
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa
File: cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa (raw, json)
Hash identifier: BZwcqfKjyvj3/0nwef06bvAkmjI3PgcsqibGlTlJVro=
Subject key identifier: 71:5F:3B:C1:D9:92:D1:76:C8:C1:F5:ED:E8:33:0B:9F:DF:C0:52:BE
Certificate issuer: /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial: 010D0C9F4328584DE2B5E7E046BCFCF411E02E00
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa
Signing time: Tue 19 May 2026 13:00:32 +0000
ROA not before: Tue 19 May 2026 13:00:32 +0000
ROA not after: Mon 17 Aug 2026 13:00:32 +0000
asID: 13768
IP address blocks: 66.33.7.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e2:b5:e7:e0:46:bc:fc:f4:11:e0:2e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Validity
Not Before: May 19 13:00:32 2026 GMT
Not After : Aug 17 13:00:32 2026 GMT
Subject: CN=fa58a039-e572-4754-8e30-649c9ac3c95d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:c8:7d:9a:80:00:21:f9:44:99:9a:91:8d:57:
22:52:2e:4b:58:4d:e3:03:5b:2a:ed:69:9e:43:f8:
53:ae:47:7c:ea:77:99:36:4c:06:85:c5:31:f2:6c:
00:7d:5b:1d:b7:c1:77:1b:19:80:18:f2:22:87:c2:
a6:fd:24:05:81:74:63:7d:07:9c:7c:7e:08:2e:ad:
a1:51:e6:37:a2:58:a0:b1:55:54:dc:80:03:83:ac:
1a:2a:87:31:a6:c9:a3:30:ef:eb:23:d8:0e:e2:33:
0e:0b:ed:1d:5a:ca:d9:57:af:de:e7:6d:0c:b7:36:
46:1d:fe:04:7f:ef:f4:f3:96:af:e6:49:59:eb:a1:
93:da:5f:bf:b7:d9:6f:2c:ef:fc:dc:f5:59:2b:2f:
37:66:95:ef:a8:22:1a:e1:dd:3d:26:01:35:e2:4a:
75:50:23:30:6e:ca:c7:c3:42:c7:b7:7c:52:05:bc:
e6:0f:23:e8:99:1c:fd:48:71:a8:b2:a7:ae:bc:48:
12:83:c3:09:8c:07:0d:1b:63:93:c0:95:af:16:57:
f4:cd:22:a9:ca:14:9c:11:e2:4f:e3:6a:40:e2:3a:
7b:e2:94:33:3b:66:2b:ec:ea:c3:93:49:7d:4e:90:
4d:f0:4e:1f:77:72:e9:2a:18:64:19:91:9e:2f:f4:
13:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:5F:3B:C1:D9:92:D1:76:C8:C1:F5:ED:E8:33:0B:9F:DF:C0:52:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/cfb2ca27-5acd-310f-b7dd-75b842224e7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
X509v3 Authority Key Identifier:
keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
sbgp-ipAddrBlock: critical
IPv4:
66.33.7.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:45:d1:24:ea:45:c3:6b:e2:cc:f7:5f:4a:75:56:ee:1f:32:
69:70:61:1d:05:6e:1e:27:3f:91:25:86:e9:59:02:51:59:b5:
ce:8d:09:f2:9b:ae:2c:ef:2f:8e:91:5a:bb:b8:3d:25:40:dc:
f7:24:5e:79:3a:04:46:f1:95:2b:f8:26:66:a5:89:92:58:06:
ca:bd:0c:a6:0f:59:c8:a7:fe:94:91:ec:66:97:94:55:e5:e4:
75:b2:5d:d1:67:cf:92:59:23:53:5c:39:38:f8:d6:10:e3:10:
b3:f6:a7:24:ba:0d:3f:44:cb:1e:58:a1:63:eb:19:3e:24:7f:
95:a7:01:10:18:c9:58:be:e0:66:0b:a7:66:72:d0:36:90:04:
66:4b:fd:19:a3:1d:17:2b:44:ed:be:07:4b:9c:67:f9:6b:0d:
38:85:5a:57:08:9d:f4:5b:60:f1:c4:9e:82:c0:9d:16:ad:6d:
f3:97:9f:42:d9:76:45:81:21:25:54:f0:53:d6:f6:cb:1b:cb:
f7:4e:4a:9c:7f:2a:f4:dd:ec:d1:87:62:eb:91:70:75:ee:52:
24:41:16:aa:bb:a7:36:38:03:fe:ca:3f:60:6a:88:2a:84:58:
97:d3:bc:2b:7d:5d:91:ad:ef:e7:ff:cd:eb:51:83:dc:07:4f:
86:f1:33:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3itefgRrz89BHgLgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI2MDUxOTEzMDAzMloXDTI2MDgxNzEzMDAzMlowLzEtMCsGA1UEAxMk
ZmE1OGEwMzktZTU3Mi00NzU0LThlMzAtNjQ5YzlhYzNjOTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgsh9moAAIflEmZqRjVciUi5LWE3jA1sq7Wme
Q/hTrkd86neZNkwGhcUx8mwAfVsdt8F3GxmAGPIih8Km/SQFgXRjfQecfH4ILq2h
UeY3oligsVVU3IADg6waKocxpsmjMO/rI9gO4jMOC+0dWsrZV6/e520MtzZGHf4E
f+/085av5klZ66GT2l+/t9lvLO/83PVZKy83ZpXvqCIa4d09JgE14kp1UCMwbsrH
w0LHt3xSBbzmDyPomRz9SHGosqeuvEgSg8MJjAcNG2OTwJWvFlf0zSKpyhScEeJP
42pA4jp74pQzO2Yr7OrDk0l9TpBN8E4fd3LpKhhkGZGeL/QTsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFfO8HZktF2yMH17egzC5/fwFK+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvY2ZiMmNhMjctNWFjZC0z
MTBmLWI3ZGQtNzViODQyMjI0ZTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQiEHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADBF0STqRcNr4sz3X0p1Vu4fMmlwYR0Fbh4nP5ElhulZAlFZtc6NCfKb
rizvL46RWru4PSVA3PckXnk6BEbxlSv4JmaliZJYBsq9DKYPWcin/pSR7GaXlFXl
5HWyXdFnz5JZI1NcOTj41hDjELP2pyS6DT9Eyx5YoWPrGT4kf5WnARAYyVi+4GYL
p2Zy0DaQBGZL/RmjHRcrRO2+B0ucZ/lrDTiFWlcInfRbYPHEnoLAnRatbfOXn0LZ
dkWBISVU8FPW9ssby/dOSpx/KvTd7NGHYuuRcHXuUiRBFqq7pzY4A/7KP2BqiCqE
WJfTvCt9XZGt7+f/zetRg9wHT4bxM5s=
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:21:54 2026 by rpki-client