
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa
File: 0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa (raw, json)
Hash identifier: gcC6K/epxXd771b3T1OgOxQwvAl2FwU8JCiVIgoLDdA=
Subject key identifier: E2:DC:45:EA:06:95:B7:B0:EB:3B:60:6F:3E:95:CD:1D:37:95:4F:09
Certificate issuer: /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial: 010D0C9F4328584D9A2018009A2641AD57A88740
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 8015
IP address blocks: 66.179.16.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:18:00:9a:26:41:ad:57:a8:87:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=17ed424e-0eb2-456d-81d6-c8010d0e1b6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:63:3c:ac:12:b0:46:31:e2:59:8e:1c:00:09:
5c:c6:df:bf:60:b6:c1:90:2c:47:64:5d:4c:7b:62:
e2:b6:f3:62:e2:09:be:0b:04:7e:d0:31:7a:09:1f:
32:45:08:5a:66:cc:a6:5f:ea:f5:e1:3e:15:98:47:
75:07:5c:cd:3c:50:ab:ad:87:1f:69:35:7c:74:75:
25:ce:60:8f:e3:ea:23:07:62:3d:12:41:57:fd:09:
d8:2a:af:66:59:bb:38:2a:6c:c5:5b:d8:29:96:c2:
7b:f2:cc:c4:72:b7:4f:f8:c6:ab:d0:81:d9:a9:58:
c4:22:e2:17:4c:91:ed:49:bd:69:3e:fa:b3:0f:47:
24:cd:ab:80:74:93:da:7f:ae:34:2c:5b:b6:01:07:
c5:16:9f:ab:55:2e:6f:10:53:05:d9:da:ca:41:ee:
a7:4f:92:b7:9e:d3:77:49:17:64:e4:77:0e:0f:c4:
09:36:c0:fa:5c:db:48:35:a1:c6:e9:b5:89:88:0f:
b1:91:25:46:64:60:d7:0c:31:d1:5e:0b:9f:c1:88:
dc:8d:36:86:1c:0f:9e:a8:73:ec:6c:90:4b:c8:4f:
9b:21:7a:a5:94:07:30:33:1f:f8:a7:a5:d5:17:57:
30:8f:c9:b3:21:1b:a7:01:0e:c1:f7:2c:3e:f8:00:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:DC:45:EA:06:95:B7:B0:EB:3B:60:6F:3E:95:CD:1D:37:95:4F:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0652c5b7-fe9a-37eb-aeb2-dfd913675dac.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
X509v3 Authority Key Identifier:
keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.179.16.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:0c:96:92:16:16:2b:50:ce:ff:92:e3:89:1c:ac:5a:80:b3:
8c:fb:d2:57:e2:d5:8b:ea:d6:0d:56:4b:a6:01:38:fe:67:65:
1e:b3:75:d6:11:6f:32:07:3a:1d:3d:96:ec:0d:1c:40:ec:e8:
6a:3b:97:13:a7:c8:bb:d8:47:2d:21:34:bf:45:6b:48:e7:a7:
74:f2:3a:25:70:fe:7d:fa:07:18:f5:c0:be:b8:77:22:f3:bd:
f7:c8:96:25:ca:72:63:ac:fa:13:69:e5:b6:d1:43:da:0c:a1:
bd:30:e2:66:a8:26:a1:88:54:df:d2:a9:0e:96:ca:d2:4e:c3:
1b:11:ed:42:28:42:8a:a5:c9:7c:9d:b6:95:d7:ae:21:f2:53:
ee:c2:b8:d7:f4:30:ed:47:60:21:75:fb:5a:ce:d0:e6:67:ee:
d9:03:da:d0:40:fd:3c:9e:7c:51:e4:47:76:4a:f9:5d:fa:16:
fe:74:8f:e2:78:32:7a:2e:5e:ef:6d:43:9f:4f:97:f4:7d:04:
e8:30:ed:44:7e:bb:43:67:7c:89:b0:57:77:48:b7:dd:1d:79:
c5:88:2e:82:d3:f9:2c:4c:d0:29:65:73:88:99:fd:18:98:e7:
02:8e:5c:66:12:30:c3:b4:e3:bc:bf:ac:53:31:80:a4:64:eb:
f1:0e:47:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 15:11:29 2026 by rpki-client