
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/41f7e607-4964-3cbf-a181-8113622981e9.roa
File: 41f7e607-4964-3cbf-a181-8113622981e9.roa (raw, json)
Hash identifier: DrzVu/E08cJtAikrDi4ZSONhAKJHtXbJW9uig7lCvto=
Subject key identifier: 66:60:C1:DD:8D:90:12:E3:9D:94:08:71:31:DF:D7:DF:4D:E1:A8:D9
Certificate issuer: /CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Certificate serial: 010D0C9F4328584E86F4EF24EDCD0E1523338E00
Authority key identifier: E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/41f7e607-4964-3cbf-a181-8113622981e9.roa
Signing time: Fri 17 Jul 2026 09:00:14 +0000
ROA not before: Fri 17 Jul 2026 09:00:14 +0000
ROA not after: Thu 15 Oct 2026 09:00:14 +0000
asID: 22808
IP address blocks: 66.112.128.0/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:f4:ef:24:ed:cd:0e:15:23:33:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f240d902-7ba3-4aec-b663-471f0fabfe37
Validity
Not Before: Jul 17 09:00:14 2026 GMT
Not After : Oct 15 09:00:14 2026 GMT
Subject: CN=8c22baed-0fed-4b89-817d-c7e5d30d15ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:bb:10:8e:e8:5b:a9:bd:1b:43:37:8e:a5:e3:
2a:5b:7b:5c:19:37:c1:bd:94:88:2c:c0:b3:24:f4:
2c:e6:5d:14:c7:39:05:30:a5:12:be:95:62:3a:62:
c5:09:b1:be:ac:62:07:17:ce:55:a5:75:6c:97:a3:
ba:7e:96:37:e5:ef:47:db:9f:42:46:b1:93:8e:b2:
0e:5e:b1:61:04:69:d6:80:12:c9:2e:aa:5f:34:d7:
fd:00:12:bc:0c:68:13:45:f0:71:c3:52:55:1a:6a:
c2:22:d8:32:a0:d8:2b:b6:74:e6:b0:57:92:b7:1f:
6a:89:38:0b:7b:f6:d9:d9:77:df:6f:a2:31:9a:20:
6f:70:1c:9d:f9:2c:dc:d4:70:7f:5d:35:e1:11:72:
de:9a:15:9d:57:33:d4:01:7b:8b:06:e9:10:15:20:
54:fb:ec:d7:c3:61:e3:26:0c:1a:a5:eb:1a:cd:a6:
22:93:c3:d3:53:ea:0e:bf:ce:c9:25:8f:3f:4f:38:
a7:ce:05:b8:5e:d2:b8:db:5f:b7:05:c6:10:d8:07:
25:8a:7b:1f:f8:e9:32:e4:64:51:dd:b1:b6:83:55:
29:3a:60:18:3b:ab:2e:24:40:f8:b0:cf:b5:86:5c:
99:fb:57:cd:f1:76:a8:58:19:b1:8c:39:c5:1f:10:
db:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:60:C1:DD:8D:90:12:E3:9D:94:08:71:31:DF:D7:DF:4D:E1:A8:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/41f7e607-4964-3cbf-a181-8113622981e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37/f240d902-7ba3-4aec-b663-471f0fabfe37.crl
X509v3 Authority Key Identifier:
keyid:E4:57:D5:28:0C:09:9C:2A:7E:A8:A5:80:B1:6F:F6:B0:BA:4C:F1:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f240d902-7ba3-4aec-b663-471f0fabfe37.cer
sbgp-ipAddrBlock: critical
IPv4:
66.112.128.0/29
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:ba:59:59:ba:7d:9a:29:ae:3f:89:ea:97:a1:5f:c4:2e:9b:
86:5d:87:67:df:9d:04:ba:7f:f2:31:0d:b9:8f:10:9c:f7:34:
37:f7:8f:3e:83:e8:cc:92:34:c0:30:02:1b:1f:6a:e4:95:e6:
0d:a4:3a:1f:36:e5:34:d3:87:26:f2:27:f3:32:5e:c9:18:5c:
60:65:c8:60:48:d7:7e:e9:69:3a:d8:d4:36:db:54:b8:ed:65:
c8:c5:e7:b2:1a:4c:91:83:eb:94:0c:16:94:e7:98:dd:a7:cc:
29:8c:0b:91:56:5d:f5:e3:5d:a6:02:3e:82:c5:8d:c0:50:31:
98:13:96:b0:df:a6:71:46:f2:30:2d:cb:15:66:0b:84:ac:37:
6b:f6:47:a4:b5:c1:ef:a7:3d:35:82:92:34:1f:cf:23:44:8b:
7b:63:90:23:ef:f6:9a:f4:db:9b:2f:01:c1:a1:29:1b:2a:9e:
b0:de:b3:99:32:b7:dc:e8:39:a6:47:69:bf:4f:74:18:7d:c3:
e6:55:b3:a5:75:8a:14:66:03:3b:e9:d3:d9:79:cb:72:a5:6c:
ca:f6:b3:24:29:90:9b:82:9f:00:d2:ca:b7:37:4a:58:12:7a:
64:f0:a3:86:3a:36:f2:b4:f0:1c:d3:00:c4:13:c7:75:33:b1:
26:4f:3c:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:43:27 2026 by rpki-client