
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa
File: 36872929-4860-33a1-ae87-19f6bebe7ad4.roa (raw, json)
Hash identifier: d3IkB/wdfyBGKDroLUf4eI+bm5zFc6JGDzq2TmB2FE8=
Subject key identifier: 3E:99:64:1E:9E:6B:FD:77:61:72:66:2E:93:18:A9:27:03:45:76:68
Certificate issuer: /CN=66094ef6-a967-4978-81e1-d66227a478fd
Certificate serial: 010D0C9F4328584F19FCFEDCEC5AC37AE50C3C00
Authority key identifier: DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa
Signing time: Tue 08 Sep 2026 01:00:12 +0000
ROA not before: Tue 08 Sep 2026 01:00:12 +0000
ROA not after: Mon 07 Dec 2026 02:00:12 +0000
asID: 13536
IP address blocks: 66.152.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:19:fc:fe:dc:ec:5a:c3:7a:e5:0c:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66094ef6-a967-4978-81e1-d66227a478fd
Validity
Not Before: Sep 8 01:00:12 2026 GMT
Not After : Dec 7 02:00:12 2026 GMT
Subject: CN=57f792d6-e1c3-47e3-9662-eee2342d69ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:25:de:48:3f:3e:2d:f4:55:15:b7:71:5c:ac:
8c:64:88:16:f8:78:2e:f5:14:46:09:7d:7f:81:bd:
42:1e:77:94:9a:bd:2c:87:50:b3:6a:1c:b7:2a:ee:
b2:23:74:6b:96:49:99:88:ee:4c:fb:b8:bf:48:18:
32:05:d0:a6:1a:57:4f:ec:73:b0:09:02:a8:6a:b8:
d9:f2:e5:59:4d:8c:fa:85:c0:6a:e5:7e:45:e3:22:
00:7a:4b:c8:36:ea:ae:b8:62:b1:f7:0c:9b:d4:25:
40:5a:a2:70:77:7e:8d:b8:ad:42:38:47:9b:d5:16:
5f:e0:a5:0a:a1:80:cf:44:df:a5:9d:cc:d9:80:a8:
1b:94:98:7d:f1:56:fa:14:69:0c:fb:90:38:94:cb:
92:c2:95:d3:d7:d8:0c:38:2c:d5:cf:6f:a0:8d:23:
16:6e:8a:54:0a:d8:33:f3:a5:31:af:7c:ba:b2:00:
25:e1:23:a0:10:79:a2:b9:60:a1:6f:62:35:d2:d5:
71:eb:5a:b6:4b:03:80:4e:0a:10:ea:15:0a:bb:82:
44:c2:cd:a3:97:fe:1e:3d:3a:5c:7c:e1:f9:c0:f9:
ba:42:81:4d:50:5c:ad:e2:ef:8f:6b:a6:56:e3:45:
19:bd:e9:7e:89:7a:de:2e:93:36:90:03:74:e4:9c:
c7:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:99:64:1E:9E:6B:FD:77:61:72:66:2E:93:18:A9:27:03:45:76:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/36872929-4860-33a1-ae87-19f6bebe7ad4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd/66094ef6-a967-4978-81e1-d66227a478fd.crl
X509v3 Authority Key Identifier:
keyid:DC:40:B2:B3:F2:F8:D5:1B:56:E9:5A:27:61:F8:24:01:B5:71:DF:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/66094ef6-a967-4978-81e1-d66227a478fd.cer
sbgp-ipAddrBlock: critical
IPv4:
66.152.127.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:f0:45:dc:19:49:00:ae:e9:7e:e5:47:35:68:ee:11:c9:d0:
71:ad:a2:89:04:82:6d:4f:ae:3f:79:22:c7:07:80:e9:53:45:
b4:b9:37:3b:48:7e:79:0e:26:95:7f:7a:97:84:cf:a7:9a:d1:
8a:ab:58:57:51:31:be:b1:14:44:1d:11:99:ba:b7:1f:25:12:
5e:70:fc:c4:38:7a:d4:0f:3a:e6:a4:4e:57:8a:66:20:42:55:
f7:3f:bd:92:05:1c:46:c4:f1:12:23:46:bb:26:bb:c3:be:0f:
64:ba:c6:73:9f:3f:27:2a:4c:5c:2d:7e:4c:d4:30:c9:b4:74:
37:a6:99:f8:4b:5c:2a:a7:9d:31:9e:e3:2c:56:a4:16:f2:7c:
56:79:3d:ea:03:be:ce:7d:b8:b3:0b:74:3e:a4:12:24:58:71:
a1:19:eb:e5:ed:e6:a8:1c:84:8e:60:29:ed:9a:cd:fe:d9:4f:
da:cf:09:bc:24:93:9f:35:c8:bb:04:b7:86:18:c3:26:38:0f:
11:02:54:e2:2d:8e:67:bc:92:39:a9:8a:b9:09:f8:b8:5a:95:
00:51:c1:bb:e4:4a:ae:f9:3a:a0:56:b2:2d:68:60:c9:e9:ad:
27:00:f1:d4:e2:b2:5e:83:0d:4e:77:b9:ed:02:db:fd:ea:c0:
53:69:55:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Z/P7c7FrDeuUMPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYwOTRlZjYtYTk2Ny00OTc4LTgxZTEtZDY2MjI3YTQ3
OGZkMB4XDTI2MDkwODAxMDAxMloXDTI2MTIwNzAyMDAxMlowLzEtMCsGA1UEAxMk
NTdmNzkyZDYtZTFjMy00N2UzLTk2NjItZWVlMjM0MmQ2OWVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyXeSD8+LfRVFbdxXKyMZIgW+Hgu9RRGCX1/
gb1CHneUmr0sh1Czahy3Ku6yI3RrlkmZiO5M+7i/SBgyBdCmGldP7HOwCQKoarjZ
8uVZTYz6hcBq5X5F4yIAekvINuquuGKx9wyb1CVAWqJwd36NuK1COEeb1RZf4KUK
oYDPRN+lnczZgKgblJh98Vb6FGkM+5A4lMuSwpXT19gMOCzVz2+gjSMWbopUCtgz
86Uxr3y6sgAl4SOgEHmiuWChb2I10tVx61q2SwOATgoQ6hUKu4JEws2jl/4ePTpc
fOH5wPm6QoFNUFyt4u+Pa6ZW40UZvel+iXreLpM2kAN05JzHAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD6ZZB6ea/13YXJmLpMYqScDRXZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi82NjA5
NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYyMjdhNDc4ZmQvMzY4NzI5MjktNDg2MC0z
M2ExLWFlODctMTlmNmJlYmU3YWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvNjYwOTRlZjYtYTk2Ny00OTc4LTgx
ZTEtZDY2MjI3YTQ3OGZkLzY2MDk0ZWY2LWE5NjctNDk3OC04MWUxLWQ2NjIyN2E0
NzhmZC5jcmwwHwYDVR0jBBgwFoAU3ECys/L41RtW6VonYfgkAbVx3zEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi82NjA5NGVmNi1hOTY3LTQ5NzgtODFlMS1kNjYy
MjdhNDc4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQph/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFHwRdwZSQCu6X7lRzVo7hHJ0HGtookEgm1Prj95IscHgOlTRbS5NztI
fnkOJpV/epeEz6ea0YqrWFdRMb6xFEQdEZm6tx8lEl5w/MQ4etQPOuakTleKZiBC
Vfc/vZIFHEbE8RIjRrsmu8O+D2S6xnOfPycqTFwtfkzUMMm0dDemmfhLXCqnnTGe
4yxWpBbyfFZ5PeoDvs59uLMLdD6kEiRYcaEZ6+Xt5qgchI5gKe2azf7ZT9rPCbwk
k581yLsEt4YYwyY4DxECVOItjme8kjmpirkJ+LhalQBRwbvkSq75OqBWsi1oYMnp
rScA8dTisl6DDU53ue0C2/3qwFNpVag=
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:21:09 2026 by rpki-client