
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/3e94a548-76a2-3f8f-8933-5c4c2e5dd2c2.roa
File: 3e94a548-76a2-3f8f-8933-5c4c2e5dd2c2.roa (raw, json)
Hash identifier: gZ2mQEQGFeoxnJ0PlOZ72h93ZWCeqXE3S3l77GVwr4Q=
Subject key identifier: E5:AF:FC:83:5A:98:52:6E:7A:7A:1E:F7:3C:98:97:52:55:3B:EB:CB
Certificate issuer: /CN=a665cb61-7028-4565-8deb-5c2df54ff766
Certificate serial: 010D0C9F4328584F4112864E806AB4611A788100
Authority key identifier: AF:08:8A:77:B2:E1:46:2C:F8:00:76:22:CE:25:2A:1B:74:A6:F4:1B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/3e94a548-76a2-3f8f-8933-5c4c2e5dd2c2.roa
Signing time: Tue 22 Sep 2026 01:00:12 +0000
ROA not before: Tue 22 Sep 2026 01:00:12 +0000
ROA not after: Mon 21 Dec 2026 02:00:12 +0000
asID: 11738
IP address blocks: 66.97.116.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/a665cb61-7028-4565-8deb-5c2df54ff766.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/a665cb61-7028-4565-8deb-5c2df54ff766.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 01 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:41:12:86:4e:80:6a:b4:61:1a:78:81:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a665cb61-7028-4565-8deb-5c2df54ff766
Validity
Not Before: Sep 22 01:00:12 2026 GMT
Not After : Dec 21 02:00:12 2026 GMT
Subject: CN=3435f922-3985-4701-be56-c1221d829310
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b0:d9:fc:93:a9:b7:5e:c1:82:f7:5b:c5:6a:
25:a8:22:79:5e:48:63:96:b1:5c:b5:5b:cb:74:19:
f7:62:fc:da:30:d7:27:4e:44:26:61:6f:4a:4b:57:
de:32:96:d6:c8:be:fb:06:aa:c3:95:80:33:76:86:
e8:28:6e:2f:06:73:78:a8:a5:92:3b:f0:3c:eb:1a:
b3:ef:27:d3:c7:b7:48:1e:9c:8c:e5:70:a6:ac:d5:
51:62:31:93:db:2e:44:70:f0:ca:28:78:07:ce:3d:
c6:81:97:7c:c9:97:a8:fa:22:bb:0e:e0:fc:f4:d4:
c4:84:9b:d3:f5:87:58:6c:b8:8e:17:df:80:1b:f1:
13:aa:b8:95:5c:ba:7a:29:15:6c:8c:30:9b:24:9e:
77:3d:eb:f8:2d:73:53:e7:b9:23:18:6c:ca:1e:4b:
24:2e:7c:a5:79:cc:c6:b9:2a:c1:e0:65:98:56:22:
e1:46:01:3e:7c:87:22:61:9b:bf:57:3c:b9:07:91:
dd:7f:94:a2:e7:6f:6d:08:1f:47:07:4b:e7:19:f6:
cc:58:ec:f7:3a:3d:30:ec:4c:52:6d:bd:34:ce:17:
7b:7e:1b:45:38:f4:17:04:13:b6:bc:bb:c7:be:b2:
05:8a:16:37:92:08:5b:66:12:c1:63:06:f6:a6:95:
e3:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:AF:FC:83:5A:98:52:6E:7A:7A:1E:F7:3C:98:97:52:55:3B:EB:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/3e94a548-76a2-3f8f-8933-5c4c2e5dd2c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766/a665cb61-7028-4565-8deb-5c2df54ff766.crl
X509v3 Authority Key Identifier:
keyid:AF:08:8A:77:B2:E1:46:2C:F8:00:76:22:CE:25:2A:1B:74:A6:F4:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/a665cb61-7028-4565-8deb-5c2df54ff766.cer
sbgp-ipAddrBlock: critical
IPv4:
66.97.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:da:23:86:d1:c7:b5:d0:c5:78:9b:35:63:6e:11:3e:6f:12:
95:83:67:92:b0:c1:91:3f:95:f4:f6:28:2a:e7:d1:ed:2a:fa:
d6:6e:bc:fd:47:fa:ec:ea:a3:8a:a3:99:01:d6:01:92:49:24:
22:0d:fd:66:f8:d9:7f:5e:ff:e2:17:4b:1d:86:81:56:af:d4:
31:de:d7:43:dc:38:b6:7f:b7:6a:4e:5f:c3:d9:ff:e6:45:55:
6b:82:d8:c0:5e:9e:6c:19:53:46:24:13:5a:22:5d:53:0d:74:
70:10:3f:98:96:8c:f8:e8:a1:f4:a4:7c:05:b5:d9:5a:b8:fa:
a9:cd:c4:72:73:4c:a0:f3:ce:58:80:27:35:cc:71:99:8c:64:
1a:a4:18:43:b5:03:fd:cf:34:a5:09:b7:02:d4:5d:c8:0a:0d:
3f:de:91:10:b2:fd:61:c6:1c:9d:f4:79:7b:4e:a1:93:ec:5a:
cd:ee:db:b6:fb:72:c1:5d:a1:37:ef:9b:73:8b:78:f5:6c:dd:
fe:a5:66:c1:2b:32:22:81:77:f7:33:7a:8b:fa:4c:e0:5b:6a:
a3:2a:00:47:21:03:56:3a:2b:68:28:72:e7:ea:70:fc:ab:55:
0f:47:cb:b2:d3:85:de:5e:e4:c9:4c:3f:a3:02:bd:0c:18:ed:
76:fa:08:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 23:32:56 2026 by rpki-client