
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5dbeee28-0076-3c35-8a98-3ddf8d4e3652.roa
File: 5dbeee28-0076-3c35-8a98-3ddf8d4e3652.roa (raw, json)
Hash identifier: RBg5v9yNOezPyKNNyfmvL3pHHFtZNJviEz6UP9IpJvA=
Subject key identifier: 69:FC:63:50:9D:6B:EF:96:26:EC:41:2C:96:70:AA:CC:F9:B7:2F:3A
Certificate issuer: /CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Certificate serial: 010D0C9F4328584D932567B4B95CB847FBD9FF80
Authority key identifier: DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5dbeee28-0076-3c35-8a98-3ddf8d4e3652.roa
Signing time: Tue 21 Apr 2026 01:00:24 +0000
ROA not before: Tue 21 Apr 2026 01:00:24 +0000
ROA not after: Mon 20 Jul 2026 01:00:24 +0000
asID: 402159
IP address blocks: 66.115.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:93:25:67:b4:b9:5c:b8:47:fb:d9:ff:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d7fb1c2-f387-482d-a6fe-dc5a844f85ef
Validity
Not Before: Apr 21 01:00:24 2026 GMT
Not After : Jul 20 01:00:24 2026 GMT
Subject: CN=0ccd7b3f-ab7a-4fad-9f76-e1e0452aa82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:ef:7c:d2:dd:a6:ad:84:89:bf:4a:2b:01:77:
1d:8c:0b:f4:6b:ec:59:6f:97:01:f8:6b:bb:7f:e8:
5e:80:16:d3:55:ad:23:e6:3f:66:94:e1:16:46:93:
29:7a:5e:cc:2d:f9:7f:35:d4:42:73:12:45:d7:34:
de:d9:34:a7:4b:82:7c:f5:dc:e9:3f:e8:d3:a1:84:
d2:cd:ba:42:fb:d4:2c:81:e8:29:97:47:2c:9e:c4:
8d:46:41:e9:b6:ce:93:c9:c9:2c:a4:67:42:49:60:
12:21:90:b9:89:54:6a:44:a8:18:42:67:3a:5d:f5:
57:86:04:17:6d:a6:ab:bf:b0:d6:86:2b:4d:15:bf:
a0:3a:b4:d3:be:88:92:a4:86:19:86:18:1f:22:37:
43:b9:7c:3f:87:65:af:e7:30:5b:af:27:8a:d8:37:
a5:a8:9f:0e:90:5c:22:aa:9c:eb:1c:31:76:0c:15:
be:b6:f6:8b:56:86:9b:71:4f:fa:9b:2c:d5:8d:63:
4f:99:5c:b4:d8:1e:ea:ee:a4:75:c3:1e:27:b2:89:
1e:48:99:c7:63:8c:a5:cf:8f:70:e9:04:33:99:cb:
28:99:06:82:49:64:3b:62:e5:cd:b6:68:e9:fb:78:
38:ee:f3:87:1a:d8:11:5d:e4:5f:74:8a:9b:15:ba:
be:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:FC:63:50:9D:6B:EF:96:26:EC:41:2C:96:70:AA:CC:F9:B7:2F:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/5dbeee28-0076-3c35-8a98-3ddf8d4e3652.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.crl
X509v3 Authority Key Identifier:
keyid:DC:C9:08:36:55:E7:6E:5B:A5:B0:67:A1:E6:60:D3:23:A9:61:44:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d7fb1c2-f387-482d-a6fe-dc5a844f85ef.cer
sbgp-ipAddrBlock: critical
IPv4:
66.115.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:11:62:fd:9c:01:32:ef:d5:0f:ba:7f:a8:ec:9b:ec:eb:5c:
4d:50:6d:7b:fc:48:51:06:7f:3c:d8:be:80:c2:cc:68:b3:e7:
59:4a:5a:94:58:04:c8:fe:2f:b7:7c:60:28:7d:78:fb:c8:9f:
b7:93:4d:41:62:d6:2e:a7:23:17:fc:97:c3:b7:12:53:03:64:
85:45:3d:cd:41:aa:45:4d:dc:b1:c6:7f:7c:0c:7a:ca:55:85:
8b:f9:ea:e1:e0:46:f3:f0:16:b9:d4:1d:30:ac:ae:71:c2:2a:
b3:c6:85:31:99:64:36:7a:30:80:b6:cf:64:f7:49:cf:59:4d:
ca:51:a5:15:38:88:cb:57:02:ee:2e:81:b5:2a:62:fb:b5:ee:
ac:6f:3f:4d:d4:c1:d1:10:9d:7f:e6:e7:6a:dd:99:2d:41:20:
60:10:16:4e:a8:b5:c6:58:68:1f:61:e5:f6:0a:24:d0:13:4b:
5e:59:95:a7:b5:fe:ca:d1:4d:82:5c:17:fd:3b:35:09:6d:af:
b5:ce:da:9a:bf:a9:2b:c7:7b:7c:80:eb:48:75:26:03:20:9d:
7a:59:e5:06:b5:31:53:0d:69:2b:9b:9d:8d:4b:fa:46:8d:e6:
56:bb:b8:2d:7c:c3:5c:a5:49:d3:4b:06:b9:b9:4d:d7:2c:9e:
78:b4:bb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:15:33 2026 by rpki-client