
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/57b3e621-2716-3a72-98b5-aedeebc84d8e.roa
File: 57b3e621-2716-3a72-98b5-aedeebc84d8e.roa (raw, json)
Hash identifier: 6ODOflMXBcJ18ysqGxv2TK7169x/3zsCr1cIjE081xc=
Subject key identifier: F1:F4:3B:57:31:89:F4:E1:52:4E:E0:E6:0F:7A:CD:A4:DE:95:C7:99
Certificate issuer: /CN=dac66525-ec66-4458-af9c-d81d29c7ec22
Certificate serial: 010D0C9F4328584F49731A51E3DFF6ECA7566780
Authority key identifier: 8B:67:AE:AD:4A:6B:41:8F:AC:8B:95:87:2B:63:E8:DE:20:B7:10:DD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/57b3e621-2716-3a72-98b5-aedeebc84d8e.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33570
IP address blocks: 216.41.208.0/22 maxlen: 24
216.41.217.0/24 maxlen: 24
216.41.218.0/23 maxlen: 24
216.41.221.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:1a:51:e3:df:f6:ec:a7:56:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dac66525-ec66-4458-af9c-d81d29c7ec22
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b2a97d8a-a013-4f0b-9b4f-8b5a031c678c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:19:b5:3e:f6:7e:e7:2c:72:2b:2e:3f:ad:80:
b6:04:5d:45:7c:84:0a:74:14:f5:c7:cc:39:40:d1:
e6:bb:99:55:d0:9c:b8:2f:2e:f2:fd:a7:67:6c:34:
61:26:46:fb:e6:f8:da:cf:b8:98:35:c4:bb:ef:cc:
93:91:1f:3a:a5:e3:50:cc:ae:d1:9d:ae:29:a2:73:
2c:b2:24:db:b4:4b:ca:c8:23:fd:d0:09:fc:ba:5e:
6b:ed:e6:b1:4f:3b:c9:60:21:bb:2c:79:77:b7:37:
1f:78:2c:c7:21:dd:ee:d5:35:f3:3d:d0:19:e6:bb:
d4:31:4d:b9:9a:e1:64:e0:97:fe:0f:4d:b6:3c:21:
58:e6:d1:8c:87:46:8b:ce:d2:5c:c1:b9:96:01:48:
d1:38:d8:a2:d2:5f:2b:7f:57:72:a6:4d:93:ef:a0:
e2:e0:20:98:40:38:e4:e6:95:d9:34:22:aa:ae:c3:
70:85:22:2e:90:3e:bf:9d:bb:66:6c:68:fe:7b:fc:
ab:48:4d:a2:27:f2:74:7f:19:5c:5d:8a:4b:61:6f:
2d:59:cf:7e:64:40:28:1f:c9:84:aa:39:a7:f0:eb:
6d:fb:5a:2d:18:f6:2f:e5:11:45:ad:3a:5d:f2:7d:
cc:4a:24:12:fc:fc:d4:9e:78:d8:2e:3e:1a:da:20:
c0:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:F4:3B:57:31:89:F4:E1:52:4E:E0:E6:0F:7A:CD:A4:DE:95:C7:99
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/57b3e621-2716-3a72-98b5-aedeebc84d8e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22/dac66525-ec66-4458-af9c-d81d29c7ec22.crl
X509v3 Authority Key Identifier:
keyid:8B:67:AE:AD:4A:6B:41:8F:AC:8B:95:87:2B:63:E8:DE:20:B7:10:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/dac66525-ec66-4458-af9c-d81d29c7ec22.cer
sbgp-ipAddrBlock: critical
IPv4:
216.41.208.0/22
216.41.217.0-216.41.219.255
216.41.221.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:20:b0:c5:fb:e5:76:44:33:4d:55:54:15:7a:b0:10:fa:0d:
f0:0a:08:09:4b:f3:cc:10:43:54:19:09:01:f3:ba:59:c3:c5:
a9:4a:71:28:0d:f5:f9:d8:6f:96:06:e7:31:91:b5:2c:07:90:
90:76:8d:41:53:c4:be:f8:b1:b3:c2:13:00:79:f6:00:3a:64:
98:d4:35:1e:55:10:6e:15:8b:2a:c9:ef:22:81:f9:dd:99:de:
7a:85:bb:fe:ce:e1:88:cd:c8:4b:c1:59:c4:2f:8d:f4:88:33:
5a:11:a4:0c:a5:80:e5:3e:31:0f:d4:8c:df:77:43:7e:42:41:
b2:52:b9:0f:06:5b:3f:ee:38:1e:1c:60:87:86:94:bc:63:3c:
66:d9:24:a6:f2:56:61:5a:a6:8d:0b:e8:f9:28:51:d6:da:0b:
44:e8:35:23:e3:5c:f3:ae:7c:ef:d7:14:74:b6:da:64:ca:f5:
40:82:55:90:23:12:90:29:61:c7:be:61:64:00:66:d1:2e:3a:
53:d6:be:32:9a:dd:20:2d:31:a6:cf:bd:6d:70:eb:6b:95:94:
be:f5:b7:85:20:e3:44:c5:93:d0:e1:6d:05:da:fc:00:20:d3:
a3:6a:b7:b8:d2:8a:46:ef:5e:5d:57:78:b9:01:e0:1d:1e:6d:
a6:f5:ab:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 14:43:34 2026 by rpki-client