier: jnUDPXcgHEvDutzlXY2osJlbCEsoXe1iy11LXY2LRiU=
Subject key identifier: 3F:B0:B6:E5:61:3D:0E:D0:27:AB:7E:26:FD:41:D9:AC:18:66:73:C6
Certificate issuer: /CN=58d2b29f-1da9-4b65-a82f-389822bed566
Certificate serial: 010D0C9F4328584D6AAA7B5224FD2452EB514940
Authority key identifier: 3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 14618
IP address blocks: 66.81.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:7b:52:24:fd:24:52:eb:51:49:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d2b29f-1da9-4b65-a82f-389822bed566
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=c3404ee1-6a86-4adc-ab49-2e8eb5284675
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:f9:e3:4f:c8:a1:53:87:3b:1f:25:43:15:cf:
2d:f6:61:1d:f9:15:ae:7c:30:a3:5e:ab:d7:04:03:
c9:e3:e6:69:98:56:01:6e:c0:bf:b2:ca:cf:6e:44:
7f:d7:04:4d:37:e9:14:30:f0:72:57:0f:ae:97:00:
f8:88:5d:ea:16:88:c2:e5:2b:f0:97:14:20:0e:59:
28:22:28:b1:28:e8:9c:b4:69:8d:91:fe:ca:7a:86:
2c:77:56:a9:b5:d1:eb:d1:3b:0d:c0:54:76:52:da:
ed:0b:fb:93:ff:cb:c7:8d:62:b0:78:70:76:69:59:
67:c7:46:1d:2e:77:99:d2:6c:55:2a:de:3d:09:d3:
2a:c9:13:8b:b1:c5:de:39:8c:df:d1:e4:a1:12:4e:
5b:0d:4c:a0:2d:06:18:dd:84:80:71:df:bc:8b:bd:
d6:35:27:78:3a:92:12:76:52:5e:16:bd:cb:fc:49:
cb:4e:ac:cf:72:5c:3b:3c:c9:c7:4a:19:88:4c:86:
99:96:03:9a:58:d9:ae:e1:70:5a:d0:d7:c0:46:9a:
69:1f:55:4a:73:4e:55:29:b2:71:f7:b5:83:ca:77:
36:c1:8e:d4:3a:f9:87:a5:aa:e8:0a:76:5f:41:e1:
cd:5d:78:10:80:d7:09:cf:f0:ce:00:05:b7:cc:c8:
98:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B0:B6:E5:61:3D:0E:D0:27:AB:7E:26:FD:41:D9:AC:18:66:73:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/aa4544c7-0c2f-3685-8adb-f5bcb3db62e0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566/58d2b29f-1da9-4b65-a82f-389822bed566.crl
X509v3 Authority Key Identifier:
keyid:3F:C5:A3:7A:1A:1F:74:88:44:CA:33:CB:C7:AD:B9:B5:60:EA:10:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/58d2b29f-1da9-4b65-a82f-389822bed566.cer
sbgp-ipAddrBlock: critical
IPv4:
66.81.241.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:f1:43:a6:a3:1b:2d:95:2d:ff:5c:2d:f2:6b:0e:ec:62:34:
a8:b7:14:74:f1:02:bc:55:7c:a6:ac:48:fe:ee:51:10:c1:09:
bc:49:3b:40:32:cb:22:03:e1:90:02:6d:5b:0a:8b:bc:a3:6b:
7e:1a:74:cc:e5:da:6f:f6:47:dc:38:e0:67:ec:7a:fb:d2:38:
af:8a:72:26:e6:a7:d8:a0:ec:e2:5d:e2:6b:b9:31:14:e6:3a:
2d:84:57:db:c0:c0:2f:d2:d5:3c:20:82:33:75:9e:74:b5:07:
39:a8:66:24:bc:2d:e9:59:41:7d:e7:97:a6:df:a8:91:46:d1:
49:d5:3c:73:b1:53:fd:98:9b:67:b2:a2:7d:8d:5e:90:a8:4d:
7d:d0:71:06:b7:69:2c:1d:f9:0f:35:cc:0e:08:50:81:b4:9a:
32:45:e2:46:27:54:ca:1f:b4:36:cd:53:8d:cb:00:66:64:b6:
f6:52:b4:a6:b9:2c:39:ae:04:0c:2e:17:4d:51:96:6c:96:f9:
47:64:ee:cb:9d:16:a6:c1:bc:96:9f:1c:36:57:80:77:2b:c9:
5d:fd:e8:27:3a:38:ad:ab:44:89:47:cb:a6:51:36:27:5a:26:
10:ef:ab:43:29:98:e9:0f:a8:26:b2:d9:a8:a0:9d:44:af:c4:
5a:dd:c6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:51 2026 by rpki-client