
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a40d627-707a-30e0-905b-cdc406086e11.roa
File: 3a40d627-707a-30e0-905b-cdc406086e11.roa (raw, json)
Hash identifier: spPQZhqPKpgQyZ7ynmQduz4cHywpR+2UsZRyXfTwAXg=
Subject key identifier: A2:79:80:07:E3:3C:29:16:12:4D:67:CD:E2:87:A9:EA:54:3D:D4:B4
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584F331D1A911D21992264CED880
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a40d627-707a-30e0-905b-cdc406086e11.roa
Signing time: Thu 17 Sep 2026 01:00:11 +0000
ROA not before: Thu 17 Sep 2026 01:00:11 +0000
ROA not after: Wed 16 Dec 2026 02:00:11 +0000
asID: 29802
IP address blocks: 108.165.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:33:1d:1a:91:1d:21:99:22:64:ce:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 17 01:00:11 2026 GMT
Not After : Dec 16 02:00:11 2026 GMT
Subject: CN=19eece1b-5c7b-4370-a3f0-e7206a28af34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e7:e9:22:6e:bf:ad:00:f0:bc:1a:eb:f8:3a:
4f:ad:a7:78:42:0c:ce:d6:6e:d2:d2:d9:2c:56:bb:
50:f0:39:98:ad:ed:8c:f8:e2:38:6a:37:ab:0c:22:
41:da:77:7a:a7:b2:a3:54:84:24:83:78:5e:3b:d9:
99:4a:ab:61:86:38:57:b7:03:e4:d9:30:72:ba:38:
3c:09:2a:5c:54:8f:5e:da:2e:60:2b:11:4d:f9:e4:
df:76:77:e4:fd:50:b4:04:fd:5b:d1:2c:aa:8c:94:
6b:0d:0a:94:53:28:1c:c8:10:4c:4a:db:cd:14:4e:
de:44:0e:76:6c:9f:f5:25:af:65:9d:08:91:84:b5:
9a:b8:9a:70:e0:7a:33:fb:f6:63:cc:14:e2:44:75:
63:3f:1b:57:7e:d5:48:2a:29:19:79:6d:50:f8:b5:
38:c0:7c:c6:66:d7:5c:b2:f9:23:7c:c0:94:82:18:
7b:3b:1f:38:c2:dd:6d:20:fb:de:51:3a:a5:4b:79:
6e:66:a7:13:be:c9:ab:b4:7b:44:ef:cb:38:72:de:
43:5d:d2:ab:9d:5e:1e:ca:16:3f:3b:e4:76:a5:f6:
cc:cd:d2:98:53:80:e3:32:0b:34:76:03:8a:14:1f:
05:5e:9b:5f:b3:ac:c9:97:50:0f:f7:50:32:1c:6e:
12:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:79:80:07:E3:3C:29:16:12:4D:67:CD:E2:87:A9:EA:54:3D:D4:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/3a40d627-707a-30e0-905b-cdc406086e11.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
108.165.167.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:d4:ed:12:db:dc:8a:ae:1a:89:61:07:fd:06:32:be:eb:42:
6a:27:d5:37:06:76:0e:4c:2c:56:cf:c5:b6:cd:34:f1:61:e9:
79:e2:7b:ee:28:65:65:dd:19:e6:fe:d3:cf:00:b9:73:d6:d0:
b4:ca:d1:fb:14:50:60:cc:d6:45:cf:d9:a5:d4:13:bc:44:02:
5a:64:5d:4f:7b:44:9a:d2:58:e1:1d:a8:29:43:76:69:37:0b:
6f:06:18:b3:91:b3:19:0d:a6:84:59:45:08:8b:2b:a0:67:fb:
87:bb:c5:25:e4:a7:62:6a:69:36:dc:5b:4c:f0:6d:9c:4e:97:
11:bc:04:f6:15:3f:2b:b3:9c:a3:81:8d:96:c7:ba:3a:75:5e:
6b:26:df:4e:ea:1e:a9:b5:24:aa:38:0f:03:2e:24:58:04:3d:
1a:e7:92:f8:a9:7c:4f:28:4d:47:c4:34:83:9b:ee:f3:f8:d2:
80:8e:07:26:ab:27:f6:32:09:27:24:5d:a1:e3:46:ff:e0:d2:
1c:3e:53:01:18:71:36:1f:d6:7e:c8:9c:81:69:20:f3:24:03:
0c:15:93:5a:9e:57:5f:88:9c:81:be:a1:ce:1f:f5:68:a7:12:
1b:1d:ce:60:23:7e:f5:55:32:ea:db:8f:37:90:12:2f:ad:1a:
d0:c3:d6:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:41:32 2026 by rpki-client