
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/1639d8d4-cfd6-377d-bdd6-763711296f64.roa
File: 1639d8d4-cfd6-377d-bdd6-763711296f64.roa (raw, json)
Hash identifier: D+p29WQeHqaYjOyVPrP8ZTNyMxhQJqIl+7O2etadFnY=
Subject key identifier: 59:D0:C2:3A:E4:D0:C8:1F:FA:52:EA:5B:72:F0:CD:74:12:5C:0D:89
Certificate issuer: /CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
Certificate serial: 010D0C9F4328584D0EDFEEC315924BA1AC767280
Authority key identifier: E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/1639d8d4-cfd6-377d-bdd6-763711296f64.roa
Signing time: Wed 04 Mar 2026 15:54:05 +0000
ROA not before: Wed 04 Mar 2026 15:54:05 +0000
ROA not after: Tue 02 Jun 2026 14:54:05 +0000
asID: 396168
IP address blocks: 66.33.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:df:ee:c3:15:92:4b:a1:ac:76:72:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e67a374-dbd3-4bfa-b82c-6dbfd64e578f
Validity
Not Before: Mar 4 15:54:05 2026 GMT
Not After : Jun 2 14:54:05 2026 GMT
Subject: CN=cddefca0-1eb2-409c-97aa-7203cd9c520d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:62:05:2f:6b:cf:96:71:47:33:c9:44:35:5e:
22:9b:b9:8c:e1:23:39:47:a1:c9:39:9c:c7:57:b2:
66:c0:df:fd:02:3d:50:a8:2d:31:52:d2:3e:7f:bc:
c1:64:9c:d6:ad:bf:86:be:20:4b:58:d6:56:d9:d8:
4f:f0:23:91:41:91:8f:ad:94:f7:86:47:11:cb:ed:
f0:31:a4:f9:b0:42:23:a9:90:19:6d:67:9e:ff:79:
f8:bd:3f:31:0b:e0:f2:dd:73:14:3c:ce:99:d3:fa:
51:db:94:e2:a4:e5:1e:23:70:c6:bb:e6:16:7e:55:
ad:75:46:c9:80:98:fa:9d:c5:2c:82:42:b6:89:78:
05:2d:cc:90:fc:0c:d9:9e:78:f0:c7:ee:0b:d0:ca:
9d:71:25:c1:a3:a3:56:03:b7:5f:a9:ae:f8:d4:bc:
8b:2d:57:f6:9c:5a:b2:c1:74:d3:50:67:bf:ef:cb:
78:29:13:59:bc:28:5b:dc:61:1f:3e:4c:cd:7c:4f:
24:32:57:26:94:6d:dd:0d:a8:b9:86:b5:1f:fe:b3:
7d:3e:30:15:e7:ff:7c:f2:83:ff:13:91:84:c7:b2:
81:f4:f5:d7:f2:d6:60:5a:10:da:ef:56:56:21:23:
1c:82:42:31:b8:2c:cb:f3:dc:91:04:01:17:27:e0:
a9:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:D0:C2:3A:E4:D0:C8:1F:FA:52:EA:5B:72:F0:CD:74:12:5C:0D:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/1639d8d4-cfd6-377d-bdd6-763711296f64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.crl
X509v3 Authority Key Identifier:
keyid:E0:46:95:91:28:13:2F:D5:8E:63:B8:8F:2A:43:52:C4:C3:A1:39:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2e67a374-dbd3-4bfa-b82c-6dbfd64e578f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.78.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:46:0c:ee:b9:8e:ba:ea:1d:9c:c4:42:6d:ca:54:f2:e3:1f:
43:f0:3a:03:3f:cc:cd:60:52:2b:af:5b:0e:e8:e6:27:eb:b7:
25:c9:92:6a:95:85:f2:40:2d:17:37:ff:d5:a2:d6:42:9c:9c:
56:b5:8c:10:34:12:10:37:01:39:a9:ab:de:ba:1f:7f:26:dd:
03:45:00:79:a2:6d:15:9f:ef:df:fc:0e:63:56:6a:45:b6:4e:
6a:32:4e:48:34:28:b2:9f:36:d8:08:cd:ff:72:90:bf:b9:9e:
45:00:ed:be:58:2e:74:3f:90:14:4b:39:f0:4b:e4:23:34:d3:
2f:af:1e:4b:27:d3:6b:0f:22:4e:0e:8d:06:50:e8:ea:ce:a9:
f8:6e:d8:7c:cf:3e:45:07:69:b8:e3:3c:83:77:05:2c:bf:80:
bc:2a:3e:36:b2:47:24:51:0e:d7:5d:fa:a7:dd:43:81:e2:93:
6d:24:4e:ee:23:0d:b4:b0:81:49:72:88:6c:14:11:de:07:b1:
ba:a7:2b:19:6d:a2:7a:ad:ad:d6:c3:1c:7a:c5:a1:f3:75:d3:
0b:8f:9d:6c:ee:4f:b9:18:2b:eb:f1:5b:38:a4:7b:f1:29:90:
4e:b1:ee:88:04:f5:7a:8e:f0:d2:4b:e4:66:1f:78:49:4b:78:
84:fc:dd:8d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0O3+7DFZJLoax2coAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmU2N2EzNzQtZGJkMy00YmZhLWI4MmMtNmRiZmQ2NGU1
NzhmMB4XDTI2MDMwNDE1NTQwNVoXDTI2MDYwMjE0NTQwNVowLzEtMCsGA1UEAxMk
Y2RkZWZjYTAtMWViMi00MDljLTk3YWEtNzIwM2NkOWM1MjBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwWIFL2vPlnFHM8lENV4im7mM4SM5R6HJOZzH
V7JmwN/9Aj1QqC0xUtI+f7zBZJzWrb+GviBLWNZW2dhP8CORQZGPrZT3hkcRy+3w
MaT5sEIjqZAZbWee/3n4vT8xC+Dy3XMUPM6Z0/pR25TipOUeI3DGu+YWflWtdUbJ
gJj6ncUsgkK2iXgFLcyQ/AzZnnjwx+4L0MqdcSXBo6NWA7dfqa741LyLLVf2nFqy
wXTTUGe/78t4KRNZvChb3GEfPkzNfE8kMlcmlG3dDai5hrUf/rN9PjAV5/988oP/
E5GEx7KB9PXX8tZgWhDa71ZWISMcgkIxuCzL89yRBAEXJ+CpLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFnQwjrk0Mgf+lLqW3LwzXQSXA2JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3
YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJmZDY0ZTU3OGYvMTYzOWQ4ZDQtY2ZkNi0z
NzdkLWJkZDYtNzYzNzExMjk2ZjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmU2N2EzNzQtZGJkMy00YmZhLWI4
MmMtNmRiZmQ2NGU1NzhmLzJlNjdhMzc0LWRiZDMtNGJmYS1iODJjLTZkYmZkNjRl
NTc4Zi5jcmwwHwYDVR0jBBgwFoAU4EaVkSgTL9WOY7iPKkNSxMOhOY4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZTY3YTM3NC1kYmQzLTRiZmEtYjgyYy02ZGJm
ZDY0ZTU3OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiFOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpGDO65jrrqHZzEQm3KVPLjH0PwOgM/zM1gUiuvWw7o5ifrtyXJkmqV
hfJALRc3/9Wi1kKcnFa1jBA0EhA3ATmpq966H38m3QNFAHmibRWf79/8DmNWakW2
TmoyTkg0KLKfNtgIzf9ykL+5nkUA7b5YLnQ/kBRLOfBL5CM00y+vHksn02sPIk4O
jQZQ6OrOqfhu2HzPPkUHabjjPIN3BSy/gLwqPjayRyRRDtdd+qfdQ4Hik20kTu4j
DbSwgUlyiGwUEd4HsbqnKxltonqtrdbDHHrFofN10wuPnWzuT7kYK+vxWzike/Ep
kE6x7ogE9XqO8NJL5GYfeElLeIT83Y0=
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:44:47 2026 by rpki-client