
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa
File: ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa (raw, json)
Hash identifier: BixLD0NSzM6cT4nNWn0rUTM8nOUtuWm1Tzw1uLmlvWE=
Subject key identifier: 5D:91:B0:DC:76:24:62:36:88:B4:99:69:60:39:9A:A7:1B:CE:52:CC
Certificate issuer: /CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Certificate serial: 010D0C9F4328584EA78738DDEB7D88BFA179E198
Authority key identifier: 2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 399916
IP address blocks: 66.118.0.0/22 maxlen: 22
66.118.0.0/24 maxlen: 24
66.118.1.0/24 maxlen: 24
66.118.2.0/24 maxlen: 24
66.118.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:38:dd:eb:7d:88:bf:a1:79:e1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=64da013d-8ba3-4af5-80ad-7674bd0cc403
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=765abbe5-34d1-450d-8249-9d41896dcff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:4f:a9:31:af:39:e4:98:45:f4:d0:8f:1a:
27:95:86:72:f9:59:43:bf:ce:5b:a0:16:0d:a6:cb:
49:db:d4:8b:d7:e1:a9:f1:01:f0:63:16:c6:e3:04:
e2:da:20:5d:b7:f6:0a:c4:b1:b1:ff:e1:74:fe:fd:
31:81:26:a9:cc:25:79:2b:9a:e5:c4:49:c9:f8:37:
94:db:72:df:75:43:80:99:30:4e:29:17:9e:68:ff:
22:06:05:33:95:e6:3a:f4:96:3d:9c:29:04:f2:b0:
23:1f:0b:29:09:bd:5f:0a:86:73:e8:4e:cb:e1:e5:
a8:30:d3:39:69:e7:b6:6c:7d:d9:30:45:6e:27:3c:
f1:d6:f5:5f:61:fd:4f:97:c7:0b:5b:f0:38:05:0d:
32:42:78:15:db:1b:45:fb:38:e5:19:15:af:cd:f0:
88:bc:95:c5:38:a2:fb:88:b3:cb:75:e6:12:ee:6c:
7f:45:6f:50:38:22:d8:48:0a:28:e5:52:f9:a6:3e:
3e:f7:dd:51:31:47:e4:3c:ce:b8:d4:c2:b2:d4:69:
91:eb:f3:fc:e1:3f:96:41:47:20:53:5c:0d:78:f6:
d1:64:81:61:b6:80:f2:fc:0c:90:05:a2:d2:ad:e4:
ca:5b:99:e3:2b:5c:4e:b4:dd:37:25:68:15:c2:38:
a4:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:91:B0:DC:76:24:62:36:88:B4:99:69:60:39:9A:A7:1B:CE:52:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/ba9af7c9-4188-3aec-83ca-0e60298a99d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403/64da013d-8ba3-4af5-80ad-7674bd0cc403.crl
X509v3 Authority Key Identifier:
keyid:2D:D1:01:C1:DB:B3:F5:6C:57:8C:83:E5:D4:15:B8:40:06:A9:9F:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/64da013d-8ba3-4af5-80ad-7674bd0cc403.cer
sbgp-ipAddrBlock: critical
IPv4:
66.118.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:fd:60:cf:be:15:ea:ce:6f:85:62:35:a9:3c:e1:e6:13:39:
5a:bb:bf:64:0b:91:47:87:80:80:93:21:58:32:99:64:73:76:
ea:c0:c7:f1:b4:bb:71:5c:51:09:f2:6f:fc:87:a8:e2:64:d2:
1f:75:b5:d7:c5:16:89:cc:2a:5f:bd:2b:ae:7f:0b:11:30:55:
fd:70:4e:e7:48:d8:6d:97:46:c6:e4:78:f3:d9:90:65:0e:ee:
57:08:9b:27:a2:90:df:ca:90:ae:bd:ba:28:04:e8:d0:e2:59:
73:ab:93:56:0e:3d:d5:f8:a5:90:a9:18:36:3f:1a:2f:ba:4c:
29:df:4a:3c:03:5a:54:43:97:38:fb:45:af:d1:0d:70:df:1e:
aa:97:62:13:9f:c9:95:3c:a4:18:12:ac:74:97:f5:65:8a:5b:
c4:55:9e:99:02:e0:2c:dc:d2:36:08:72:3d:77:c2:2b:93:7b:
54:57:2e:5e:df:2a:ae:b3:60:87:5f:6f:d0:e7:f1:ce:ec:6b:
91:a9:b0:ec:5a:22:c9:f1:ce:d4:a7:2d:51:46:f8:1c:16:f8:
b1:bd:2c:42:a2:fc:d5:36:e7:04:8e:53:77:06:04:de:c5:9f:
82:d5:bf:ee:f7:2a:22:96:a4:bc:51:9b:dd:76:d7:34:e3:92:
b4:59:ce:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 03:57:18 2026 by rpki-client