
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/862067f0-83d4-3103-be6a-3028ef4936a3.roa
File: 862067f0-83d4-3103-be6a-3028ef4936a3.roa (raw, json)
Hash identifier: SYOyaJI9L/8ybzK+gCaOvKhm3Br0cJKsTeUl6TAVTsM=
Subject key identifier: C7:A7:FF:00:9B:F5:33:DE:3A:3A:5F:42:BF:CC:68:A4:0A:A1:DC:37
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584DE66B5E6E370E6B822B4FF300
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/862067f0-83d4-3103-be6a-3028ef4936a3.roa
Signing time: Wed 20 May 2026 20:53:50 +0000
ROA not before: Wed 20 May 2026 20:53:50 +0000
ROA not after: Tue 18 Aug 2026 20:53:50 +0000
asID: 212238
IP address blocks: 166.0.9.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 23 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e6:6b:5e:6e:37:0e:6b:82:2b:4f:f3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: May 20 20:53:50 2026 GMT
Not After : Aug 18 20:53:50 2026 GMT
Subject: CN=04d62ac0-6f53-4c6d-bd83-179f6c617afc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:d3:f5:cf:a8:f1:2a:06:37:a7:3d:36:4d:d7:
d3:64:37:63:57:96:7f:c2:2d:f4:c2:7c:0e:1b:33:
89:1a:f4:aa:d6:e0:55:62:00:82:d4:55:84:e8:5a:
96:e6:55:03:cf:c2:2c:0c:27:f5:a9:d3:46:bc:fe:
9e:49:df:ad:35:db:4b:dd:4b:3b:af:9c:08:66:37:
9e:00:0e:63:35:d8:e3:2e:f2:cd:70:15:83:a2:cc:
07:b3:20:55:6a:07:50:00:8a:17:88:b1:3a:bd:59:
9c:c7:d2:bf:56:d9:1b:75:2c:29:4a:54:dc:27:f9:
01:b7:cc:a6:c5:a0:43:04:d6:c3:e1:0a:70:a6:69:
18:05:17:a1:fd:a0:a2:a3:da:d8:06:af:30:62:07:
27:c1:01:ab:9f:d4:47:64:0a:75:1c:33:ca:34:31:
33:2e:f1:bc:47:fc:fa:d2:31:4b:dd:80:69:70:6c:
ad:d1:74:66:5c:04:f3:ec:55:c2:db:3d:d3:b3:3e:
28:b9:51:8a:0d:0c:d9:8a:a6:b0:53:78:e7:a3:98:
d3:5c:f7:bd:b4:f2:ab:3a:22:f9:ba:42:27:b9:6c:
60:fc:b5:97:46:94:25:1c:92:37:51:70:99:e9:b4:
40:fb:2b:91:9f:27:e5:4c:ad:83:41:9e:c1:34:14:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:A7:FF:00:9B:F5:33:DE:3A:3A:5F:42:BF:CC:68:A4:0A:A1:DC:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/862067f0-83d4-3103-be6a-3028ef4936a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv4:
166.0.9.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ae:ec:62:dd:a6:e5:d7:53:93:f9:a4:30:24:be:8a:57:14:c1:
23:a6:a2:62:98:c6:db:e0:55:5d:b7:22:40:52:3b:f8:06:4d:
f6:2d:be:49:25:84:87:77:7b:33:2f:65:db:e8:45:8d:a3:cb:
7b:87:48:bb:e5:26:d8:1b:b6:03:0d:db:79:5c:b3:1c:dd:9a:
7d:a0:a8:05:88:d7:c2:48:5b:f6:b3:73:2b:2d:e2:76:fa:34:
96:4a:13:9c:79:9d:0b:9f:da:13:a0:2f:5a:2f:bf:45:cf:be:
31:8c:e1:91:cf:1f:2d:56:90:57:45:d2:e1:cd:bc:7b:27:c3:
e2:9c:d9:af:12:f3:33:02:99:67:c9:b5:61:42:92:c2:2d:cd:
69:da:d5:be:05:a6:1a:bb:93:cf:07:e2:1e:3f:89:06:fa:96:
40:f2:eb:c4:75:bf:6e:5f:aa:ff:51:2c:a8:ad:a8:ea:13:d5:
18:79:da:ac:7d:88:80:a2:1d:3f:8c:d0:fc:77:d8:ae:a1:77:
cc:a9:27:50:a8:ae:60:b8:a8:16:c0:03:a2:67:cd:c6:2c:30:
57:7b:13:46:c6:94:3d:d6:1f:df:41:e2:75:17:d3:cd:15:11:
e7:3a:f9:60:50:73:77:7d:ae:9a:24:8b:ff:38:23:ce:d3:4a:
fd:f6:4c:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 20:00:49 2026 by rpki-client