
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
File: a661538f-4136-32b8-a899-88104881e2db.roa (raw, json)
Hash identifier: 7KjuxetRTDGzYUdYRMXxyZ5kunRPU9U7wX6kBzUm1G4=
Subject key identifier: BF:03:CB:B6:81:41:05:FA:28:A8:85:B6:26:F8:28:F2:4D:2B:B9:FF
Certificate issuer: /CN=d64341ea-4a31-4684-bf89-237774f5a468
Certificate serial: 010D0C9F4328584E9BE50C1B9973A766C2509FC0
Authority key identifier: A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
Signing time: Fri 24 Jul 2026 21:00:12 +0000
ROA not before: Fri 24 Jul 2026 21:00:12 +0000
ROA not after: Thu 22 Oct 2026 21:00:12 +0000
asID: 16509
IP address blocks: 66.22.176.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:9b:e5:0c:1b:99:73:a7:66:c2:50:9f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d64341ea-4a31-4684-bf89-237774f5a468
Validity
Not Before: Jul 24 21:00:12 2026 GMT
Not After : Oct 22 21:00:12 2026 GMT
Subject: CN=507ebbac-6417-445e-a1f8-5862be201524
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7e:85:12:50:a0:92:58:52:06:c4:66:4d:68:
b6:2f:8d:df:fa:37:4f:5b:05:c3:f1:7e:11:46:1b:
77:e3:91:35:34:43:4f:7b:de:ef:a0:8c:76:5f:8c:
49:26:d8:91:a8:54:16:87:6e:01:56:95:2f:3b:87:
b0:5e:70:74:e4:50:52:ab:16:b7:a4:a3:cc:09:ef:
6e:96:bd:81:e4:0b:23:fe:d9:ae:e7:68:41:46:cc:
56:8d:96:de:2a:59:4c:46:87:ae:ee:d0:3e:a1:6c:
0b:9e:c2:66:47:89:2e:c1:8f:67:f0:be:20:59:90:
ae:d3:0c:a5:17:d1:9c:26:89:56:3a:4e:4c:a3:d8:
75:99:06:be:4f:2a:78:0d:13:13:84:37:58:39:02:
b2:dd:f0:95:43:22:9f:0a:ca:df:a5:1a:4e:f9:29:
35:08:89:1d:f4:38:a0:ae:f5:ab:4f:76:cb:9f:6c:
8f:e9:82:1e:d4:35:e5:44:f9:90:40:17:5f:79:1d:
f9:eb:1e:24:17:8e:3b:fa:5d:14:c5:a3:0f:33:45:
c8:02:a6:1b:41:5d:53:3c:3f:c7:70:b4:4e:e6:7a:
f2:03:4b:df:3f:2f:f2:0d:4f:97:fc:ee:f1:f2:ed:
f4:38:f4:2e:12:35:e3:16:40:8d:d7:eb:26:aa:f3:
72:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:03:CB:B6:81:41:05:FA:28:A8:85:B6:26:F8:28:F2:4D:2B:B9:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/a661538f-4136-32b8-a899-88104881e2db.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468/d64341ea-4a31-4684-bf89-237774f5a468.crl
X509v3 Authority Key Identifier:
keyid:A0:EF:2F:9F:00:5D:6B:D6:72:21:F4:96:13:B6:9C:F1:14:FD:3A:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d64341ea-4a31-4684-bf89-237774f5a468.cer
sbgp-ipAddrBlock: critical
IPv4:
66.22.176.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:40:1b:a6:dc:f3:32:c0:82:c5:cf:55:7f:2a:8d:5f:be:24:
2a:0f:35:c3:7d:3c:e8:65:d4:7f:89:75:6d:53:5c:77:20:70:
97:b6:05:d0:60:ed:53:02:8b:67:fa:56:1b:3d:75:da:48:d4:
51:be:ce:1a:f2:96:a6:a8:2b:8d:9b:40:12:60:7a:82:ba:8c:
4f:eb:a7:eb:1b:c8:fb:ac:a1:79:60:b1:96:81:6b:be:b6:9b:
01:02:8b:0f:4a:d9:02:ef:64:23:70:a2:d7:0d:6c:6b:1d:e5:
a0:35:f4:e4:6d:66:f0:c7:78:32:eb:fe:44:dc:46:70:de:98:
92:c6:18:ef:b2:25:8e:81:95:41:d7:46:d2:95:28:c1:dd:85:
c7:77:d1:cc:b5:6e:d2:14:97:42:57:b3:f7:6a:d2:b0:0a:1d:
c3:8a:15:79:96:a4:09:26:cf:42:b9:6c:a4:4f:b7:a8:1e:c3:
a8:f5:b2:8c:53:8f:52:f2:88:1c:14:89:1d:c1:07:93:62:8e:
6b:5a:72:a8:5d:41:8d:e3:65:ce:d0:96:38:77:79:4e:4a:04:
53:f7:f8:c3:19:60:94:e9:7e:81:9b:56:93:49:0b:cc:db:15:
4e:98:6b:b6:fc:60:f7:a6:3f:6f:a9:9c:f6:a9:cc:ac:ee:fc:
03:3f:29:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 09:29:28 2026 by rpki-client