
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa
File: cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa (raw, json)
Hash identifier: Y8QOBUaclTTKieGzJlBKb20SQFB4lt8wxc+BeHAESKY=
Subject key identifier: 8C:BF:1C:D6:29:BC:6F:86:60:E7:CC:1B:05:D0:0A:15:86:23:DA:5A
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584F331D25C8A0958AB5D8AF2EC0
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa
Signing time: Thu 17 Sep 2026 01:00:11 +0000
ROA not before: Thu 17 Sep 2026 01:00:11 +0000
ROA not after: Wed 16 Dec 2026 02:00:11 +0000
asID: 8881
IP address blocks: 166.0.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:33:1d:25:c8:a0:95:8a:b5:d8:af:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Sep 17 01:00:11 2026 GMT
Not After : Dec 16 02:00:11 2026 GMT
Subject: CN=ded2c92c-3dfb-45af-92e3-10ce0db4f4b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:cf:bd:e7:a2:99:bb:2d:a6:b5:ca:8d:68:d1:
8a:4d:bd:19:51:76:9a:d9:47:d7:a3:78:e5:a9:3f:
5a:e1:03:49:2d:42:fd:71:af:c5:20:2e:a3:82:0b:
66:f6:c5:cc:bd:74:49:41:36:f3:39:12:09:9a:de:
d2:74:f4:af:d5:58:be:f9:b3:20:a8:74:15:98:de:
25:49:55:3b:fc:66:bf:72:c1:77:34:37:3b:00:af:
3b:a5:79:70:98:84:ab:04:98:40:83:c4:83:1a:5d:
be:63:2e:2a:34:5f:f6:95:a5:ea:56:3a:18:51:58:
38:12:a2:fd:91:28:87:76:1f:b1:72:24:68:72:e2:
1b:e1:ed:8e:a9:c9:1a:c6:02:a0:74:96:c5:47:78:
ff:a8:9b:09:56:fe:68:ac:29:e9:77:f7:f4:c1:82:
83:7c:be:98:5a:de:9c:4f:bd:07:69:a5:44:69:cb:
46:89:99:9a:bc:2b:ef:d8:7c:7d:69:53:aa:83:4d:
32:64:96:bf:41:9a:25:d1:cf:ed:49:cf:d2:57:6f:
4c:19:0b:ab:ea:2e:8c:b4:6d:c8:37:6a:37:4a:ce:
d6:18:18:7e:72:eb:3d:78:37:b0:b4:a1:c4:4e:fe:
78:c8:b2:75:5e:ac:63:ca:8b:e9:fe:01:e9:b1:3d:
14:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:BF:1C:D6:29:BC:6F:86:60:E7:CC:1B:05:D0:0A:15:86:23:DA:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/cd5c4e71-e271-3d86-b5be-4fcb29e10590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:53:fa:7f:5b:0a:a2:72:ff:a8:27:05:ff:e9:95:90:1b:31:
47:9c:b4:57:90:21:06:53:33:83:34:e2:f7:3e:b2:4a:04:49:
cf:9a:7b:f9:8e:2b:b8:19:cd:5e:3c:cb:02:35:76:24:96:0e:
2c:c1:f3:67:f4:a4:28:f1:66:48:25:a5:db:71:c5:c8:9d:2a:
df:ab:0d:75:fd:f9:14:32:81:d9:b9:6b:22:8f:a3:71:26:74:
ef:b2:0c:66:0c:5f:38:9b:da:a5:c5:23:d3:46:78:f6:20:66:
40:00:ea:2e:32:c5:55:4f:4a:f5:80:c6:b3:d0:ea:3a:dd:cb:
e9:03:bd:c4:11:0a:b0:5c:35:d6:7b:75:1a:d9:8f:cf:a2:d6:
bf:e2:7d:78:30:31:a2:75:80:39:62:43:1d:94:e4:76:ab:10:
7a:04:ab:55:d6:27:db:29:41:d7:3f:b8:e4:0d:09:5f:03:65:
b5:c8:3c:cd:51:7a:1b:ee:57:e9:73:87:ba:16:f7:7f:b9:01:
4e:29:90:0b:d8:c2:ec:35:ae:08:e4:19:5e:9f:a1:fc:7a:d8:
6b:c7:72:cb:0f:2c:c2:01:cc:67:45:aa:e2:f4:c8:61:39:eb:
b6:36:40:51:1c:f7:07:e1:22:a9:b2:b7:af:e2:58:0b:73:3a:
9f:0e:41:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 10:11:31 2026 by rpki-client