
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa
File: 849770b3-423d-36e5-898b-d99735708a9c.roa (raw, json)
Hash identifier: aZnjaXAbBNLoHokGrB+4UA+AWKya/aoo8Y8xeH5YEcM=
Subject key identifier: D8:6B:65:28:EA:42:B3:A9:24:70:9F:16:FE:01:0E:4F:D4:8D:45:E5
Certificate issuer: /CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Certificate serial: 010D0C9F4328584D1B1A0C6948C8C3E8B81FE100
Authority key identifier: E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa
Signing time: Mon 09 Mar 2026 01:00:32 +0000
ROA not before: Mon 09 Mar 2026 01:00:32 +0000
ROA not after: Sun 07 Jun 2026 01:00:32 +0000
asID: 31919
IP address blocks: 66.119.96.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1b:1a:0c:69:48:c8:c3:e8:b8:1f:e1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=459d6e61-8613-4289-be34-cb0fe0aeea6e
Validity
Not Before: Mar 9 01:00:32 2026 GMT
Not After : Jun 7 01:00:32 2026 GMT
Subject: CN=7f3f6d21-36c1-45be-b76d-673243893bf0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:6d:49:3d:ee:78:ec:41:13:81:7b:83:a7:c6:
c3:d9:b0:0f:2b:a3:22:fa:67:f5:7c:b5:e6:e5:34:
ab:45:5e:6b:10:ae:41:47:65:5f:50:c6:78:bb:89:
0e:6e:e3:19:93:75:09:b0:58:38:f4:bf:aa:a6:a9:
90:ed:7f:63:33:12:2d:8b:66:36:8d:4c:a2:43:8b:
9f:65:10:9b:68:db:17:28:dd:40:b9:aa:24:9b:4d:
a2:f5:ac:6b:44:38:6f:64:02:e4:53:fd:a9:6c:04:
be:b7:43:c8:f8:7b:59:10:2f:6b:35:d5:35:5c:34:
3f:e2:25:07:28:26:47:b2:f1:c2:df:5e:5d:77:e6:
0e:08:40:87:50:f9:25:1e:0b:7d:b4:b2:dd:ad:ab:
81:82:d4:7b:c3:b2:15:17:cc:76:35:fd:46:78:10:
21:6a:dc:e0:67:04:ec:dd:82:1d:fc:dd:95:4a:d5:
f4:26:b1:dd:a8:a1:fa:fe:46:58:38:8a:d4:fc:eb:
0a:ce:06:6c:ad:9b:88:68:54:22:a3:30:84:83:c9:
e7:4f:77:29:2e:dd:30:a0:0f:63:6b:3c:a7:e1:e1:
f3:ae:b2:bf:ca:fb:ab:6e:90:d0:83:69:a8:f1:23:
32:4b:71:4e:02:0e:e1:9f:8a:8d:af:70:9d:65:6c:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:6B:65:28:EA:42:B3:A9:24:70:9F:16:FE:01:0E:4F:D4:8D:45:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/849770b3-423d-36e5-898b-d99735708a9c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e/459d6e61-8613-4289-be34-cb0fe0aeea6e.crl
X509v3 Authority Key Identifier:
keyid:E1:C0:D0:3E:00:4B:61:63:4A:47:1D:5B:23:44:2D:84:7A:F9:6B:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/459d6e61-8613-4289-be34-cb0fe0aeea6e.cer
sbgp-ipAddrBlock: critical
IPv4:
66.119.96.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:93:9c:59:09:35:be:61:d2:da:64:52:4e:b2:53:6e:e0:8c:
b0:79:31:c1:3c:42:72:ef:d7:a4:47:82:03:e2:8c:98:48:a1:
73:0e:03:be:c5:2f:db:73:a0:21:45:bd:54:49:af:92:0d:23:
63:6b:54:82:7b:b5:bd:b5:ec:b6:2f:04:58:2b:ed:53:d5:81:
9e:6e:e2:d5:ab:fa:ad:94:85:a6:52:55:af:06:27:be:22:dc:
98:2a:e1:2a:8a:a8:3f:fe:1b:78:60:ba:3f:be:c6:d4:b3:b8:
f7:c2:35:94:d3:44:bf:9a:40:37:b3:b2:6d:d9:70:70:43:70:
4d:73:13:df:a3:a1:6d:74:6c:ea:a2:28:e2:78:7d:89:74:9f:
32:fd:c7:45:f2:2c:47:ab:02:75:4f:89:cf:16:1b:de:96:ae:
d8:9a:97:10:a4:d2:f4:dd:f8:c7:59:19:bc:68:90:70:80:ba:
5b:c7:99:38:f3:a5:1e:01:da:18:e3:6d:bd:f5:7e:18:8c:0d:
1f:77:8a:73:24:0e:2e:ca:a1:6e:4c:b5:2f:09:9e:08:8a:71:
78:92:10:36:59:62:d7:67:5b:09:89:2f:e0:65:1f:50:ab:98:
ce:0d:89:b1:95:0a:fa:a1:3d:a4:8c:1e:ff:cb:46:f6:f9:3b:
51:7b:09:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:38:00 2026 by rpki-client