
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4a70a7ff-e498-32d0-8b8e-0876a573de8a.roa
File: 4a70a7ff-e498-32d0-8b8e-0876a573de8a.roa (raw, json)
Hash identifier: +6855K12sa63gLZL/cDqFpz55ciFs0OCLPPGj6kNYmU=
Subject key identifier: 22:22:AC:96:D3:36:62:9A:73:40:AA:49:3D:31:1E:8C:A5:22:29:EF
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584D36C0EB89D5D648352A0B9CC0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4a70a7ff-e498-32d0-8b8e-0876a573de8a.roa
Signing time: Wed 18 Mar 2026 22:43:56 +0000
ROA not before: Wed 18 Mar 2026 22:43:56 +0000
ROA not after: Tue 16 Jun 2026 22:43:56 +0000
asID: 16740
IP address blocks: 66.39.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:36:c0:eb:89:d5:d6:48:35:2a:0b:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Mar 18 22:43:56 2026 GMT
Not After : Jun 16 22:43:56 2026 GMT
Subject: CN=f6295440-a2b9-4073-b8c4-b92a04dc663e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:1b:e3:18:d6:70:8a:71:9e:ef:28:15:3b:23:
8f:e1:04:37:99:e5:80:89:de:0e:13:30:b9:dd:d5:
8d:93:91:30:ca:3c:3f:33:40:4b:33:18:19:d2:98:
d4:d9:72:02:54:da:ed:fa:31:0d:14:7c:cf:72:66:
b7:7b:89:0f:96:24:c6:92:8a:c5:c5:f2:8c:00:14:
4c:6b:36:df:35:58:fb:3f:87:da:85:d1:06:0e:21:
fa:be:dd:84:b8:a1:89:0f:73:15:3d:a8:f6:ae:c1:
91:4c:4e:e6:b5:de:ef:d1:d6:ac:c3:9c:80:ee:e3:
ba:06:2c:6b:61:2a:09:0c:45:23:4b:41:7d:83:c8:
01:a3:86:14:73:ff:2c:11:52:f4:39:6b:f2:2f:11:
5f:ca:82:1f:28:be:0c:05:e9:9b:81:c2:7a:42:73:
92:94:9c:d1:35:76:a1:dc:f4:5f:4d:55:0d:82:16:
92:e5:f6:1d:21:81:bf:0b:c9:ef:96:ee:4e:74:b0:
ec:6c:28:27:2b:5f:cc:d3:54:6a:47:67:a9:ab:e3:
5b:72:33:0e:39:7e:22:bf:e3:d1:9b:d2:97:44:05:
50:9c:26:ca:3a:d6:f6:65:44:75:c1:b7:de:2b:07:
9e:58:5b:33:9e:48:68:9c:b4:c3:58:e4:26:64:9c:
99:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:22:AC:96:D3:36:62:9A:73:40:AA:49:3D:31:1E:8C:A5:22:29:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/4a70a7ff-e498-32d0-8b8e-0876a573de8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.39.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:e0:b7:d0:7f:e7:51:de:83:f6:b0:3f:2e:22:66:c4:fb:d3:
cc:dc:9c:8f:71:a6:6a:c3:64:f9:0d:d5:ce:a1:4e:0d:47:a6:
7e:51:d0:1d:e3:d3:87:3e:75:83:a4:76:97:9b:1c:a1:e3:20:
7a:d7:fb:2d:76:23:37:eb:cc:d8:4c:59:fc:c3:37:fe:14:60:
a8:e0:09:f8:d5:e3:e5:02:75:08:dc:db:23:2d:ec:78:0f:95:
23:f6:b3:2c:fb:4c:40:b2:55:81:f5:73:4d:90:a0:9a:a2:43:
40:7a:d3:7f:c9:3f:9b:a3:e5:93:d9:48:9f:bd:85:17:95:fe:
42:a2:32:c2:ae:58:d1:93:88:61:88:b9:25:3c:28:82:89:80:
eb:81:04:0b:94:9a:0d:b5:70:10:e9:ca:e8:ad:6c:ab:d6:24:
57:59:ed:e6:4f:eb:52:e2:46:35:ac:5f:b4:f9:08:ec:c4:43:
15:46:f0:9c:71:c9:d2:ae:2c:95:cf:f2:34:c4:50:59:77:cd:
c6:2b:e3:87:77:8b:cc:9a:ea:d9:13:86:ab:f3:ff:aa:14:d6:
2a:8d:ee:b8:77:a6:37:f0:e4:da:87:ed:39:7f:79:3d:4c:f0:
71:34:e4:0d:88:34:a3:21:43:f3:82:c0:03:fc:d8:ab:da:b6:
05:da:a4:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wOuJ1dZINSoLnMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDMxODIyNDM1NloXDTI2MDYxNjIyNDM1NlowLzEtMCsGA1UEAxMk
ZjYyOTU0NDAtYTJiOS00MDczLWI4YzQtYjkyYTA0ZGM2NjNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnBvjGNZwinGe7ygVOyOP4QQ3meWAid4OEzC5
3dWNk5Ewyjw/M0BLMxgZ0pjU2XICVNrt+jENFHzPcma3e4kPliTGkorFxfKMABRM
azbfNVj7P4fahdEGDiH6vt2EuKGJD3MVPaj2rsGRTE7mtd7v0dasw5yA7uO6Bixr
YSoJDEUjS0F9g8gBo4YUc/8sEVL0OWvyLxFfyoIfKL4MBembgcJ6QnOSlJzRNXah
3PRfTVUNghaS5fYdIYG/C8nvlu5OdLDsbCgnK1/M01RqR2epq+NbcjMOOX4iv+PR
m9KXRAVQnCbKOtb2ZUR1wbfeKweeWFsznkhonLTDWOQmZJyZKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIirJbTNmKac0CqST0xHoylIinvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvNGE3MGE3ZmYtZTQ5OC0z
MmQwLThiOGUtMDg3NmE1NzNkZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQifaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIXgt9B/51Heg/awPy4iZsT708zcnI9xpmrDZPkN1c6hTg1Hpn5R0B3j
04c+dYOkdpebHKHjIHrX+y12IzfrzNhMWfzDN/4UYKjgCfjV4+UCdQjc2yMt7HgP
lSP2syz7TECyVYH1c02QoJqiQ0B603/JP5uj5ZPZSJ+9hReV/kKiMsKuWNGTiGGI
uSU8KIKJgOuBBAuUmg21cBDpyuitbKvWJFdZ7eZP61LiRjWsX7T5COzEQxVG8Jxx
ydKuLJXP8jTEUFl3zcYr44d3i8ya6tkThqvz/6oU1iqN7rh3pjfw5NqH7Tl/eT1M
8HE05A2INKMhQ/OCwAP82KvatgXapLk=
-----END CERTIFICATE-----
Generated at Thu Mar 26 11:48:35 2026 by rpki-client