
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa
File: c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa (raw, json)
Hash identifier: fhhiN3qmlwE9MsbMVnm4bHSIkGbqSFGH4zjabt5av/8=
Subject key identifier: 56:2F:02:05:77:F3:60:10:8B:71:B6:CE:A9:5E:69:37:F3:5A:4D:BE
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584D237A61166A61EC8248413FC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 197450
IP address blocks: 23.26.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:61:16:6a:61:ec:82:48:41:3f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=49acd066-0632-417d-a07f-f2c327e334d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:a9:1d:34:7b:21:bf:40:21:f4:d7:42:63:af:
a8:e1:31:44:1b:5c:11:99:2e:f7:8e:5b:dc:57:f9:
81:e5:94:e7:10:69:e1:41:e2:60:27:a2:c8:ef:bf:
d5:ec:de:81:24:31:5b:42:7e:42:cf:8c:71:53:c0:
b3:b6:9a:07:94:40:f2:44:04:fe:44:ad:26:62:1e:
18:1b:d9:b3:fc:bd:ed:e9:fa:96:69:16:38:f3:3e:
d2:23:81:92:8f:79:8c:c8:06:90:c9:f1:42:05:23:
66:0f:cb:18:b9:97:72:a4:22:ce:4f:80:57:bf:50:
b0:b6:3c:34:26:b8:9e:7a:f1:16:27:8f:4b:b7:48:
38:e7:04:4e:3b:2d:d8:5b:2c:ac:aa:70:5f:31:fe:
f1:f9:3d:07:ca:6c:87:29:18:e0:55:ad:3a:61:64:
70:de:77:60:c6:40:70:3d:d1:ac:75:ea:96:1a:36:
93:bc:7b:b1:ff:7c:12:ad:66:1c:49:4c:0d:b6:68:
84:ad:3c:b2:70:1f:3e:ff:65:f6:59:62:98:91:5e:
02:e2:7d:cb:03:fa:f8:0f:74:8d:9c:14:69:a1:ee:
42:4e:ce:21:2a:42:5f:cd:80:00:95:e8:81:21:8f:
8f:84:a4:ad:6a:df:c6:ef:af:4b:f7:5b:b3:e7:ec:
49:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:2F:02:05:77:F3:60:10:8B:71:B6:CE:A9:5E:69:37:F3:5A:4D:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/c02c67ef-0442-39b6-b4e2-4797b0a38c5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
23.26.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:24:54:81:a0:d0:0c:1e:84:b6:45:cd:f0:d0:04:a2:fd:b4:
31:36:04:eb:78:de:fb:5a:2a:3d:4a:41:bb:b3:9c:70:b6:34:
fe:ec:cc:dd:18:80:63:04:a9:5a:34:f5:a7:c0:51:15:6d:1c:
bf:f8:32:6e:04:c4:e7:c4:3a:bc:89:8b:94:01:5a:a2:db:00:
47:4b:1c:a4:e0:cf:d0:fb:4e:9c:d4:8f:69:3c:ae:dd:b7:57:
c4:5d:5c:18:cf:05:c0:b6:49:66:bf:de:c3:db:63:f7:25:12:
75:20:f0:0d:2f:10:35:18:bd:66:0c:11:c1:f2:4f:9d:0f:5e:
fa:54:49:82:24:b3:7e:67:f5:bf:5a:e2:0b:09:18:0b:42:7f:
93:17:54:53:6d:43:1c:36:0f:61:91:2e:e0:c8:82:86:82:4d:
78:01:69:12:4a:bf:0e:ee:f0:7c:14:aa:3a:6b:8e:fc:28:74:
05:b0:06:fa:da:50:e0:af:4a:bf:a7:4d:b2:d0:16:d0:9b:d4:
9b:b2:12:d8:2e:8e:8d:49:fd:36:f0:95:fb:17:ac:ef:9b:2e:
1d:3a:0f:be:fa:1f:90:7c:6d:68:d1:e9:b3:04:16:cd:dd:d5:
2f:f0:9a:c4:c3:77:4f:f7:38:b0:a7:1a:ab:a9:4b:9a:ef:68:
fa:a6:a6:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:40:07 2026 by rpki-client