
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/fe443d95-de47-3d39-8312-5fe53fbde018.roa
File: fe443d95-de47-3d39-8312-5fe53fbde018.roa (raw, json)
Hash identifier: RGHzd+nzBBk6tEmkCAvosXspD2AbE5nfTwp6CcwcjAQ=
Subject key identifier: B4:15:BE:7E:FF:27:F9:74:2F:EF:1E:B1:82:28:9E:B4:10:DB:A0:7B
Certificate issuer: /CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Certificate serial: 010D0C9F4328584D6AAAA8B4FD0BD35D7916E440
Authority key identifier: B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/fe443d95-de47-3d39-8312-5fe53fbde018.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 16557
IP address blocks: 66.103.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:a8:b4:fd:0b:d3:5d:79:16:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21a3a15f-e6ea-4382-83cd-f39cece97b2e
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=64440362-9993-4d86-ac9e-7ea6ea5b77c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:d7:d1:05:d4:f5:d7:f3:93:85:9c:65:ee:1c:
3e:e3:ce:bf:d6:4b:a2:49:83:e0:06:0f:0c:d3:97:
34:e2:8c:88:a6:54:63:05:a7:90:42:9a:da:a4:3a:
69:6a:fb:b2:a9:34:db:7e:0e:94:88:ce:d2:76:66:
e5:81:be:15:22:94:98:b6:46:c8:dc:a0:b4:13:04:
72:52:9d:7e:21:7b:d3:be:ad:3a:b8:7b:bd:17:bc:
8a:49:c3:56:04:d2:18:1b:17:dc:00:15:e0:0c:4b:
57:ae:57:f1:85:a4:e0:43:ae:cb:08:bb:5b:71:ad:
1e:c3:50:cb:1d:24:83:97:07:bd:50:91:97:23:d9:
95:63:3d:a0:41:7f:f3:98:26:d6:f0:08:9e:29:fe:
0c:c6:3e:2a:bd:84:f7:8f:42:63:69:f9:4c:85:2f:
75:11:d8:c3:a5:06:47:35:bb:02:45:07:29:84:92:
f6:ed:81:1f:8a:6f:cf:bb:0a:85:b1:35:47:d3:88:
71:ad:0f:fa:c8:59:56:a9:b8:a0:66:8c:de:dc:8d:
7d:27:7f:47:40:6c:c1:d8:22:e5:17:ab:d6:92:fd:
c1:35:ca:bb:e8:87:11:eb:74:85:17:f4:33:86:e1:
d3:c9:5f:56:05:fd:f3:92:ee:e6:9c:97:31:85:58:
9f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:15:BE:7E:FF:27:F9:74:2F:EF:1E:B1:82:28:9E:B4:10:DB:A0:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/fe443d95-de47-3d39-8312-5fe53fbde018.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e/21a3a15f-e6ea-4382-83cd-f39cece97b2e.crl
X509v3 Authority Key Identifier:
keyid:B6:EC:62:20:F3:F1:47:93:DB:95:88:C7:43:CC:57:DA:72:6E:0E:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/21a3a15f-e6ea-4382-83cd-f39cece97b2e.cer
sbgp-ipAddrBlock: critical
IPv4:
66.103.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
17:f9:85:84:9b:aa:17:c7:37:07:8c:aa:f9:78:27:2a:d0:16:
64:d9:4b:41:9e:92:9c:62:f8:a5:7d:a8:be:ac:93:d6:42:8d:
51:79:89:12:d8:36:92:71:61:84:79:ce:87:34:e4:74:1c:2e:
0a:ce:1a:64:4d:05:b9:53:19:a6:c6:ab:ad:f1:38:d2:34:16:
34:41:fe:da:11:45:0c:6b:00:7f:26:1f:81:61:ef:31:c7:c2:
5f:63:f6:13:4a:a9:38:bc:31:d3:ad:ce:b2:cc:e6:3b:a7:86:
23:b7:87:02:ba:e2:6d:25:14:96:32:98:1a:84:28:f3:43:0a:
c8:1f:91:e0:f1:98:f1:04:bb:f7:57:53:7a:91:35:bb:d5:e3:
f8:e1:9c:97:26:b2:f6:60:86:a7:c9:12:e1:16:f7:38:be:4d:
c3:16:15:af:14:3a:a2:9c:37:f8:0f:7f:db:34:3f:25:fd:52:
84:ff:6b:b9:a9:98:6d:a2:c5:b6:a8:43:c0:c3:08:19:86:e9:
b9:a1:56:e5:e2:8b:b6:9d:86:8a:6e:bc:ba:25:db:7a:67:64:
b6:b8:7e:1b:27:57:a6:fd:9f:91:75:b6:35:01:ac:c7:12:15:
81:80:8a:b3:66:8c:2f:31:92:8a:38:2d:eb:5a:30:bf:c6:3f:
b1:dd:5f:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:17:25 2026 by rpki-client