
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fa099508-86eb-3e67-bb4d-ff41cfbba9b6.roa
File: fa099508-86eb-3e67-bb4d-ff41cfbba9b6.roa (raw, json)
Hash identifier: HPSeX+anOWFQHrf3OJX4OG2JLdDB55MtOuFLEgCusFg=
Subject key identifier: 5C:BD:58:A9:7A:60:2F:4E:B0:81:13:11:C6:F6:33:B7:7A:D1:85:11
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584D36C0F068A88F1879319F53A0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fa099508-86eb-3e67-bb4d-ff41cfbba9b6.roa
Signing time: Wed 18 Mar 2026 22:43:58 +0000
ROA not before: Wed 18 Mar 2026 22:43:58 +0000
ROA not after: Tue 16 Jun 2026 22:43:58 +0000
asID: 16740
IP address blocks: 66.39.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:36:c0:f0:68:a8:8f:18:79:31:9f:53:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Mar 18 22:43:58 2026 GMT
Not After : Jun 16 22:43:58 2026 GMT
Subject: CN=64aca77d-2225-4b9e-a95f-749efc499ef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f0:76:69:a6:a4:5b:1e:26:9f:7f:a3:d5:22:
ef:ac:ac:14:ff:98:fd:a8:95:3a:bd:20:76:78:00:
2b:48:92:45:81:4b:99:47:72:8f:9e:e8:c2:5c:77:
f9:2c:7e:92:3d:8d:72:4b:89:42:64:61:f7:43:fb:
6f:d5:2d:0a:ca:22:a9:0f:96:b7:90:c3:b0:e1:2c:
51:7a:5b:4f:4a:00:76:a3:5c:9a:da:9e:05:e5:78:
0a:82:be:fa:34:d3:31:9e:aa:32:d3:53:64:69:58:
2e:d6:70:86:33:01:56:eb:9a:b0:c7:39:9b:19:86:
ac:b6:a6:5c:fa:65:14:dc:d3:fc:e6:7c:0d:5e:a9:
b8:94:67:10:3f:3d:6d:6d:d6:26:17:f3:30:1f:a0:
73:34:3f:26:03:75:13:4d:b4:0e:9b:ee:cb:50:93:
a9:df:14:3e:df:f4:af:a0:8a:7f:c5:e5:0b:e2:9d:
14:00:54:28:40:9f:bc:ae:0d:c8:37:0a:e8:57:be:
c4:18:fd:e2:6d:af:1d:44:ab:29:e6:94:3f:99:be:
8d:87:ed:ee:f4:49:d2:6c:95:93:b7:54:55:5a:1f:
4c:bb:3c:e6:c3:f0:fe:37:d9:a4:f4:dd:d1:09:6f:
50:59:a9:cb:32:23:94:ea:0f:d7:96:56:85:f5:5e:
d2:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:BD:58:A9:7A:60:2F:4E:B0:81:13:11:C6:F6:33:B7:7A:D1:85:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/fa099508-86eb-3e67-bb4d-ff41cfbba9b6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv4:
66.39.223.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:b3:74:2b:da:70:7d:cd:b5:ed:e6:00:e1:d2:2f:18:b8:61:
48:91:72:8c:0d:a8:3b:ab:19:05:02:e5:a6:29:7b:cb:a8:41:
1d:7c:f6:6b:48:15:f0:b3:2b:5a:be:f9:90:5a:4d:65:f9:29:
65:37:8e:90:f8:5e:87:98:ae:68:68:6f:3c:df:d7:d6:24:f4:
02:4c:22:9a:cd:75:4e:11:d6:73:77:c0:6c:aa:6d:d4:05:36:
99:94:0c:e4:90:6a:26:cb:69:cc:f9:f6:43:1a:58:60:33:10:
ed:5a:b9:54:4b:2b:af:80:76:da:7e:b8:07:aa:7a:14:53:c2:
22:72:1c:12:ed:35:cd:e8:1b:09:2d:61:f6:c9:84:8e:b2:33:
cd:b0:5d:47:39:7e:c5:69:8c:aa:f1:4a:cd:1a:c5:81:58:f8:
cb:3f:58:0a:27:b9:33:2d:ee:77:57:ce:75:50:de:c1:38:f9:
c5:ba:76:18:91:2e:6f:62:70:bd:66:92:5e:95:74:91:82:0a:
42:45:8a:51:28:11:b4:17:90:c7:86:24:55:f0:ee:00:1d:fc:
a3:18:82:3b:7c:de:fb:d9:69:84:90:ac:34:1a:3a:91:74:e4:
04:28:09:1a:ad:6f:4a:ff:98:d3:23:b1:40:c9:d3:04:aa:2e:
bd:52:91:aa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE02wPBoqI8YeTGfU6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDMxODIyNDM1OFoXDTI2MDYxNjIyNDM1OFowLzEtMCsGA1UEAxMk
NjRhY2E3N2QtMjIyNS00YjllLWE5NWYtNzQ5ZWZjNDk5ZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPB2aaakWx4mn3+j1SLvrKwU/5j9qJU6vSB2
eAArSJJFgUuZR3KPnujCXHf5LH6SPY1yS4lCZGH3Q/tv1S0KyiKpD5a3kMOw4SxR
eltPSgB2o1ya2p4F5XgKgr76NNMxnqoy01NkaVgu1nCGMwFW65qwxzmbGYastqZc
+mUU3NP85nwNXqm4lGcQPz1tbdYmF/MwH6BzND8mA3UTTbQOm+7LUJOp3xQ+3/Sv
oIp/xeUL4p0UAFQoQJ+8rg3INwroV77EGP3iba8dRKsp5pQ/mb6Nh+3u9EnSbJWT
t1RVWh9Muzzmw/D+N9mk9N3RCW9QWanLMiOU6g/XllaF9V7SOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFy9WKl6YC9OsIETEcb2M7d60YURMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvZmEwOTk1MDgtODZlYi0z
ZTY3LWJiNGQtZmY0MWNmYmJhOWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiffMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABazdCvacH3Nte3mAOHSLxi4YUiRcowNqDurGQUC5aYpe8uoQR189mtI
FfCzK1q++ZBaTWX5KWU3jpD4XoeYrmhobzzf19Yk9AJMIprNdU4R1nN3wGyqbdQF
NpmUDOSQaibLacz59kMaWGAzEO1auVRLK6+Adtp+uAeqehRTwiJyHBLtNc3oGwkt
YfbJhI6yM82wXUc5fsVpjKrxSs0axYFY+Ms/WAonuTMt7ndXznVQ3sE4+cW6dhiR
Lm9icL1mkl6VdJGCCkJFilEoEbQXkMeGJFXw7gAd/KMYgjt83vvZaYSQrDQaOpF0
5AQoCRqtb0r/mNMjsUDJ0wSqLr1Skao=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:35:43 2026 by rpki-client