
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa
File: 3dec3551-0bf3-3375-88e1-4193eace0ec4.roa (raw, json)
Hash identifier: iZzX3ffR03QvdRI4wOQi0CuSxFtH+cnFX4lSq/geMo0=
Subject key identifier: D8:EF:FD:07:07:B8:E0:6A:22:EF:93:B1:10:4A:D5:51:AB:E4:CB:4B
Certificate issuer: /CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d
Certificate serial: 010D0C9F4328584F119D1680C1CDF27712397F00
Authority key identifier: 92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 16509
IP address blocks: 192.245.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:16:80:c1:cd:f2:77:12:39:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66eb90e9-650a-4afa-9238-5bcf4de38c9d
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=f9080e53-cf17-43d4-895b-f405b24b5c05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:8d:f8:22:8f:a3:da:ed:2e:72:3e:ee:7a:2c:
38:73:31:d6:79:90:ed:aa:72:ff:f1:26:68:ab:32:
3f:d1:0f:a4:3f:f2:78:e0:3b:2f:e8:b7:40:fa:f2:
00:34:83:c1:d5:a2:05:11:e4:3a:c0:ab:46:52:4a:
8c:36:9c:10:c5:4e:96:84:74:14:db:f1:9c:5e:4f:
f0:c3:21:7d:4d:b5:28:c6:89:67:9f:ea:60:70:70:
69:47:06:ba:59:cf:08:08:3e:32:99:ac:27:53:cd:
19:41:b4:bb:6e:97:45:51:9f:52:2b:a4:b1:61:2b:
a0:5f:e4:db:17:1a:ab:4e:6b:1d:65:cb:9e:51:2e:
8c:55:12:59:ad:75:9c:c3:41:b2:0d:93:a8:02:42:
09:78:85:9a:b6:bf:be:d5:93:4f:98:fe:d0:2f:a5:
5a:0f:72:52:43:66:29:10:dd:d9:1c:cd:ab:82:e4:
6d:27:bb:f9:52:f4:8f:7c:21:82:b1:86:7a:f0:f7:
61:65:e0:ee:33:12:41:1c:d8:e1:5a:0a:39:27:ec:
01:55:b2:c8:2b:ea:14:58:8a:5d:d3:aa:05:10:08:
df:96:69:40:19:7e:d6:3d:bc:38:14:f4:51:85:ee:
60:d8:56:12:56:61:e3:6c:19:ea:c2:25:45:88:62:
c3:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:EF:FD:07:07:B8:E0:6A:22:EF:93:B1:10:4A:D5:51:AB:E4:CB:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/3dec3551-0bf3-3375-88e1-4193eace0ec4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d/66eb90e9-650a-4afa-9238-5bcf4de38c9d.crl
X509v3 Authority Key Identifier:
keyid:92:A9:EB:71:63:D7:30:A1:9C:1D:0F:36:CD:9D:62:3F:9B:33:3A:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/66eb90e9-650a-4afa-9238-5bcf4de38c9d.cer
sbgp-ipAddrBlock: critical
IPv4:
192.245.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ce:4c:70:fe:1a:c5:3a:aa:d6:58:db:e0:d8:7b:ee:af:42:d9:
25:86:d7:28:f5:27:57:18:f8:fe:b1:34:44:d4:3c:d3:d4:91:
8d:93:64:16:c4:6a:75:5f:c0:98:43:ac:e0:cb:45:26:0e:71:
9a:85:d1:37:f3:7f:bf:be:d9:f4:e7:3a:fd:7e:10:ed:ce:49:
af:7e:96:57:4e:4f:bd:9c:cd:2c:d7:e3:3b:7f:bb:ba:83:1f:
78:4c:43:e1:ad:eb:02:ca:eb:50:e3:c9:3d:e4:b8:f2:98:ef:
21:c9:7f:80:f4:61:1e:dd:d2:71:da:24:d3:76:d0:90:41:36:
67:da:11:ea:f5:58:85:fa:26:2a:e9:c1:03:1c:0c:15:5e:8d:
1c:ef:fd:f9:27:86:83:d6:1f:e7:47:53:23:29:ed:ee:29:b7:
f3:71:0f:09:13:6b:25:db:0c:bc:45:96:5f:8b:bd:5e:c9:97:
73:63:d3:69:fd:a0:b3:fd:16:f4:df:cc:de:3b:67:69:c1:87:
59:a0:4a:b2:38:70:22:f8:34:f1:ec:fb:6c:f0:f0:be:7b:36:
33:0e:4c:17:e0:c5:4d:90:93:70:1d:a4:cb:12:2b:f2:5b:fb:
bb:e6:a2:6c:d8:cd:f9:26:8f:72:b7:13:2d:30:dd:cc:82:75:
b8:a0:9a:62
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnRaAwc3ydxI5fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlYjkwZTktNjUwYS00YWZhLTkyMzgtNWJjZjRkZTM4
YzlkMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZjkwODBlNTMtY2YxNy00M2Q0LTg5NWItZjQwNWIyNGI1YzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAro34Io+j2u0ucj7ueiw4czHWeZDtqnL/8SZo
qzI/0Q+kP/J44Dsv6LdA+vIANIPB1aIFEeQ6wKtGUkqMNpwQxU6WhHQU2/GcXk/w
wyF9TbUoxolnn+pgcHBpRwa6Wc8ICD4ymawnU80ZQbS7bpdFUZ9SK6SxYSugX+Tb
FxqrTmsdZcueUS6MVRJZrXWcw0GyDZOoAkIJeIWatr++1ZNPmP7QL6VaD3JSQ2Yp
EN3ZHM2rguRtJ7v5UvSPfCGCsYZ68PdhZeDuMxJBHNjhWgo5J+wBVbLIK+oUWIpd
06oFEAjflmlAGX7WPbw4FPRRhe5g2FYSVmHjbBnqwiVFiGLDbQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjv/QcHuOBqIu+TsRBK1VGr5MtLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82NmVi
OTBlOS02NTBhLTRhZmEtOTIzOC01YmNmNGRlMzhjOWQvM2RlYzM1NTEtMGJmMy0z
Mzc1LTg4ZTEtNDE5M2VhY2UwZWM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNjZlYjkwZTktNjUwYS00YWZhLTky
MzgtNWJjZjRkZTM4YzlkLzY2ZWI5MGU5LTY1MGEtNGFmYS05MjM4LTViY2Y0ZGUz
OGM5ZC5jcmwwHwYDVR0jBBgwFoAUkqnrcWPXMKGcHQ82zZ1iP5szOgAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82NmViOTBlOS02NTBhLTRhZmEtOTIzOC01YmNm
NGRlMzhjOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwPVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM5McP4axTqq1ljb4Nh77q9C2SWG1yj1J1cY+P6xNETUPNPUkY2TZBbE
anVfwJhDrODLRSYOcZqF0Tfzf7++2fTnOv1+EO3OSa9+lldOT72czSzX4zt/u7qD
H3hMQ+Gt6wLK61DjyT3kuPKY7yHJf4D0YR7d0nHaJNN20JBBNmfaEer1WIX6Jirp
wQMcDBVejRzv/fknhoPWH+dHUyMp7e4pt/NxDwkTayXbDLxFll+LvV7Jl3Nj02n9
oLP9FvTfzN47Z2nBh1mgSrI4cCL4NPHs+2zw8L57NjMOTBfgxU2Qk3AdpMsSK/Jb
+7vmomzYzfkmj3K3Ey0w3cyCdbigmmI=
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:37:45 2026 by rpki-client