
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa
File: e3d19010-3c57-31d1-9452-1c284aeb635a.roa (raw, json)
Hash identifier: TGtduBuOxjp+Ua1GGcaUlD6byipnrMGMNO2y5qFWrYE=
Subject key identifier: 01:83:C5:EB:89:7A:4E:4A:3F:21:B7:6C:44:32:09:8C:81:94:EA:92
Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Certificate serial: 010D0C9F4328584D6AAA68996F910E0FB4208E00
Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 16557
IP address blocks: 66.103.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:68:99:6f:91:0e:0f:b4:20:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=a5556dff-2c1b-46da-aa26-6b87fe097fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4b:e5:6a:34:36:2d:9b:b4:0e:8a:58:67:4d:
dc:a6:58:d4:8f:2c:7e:99:e5:ed:8e:71:b5:8c:1c:
2a:bc:99:b2:9b:b0:bf:47:f0:2a:61:22:4b:41:16:
97:e7:7e:a5:f5:f6:88:0a:68:83:67:1e:72:60:5b:
99:f3:46:cc:55:13:de:27:0a:56:24:77:b5:15:16:
31:af:fd:81:c6:cc:88:52:bd:04:3f:6d:65:71:7f:
44:a3:cc:c2:f0:a5:bb:a0:8f:fe:b3:e9:2c:50:0c:
8d:90:f7:d2:6f:cc:fb:2d:bd:16:f5:9c:82:41:00:
44:5a:d4:2c:bc:f5:73:2f:fc:d2:0b:62:4b:95:1f:
2f:e2:f7:d0:4b:fb:02:9f:64:2b:c9:47:5c:b3:dc:
b8:86:7c:f9:24:44:ed:68:50:cf:c0:d3:b4:8d:fb:
a8:91:46:ef:63:46:fd:d9:18:13:82:91:4c:39:e4:
10:87:75:76:49:e3:6a:ea:2e:72:2d:39:81:37:b5:
08:3b:b4:37:9b:72:40:a0:56:57:dd:8c:75:28:9f:
d8:03:e8:77:26:f1:43:31:9d:4f:cb:b7:b9:fa:57:
ae:53:eb:6d:5b:76:5b:e2:7e:64:10:65:fe:4b:6d:
91:af:03:bd:a0:6d:95:61:72:1b:11:e6:5b:99:40:
8a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:83:C5:EB:89:7A:4E:4A:3F:21:B7:6C:44:32:09:8C:81:94:EA:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/e3d19010-3c57-31d1-9452-1c284aeb635a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
X509v3 Authority Key Identifier:
keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
sbgp-ipAddrBlock: critical
IPv4:
66.103.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:2c:02:2b:cc:66:b4:52:7a:b8:33:56:38:1c:86:ab:db:bf:
49:22:3a:79:3d:56:36:f8:ad:3c:bf:00:52:55:e8:96:f3:2e:
c3:37:7d:80:95:8f:49:3f:be:fa:f8:e7:10:d6:44:3b:2e:df:
b0:36:24:9c:7f:7a:ed:66:86:4c:53:6b:0c:6d:a5:9f:f3:03:
c1:8f:13:b4:af:82:d0:93:fc:67:4e:ff:ac:71:0f:f1:56:62:
53:51:27:68:a7:ee:b2:80:b1:79:3b:bc:10:ee:b3:17:ac:30:
f7:f9:94:85:48:e8:b4:40:81:7e:73:da:4f:0a:7c:36:33:aa:
8b:42:40:13:52:aa:a1:f7:6d:9f:e2:b8:e0:34:63:a6:be:8b:
88:b1:87:bd:42:72:48:82:c7:02:fc:92:5f:ea:5c:a3:a5:b8:
bf:b8:35:b0:1a:59:83:97:60:54:15:59:17:5f:5e:7d:19:f1:
35:a1:69:77:ee:04:f9:71:1b:fa:da:45:8f:68:3b:64:c6:f5:
8b:fb:3b:9f:6b:09:cc:a1:7b:5f:9c:ba:9d:06:b9:83:d8:b7:
a3:58:60:b7:fc:57:60:84:43:c5:c1:2c:92:6c:1b:7a:a7:82:
c2:10:46:50:89:08:fe:2f:f8:0c:ca:7a:71:09:91:ec:ff:37:
33:18:ab:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:23:07 2026 by rpki-client