
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4ec346a8-6c08-3c2e-9201-9804909bb674.roa
File: 4ec346a8-6c08-3c2e-9201-9804909bb674.roa (raw, json)
Hash identifier: xCInkmOyYXyfZuRi6UJOL78qjNK9G36ON41MvMC5crw=
Subject key identifier: 3B:76:2F:04:41:24:77:26:E4:6C:91:CE:94:62:B3:97:01:3C:D7:A6
Certificate issuer: /CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Certificate serial: 010D0C9F4328584D4A8F978C709F63AA1A009080
Authority key identifier: 79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4ec346a8-6c08-3c2e-9201-9804909bb674.roa
Signing time: Thu 26 Mar 2026 01:00:32 +0000
ROA not before: Thu 26 Mar 2026 01:00:32 +0000
ROA not after: Wed 24 Jun 2026 01:00:32 +0000
asID: 4134
IP address blocks: 66.102.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4a:8f:97:8c:70:9f:63:aa:1a:00:90:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf
Validity
Not Before: Mar 26 01:00:32 2026 GMT
Not After : Jun 24 01:00:32 2026 GMT
Subject: CN=f026be5c-570e-46c6-bd83-6e488c8028df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:d9:af:7c:7a:b1:ce:a5:67:83:20:64:87:02:
46:9c:e7:6e:83:df:ee:3c:b3:ca:df:1b:92:d7:2b:
41:f9:de:21:39:33:99:d6:a6:0b:41:5e:69:3a:78:
2a:c9:a8:3d:34:dd:8b:a1:f5:1f:3c:d7:0a:7d:ed:
1f:2b:8a:c8:2f:6d:27:42:3e:ef:2e:11:a6:a5:6b:
44:8d:61:c6:04:05:cc:bf:23:28:48:a6:4d:a8:92:
1a:6e:6b:09:a3:09:06:b6:74:a7:83:47:9d:8c:55:
5f:ab:a4:f4:c8:3b:9d:a4:ff:7d:58:6f:e0:e4:dd:
8f:93:59:f5:77:88:98:19:06:d9:7f:a2:e2:d3:62:
18:f9:9d:fd:f1:ca:82:78:0d:34:f4:08:cc:aa:17:
ba:6d:81:d7:29:d5:2d:b6:56:ab:de:78:d0:13:dd:
7a:33:d4:86:5e:e6:80:db:10:42:51:d7:5c:42:60:
6c:4a:60:6a:9f:0a:34:e8:f5:21:d1:d1:20:eb:ab:
23:08:ab:ab:21:72:54:cf:f3:2d:35:1d:d2:73:86:
e5:80:b5:67:a4:a7:29:4e:a7:02:79:e3:a6:f5:08:
3e:8c:e5:cc:18:49:3c:25:16:bf:73:17:2f:13:cb:
16:f0:66:dc:48:91:d4:53:0b:a2:d6:95:7d:13:0b:
0e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3B:76:2F:04:41:24:77:26:E4:6C:91:CE:94:62:B3:97:01:3C:D7:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/4ec346a8-6c08-3c2e-9201-9804909bb674.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.crl
X509v3 Authority Key Identifier:
keyid:79:4E:35:8D:AC:45:13:27:8B:65:94:A9:E2:BA:54:F4:4C:0A:4D:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e18cd83c-f7a0-4bd1-a96e-d085ff78ecaf.cer
sbgp-ipAddrBlock: critical
IPv4:
66.102.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:61:89:8e:a1:25:27:52:2d:31:57:e6:61:d2:15:e5:73:2d:
d1:f2:40:ec:8a:9a:bc:77:c9:91:67:09:41:84:0b:69:bf:44:
86:e8:c2:a3:ab:14:54:de:09:48:9e:43:9f:9c:0c:c6:2d:ff:
8e:a1:2e:9e:5f:39:a0:9e:18:40:39:8c:04:ca:65:cf:f2:ff:
bc:8d:2a:6e:1c:c3:8d:bc:ab:5e:6e:35:9d:f9:3a:9c:0a:ad:
59:e4:43:ce:96:22:a3:5c:a6:f9:92:c0:ae:71:1b:4c:2f:33:
13:91:3f:e5:53:73:50:2c:09:a2:0e:f1:3a:71:45:c8:56:20:
71:61:01:41:50:33:94:73:ec:a8:d6:8d:d9:eb:b1:a3:03:9c:
b0:88:28:eb:52:24:c4:c3:61:4b:15:12:5f:d6:89:ff:4e:1c:
ed:74:b7:82:c5:4d:ed:72:29:fc:b8:28:7c:79:9b:a9:39:26:
2c:19:af:1b:71:0a:4c:ab:42:a8:8e:18:e9:0a:78:2c:e8:c2:
7d:7c:d0:95:5a:01:6f:42:ab:d2:02:4f:6a:af:e7:34:11:1d:
03:9a:78:19:b1:6d:b8:e5:31:c9:81:26:00:93:7a:2b:1f:f6:
38:93:b8:9e:0e:d4:74:b9:43:45:6b:7a:39:5e:7f:e9:40:6a:
ba:df:9a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:35:07 2026 by rpki-client