
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e176478-67a9-3123-9063-63077f84b11d.roa
File: 3e176478-67a9-3123-9063-63077f84b11d.roa (raw, json)
Hash identifier: 2Bls4h+bNvxFkhdZVR6LnZ+jIgX02lU9RyozjnNBsR4=
Subject key identifier: EB:11:A3:D8:F4:C0:7B:FB:B2:0F:60:04:E7:F4:D4:82:3E:18:D6:EA
Certificate issuer: /CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Certificate serial: 010D0C9F4328584F4973E1D9E1A13625E5273EC0
Authority key identifier: DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e176478-67a9-3123-9063-63077f84b11d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 63062
IP address blocks: 66.82.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:e1:d9:e1:a1:36:25:e5:27:3e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f886df-6c58-4ea7-9d1f-0659e2324460
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7588a97e-5b75-4a7b-b4ab-f714d32d68fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:ff:71:dc:fe:b2:16:0e:f2:bb:15:2b:08:e7:
5f:e8:5c:f0:4d:ce:77:70:d9:6d:ba:52:42:58:47:
a0:12:fd:a9:21:2c:e8:fd:55:80:f7:5b:36:12:0d:
af:a8:3b:c3:ff:3b:ef:39:94:9d:f9:c1:bf:16:91:
b7:ee:3c:18:cd:5f:ae:f5:d1:6a:58:14:94:be:4a:
6e:7b:6b:26:21:50:58:21:5f:16:48:e6:4d:01:bc:
be:7f:7e:99:33:22:75:89:55:98:88:94:e2:8b:ab:
e8:0a:07:79:94:b3:46:bc:ce:17:8f:f6:3f:82:3f:
55:52:47:a0:34:a0:bc:d8:79:4b:3c:80:7d:9d:cc:
d7:c0:ea:56:df:55:e2:63:78:ff:10:33:16:43:9e:
e9:a0:72:20:e8:60:fb:c1:e5:0d:96:4e:49:32:35:
59:ee:33:00:8f:02:39:11:2c:4a:5d:d5:4e:ac:8f:
bd:ce:25:9f:b0:c1:62:fb:00:4b:5f:11:8a:07:06:
cd:f1:35:78:a4:b9:5c:48:84:67:aa:eb:74:60:83:
46:f7:9a:13:dc:c0:de:59:f8:21:e6:30:f5:4b:f1:
17:ca:95:9d:f0:64:22:ac:22:c7:81:e5:01:74:97:
e5:e5:e1:fd:2f:c8:83:9a:36:ca:30:e0:e9:95:d8:
d5:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:11:A3:D8:F4:C0:7B:FB:B2:0F:60:04:E7:F4:D4:82:3E:18:D6:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/3e176478-67a9-3123-9063-63077f84b11d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460/d1f886df-6c58-4ea7-9d1f-0659e2324460.crl
X509v3 Authority Key Identifier:
keyid:DE:16:51:20:56:83:D6:08:13:E6:42:45:8E:FD:16:70:EE:87:6F:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d1f886df-6c58-4ea7-9d1f-0659e2324460.cer
sbgp-ipAddrBlock: critical
IPv4:
66.82.23.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:12:9b:f7:e5:28:7a:05:da:c6:d0:89:2f:e3:05:a0:b6:cc:
0f:64:6c:c9:21:03:56:5c:b8:65:0d:d6:eb:15:4f:42:30:49:
8b:d7:c5:f0:1b:e6:0e:74:4f:3a:42:ba:f0:5a:1e:40:2c:53:
2d:69:a1:90:f9:8a:d3:ec:90:05:db:e6:8d:48:5f:cc:57:f6:
bc:5e:ae:9d:12:21:dd:f9:c7:5e:8d:19:19:99:36:f4:a4:a7:
8a:b2:7c:79:b3:c1:1e:2c:ca:d1:12:e5:dd:8b:ac:5a:13:ad:
21:6e:be:6e:5c:fc:f2:e4:5b:dc:55:c9:c8:70:21:d8:9d:8f:
55:4e:a4:73:68:f7:3b:78:fd:4f:ab:62:11:2c:e4:5a:da:79:
d6:ad:f4:8b:77:7b:65:f5:cf:c2:e3:15:73:eb:fe:e2:ab:c7:
da:ff:0f:67:12:34:2a:75:0a:02:ff:31:0c:ef:fe:63:89:cc:
4d:3d:d9:16:b2:b9:51:f0:ff:13:7f:c2:ed:d8:45:33:ba:b6:
4f:a5:31:04:00:46:97:a0:66:7b:cf:86:2c:70:81:f2:74:c9:
c9:d9:d1:51:51:42:94:90:72:66:6d:09:9b:86:47:61:fc:49:
b9:19:d0:75:2e:46:3a:ac:cd:39:44:42:19:94:4b:4a:51:df:
f6:9b:45:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 04:04:07 2026 by rpki-client