
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44d29f1e-e1c4-3319-a596-bd89cee8064d.roa
File: 44d29f1e-e1c4-3319-a596-bd89cee8064d.roa (raw, json)
Hash identifier: JYS7B/ISz6Ixau4amRFrF7Xg6wGRB7TWTKcXlEDWDGg=
Subject key identifier: D4:D2:DB:DD:28:44:A8:A4:F5:82:86:C5:E6:3D:B6:0A:06:14:5B:33
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584D624A51CA4AA32E0E40628C20
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44d29f1e-e1c4-3319-a596-bd89cee8064d.roa
Signing time: Fri 03 Apr 2026 13:00:30 +0000
ROA not before: Fri 03 Apr 2026 13:00:30 +0000
ROA not after: Thu 02 Jul 2026 13:00:30 +0000
asID: 23473
IP address blocks: 66.253.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:62:4a:51:ca:4a:a3:2e:0e:40:62:8c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 3 13:00:30 2026 GMT
Not After : Jul 2 13:00:30 2026 GMT
Subject: CN=e502ddf6-1a7c-44ae-88e9-87ca66f51669
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:57:da:44:01:59:82:be:c8:c1:f0:ee:13:4a:
ca:43:11:0f:bf:ba:e7:8e:3f:86:4a:d7:e4:38:af:
6d:ee:7b:e3:70:b7:28:85:3f:dd:bf:b3:96:a6:8a:
7c:d0:e7:9f:22:4f:ee:cf:1c:d7:b2:b2:8f:9b:eb:
c5:60:ef:67:cb:9e:73:d4:61:68:84:35:86:8c:61:
79:45:b8:1b:20:28:dc:ff:8a:a9:f1:c9:01:0a:b7:
42:e9:f2:75:06:17:70:11:a6:10:01:bd:ea:0b:b4:
51:9a:74:07:0f:b3:37:aa:9a:bb:7e:1d:d2:ea:0d:
d7:62:af:79:6d:2d:4f:96:5d:b4:35:ea:e8:61:cb:
0b:06:1a:8d:37:75:ee:56:b8:6a:ae:0a:4b:31:e6:
b0:0c:55:df:cb:b2:56:5e:f1:f9:24:d9:6d:c7:5b:
89:20:f8:7d:4a:ee:fb:18:59:8e:be:a1:22:3f:d8:
08:48:49:95:6d:c1:12:ff:a6:57:a8:25:1f:d6:4b:
00:c7:cf:44:9c:21:c3:2a:05:17:f9:2a:c6:67:d1:
07:c0:11:50:b6:68:3e:77:1c:a9:5b:b6:b5:8b:4d:
ac:d0:8d:34:f6:9f:fe:31:14:bc:a1:2c:8f:6c:61:
ce:8b:5d:4d:73:df:b4:5e:6e:09:ca:12:3b:5d:be:
e8:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:D2:DB:DD:28:44:A8:A4:F5:82:86:C5:E6:3D:B6:0A:06:14:5B:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/44d29f1e-e1c4-3319-a596-bd89cee8064d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3f:06:42:58:03:25:26:a1:53:53:47:95:0c:83:dd:42:9b:f3:
7c:2a:1d:a1:2f:d6:c8:db:f0:51:56:62:20:26:88:8a:70:fe:
27:ed:ac:50:1c:cd:0a:fe:f1:dd:f1:0e:68:7c:3c:81:ec:c1:
7f:9a:23:36:75:98:b2:e0:28:1d:dd:ae:dd:db:20:bb:f3:f3:
25:55:3e:62:e7:cd:03:d2:82:d3:3c:65:0e:a4:43:0b:d8:b5:
dd:59:fc:3c:57:3a:c7:a9:59:2c:c5:70:65:8e:b8:54:8f:f3:
6b:1f:2e:de:4f:23:52:5f:80:f5:81:49:94:51:bd:55:05:db:
d8:47:06:de:ab:f1:82:e1:19:88:4b:22:e7:12:ac:9c:6f:c3:
a3:cd:84:7a:02:06:48:c9:3a:40:5f:57:be:4c:b6:16:73:2e:
10:1e:93:9d:68:22:ec:1e:02:27:b4:4e:33:f9:a6:66:e6:e6:
93:85:d7:07:e7:da:ea:98:84:bb:7f:2c:d6:24:ec:36:74:7b:
5c:33:0f:fa:59:9c:85:81:dc:29:fe:34:67:66:20:fa:89:4b:
0d:46:57:99:28:db:47:65:ce:fb:58:38:f3:f3:50:f9:31:1a:
b0:ea:8f:0b:70:78:f5:df:31:f2:d1:e3:8a:62:08:fc:2c:5f:
5b:c9:96:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:33:37 2026 by rpki-client