
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81aae9be-04cb-38f6-a6b6-0763770e52a4.roa
File: 81aae9be-04cb-38f6-a6b6-0763770e52a4.roa (raw, json)
Hash identifier: AiQYhpmP06pDqU9EMaWQ5omCZiCbOeac7Jur8MjIS4c=
Subject key identifier: 24:35:97:4A:C8:A9:F4:81:39:E7:99:32:AD:F9:CD:6A:BB:F9:8B:A1
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584D624A5825AFC141B68F3E9240
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81aae9be-04cb-38f6-a6b6-0763770e52a4.roa
Signing time: Fri 03 Apr 2026 13:00:30 +0000
ROA not before: Fri 03 Apr 2026 13:00:30 +0000
ROA not after: Thu 02 Jul 2026 13:00:30 +0000
asID: 23473
IP address blocks: 66.253.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:62:4a:58:25:af:c1:41:b6:8f:3e:92:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 3 13:00:30 2026 GMT
Not After : Jul 2 13:00:30 2026 GMT
Subject: CN=dd8315cb-fe02-47c9-84c7-fb744da0586b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:60:40:32:1a:8f:ae:61:ab:13:59:a5:60:bc:
31:85:c2:69:2e:b6:92:d2:8b:6d:40:38:27:7b:41:
84:1d:4a:78:08:8c:fa:d7:88:4e:a7:26:47:ec:6d:
f7:11:72:9f:02:77:21:48:02:d8:8a:e1:4e:b0:20:
a1:ec:ae:9e:a7:9d:ad:b0:3a:75:d3:a7:10:59:bc:
51:8f:9c:2d:59:a1:92:49:b2:fa:84:3c:d7:da:65:
84:6c:37:b7:10:e4:fc:46:18:f6:7e:c0:f7:49:67:
2d:7d:3f:60:17:b6:5c:c5:f0:22:58:07:54:5b:0e:
7f:3e:7b:ec:6f:32:f6:05:4f:0a:f6:c1:57:3c:a9:
31:b0:69:5b:c3:e6:52:49:fd:f3:47:df:d7:14:f0:
11:56:75:f1:f1:c1:e5:0b:39:d9:9c:35:55:28:9f:
9b:b7:31:32:e0:82:55:ae:6e:3b:e9:35:3e:7b:ab:
f5:d5:3b:3c:bd:dc:96:81:30:c6:bf:ef:35:57:bc:
ea:c8:15:b0:c5:1f:84:38:78:e3:9b:fd:68:38:4b:
ea:e3:5b:f4:fc:f7:55:6c:f3:78:1d:f2:70:1f:5c:
4f:58:01:e0:83:1d:58:c6:ee:ca:3c:0f:43:8e:8b:
c1:3b:67:2e:cc:3a:ca:94:0d:16:d0:cf:c0:63:52:
ee:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:35:97:4A:C8:A9:F4:81:39:E7:99:32:AD:F9:CD:6A:BB:F9:8B:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/81aae9be-04cb-38f6-a6b6-0763770e52a4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
79:62:22:56:2e:c9:15:c5:58:38:9d:df:4d:36:b0:b6:53:3e:
0c:89:13:8e:fa:83:e1:89:56:56:b7:f7:ad:5f:08:c8:50:06:
2d:8c:44:a7:8e:42:86:b3:06:66:76:8c:22:89:70:89:53:14:
94:1b:63:b0:06:de:e6:df:d1:92:fe:cf:15:c8:6b:b0:03:92:
30:4f:8c:b4:6f:af:22:38:c2:62:3f:c2:d5:85:21:85:5b:f7:
e8:77:47:27:04:e6:3d:b4:55:06:79:c7:31:c7:23:e5:4c:93:
7c:12:d8:77:ee:30:05:f5:f7:8d:06:5a:2f:b4:a3:18:04:f8:
a9:45:87:ae:85:fd:05:ee:91:60:ae:96:1d:3e:71:8c:41:90:
23:4c:e6:81:51:65:67:c0:71:e0:20:56:9d:f3:0e:64:69:ab:
5c:b3:e9:b7:f9:e4:22:f6:ad:04:54:10:b0:bd:51:d2:95:a5:
d8:af:63:63:12:d6:43:a8:b0:51:2b:80:c3:c1:f0:4e:33:ee:
9c:0c:23:9e:ea:6f:8e:1b:89:84:13:af:02:16:77:7d:4d:80:
b5:8a:12:d3:7c:5f:33:db:9e:5e:bc:4b:0d:5d:71:be:a6:0d:
e3:c5:29:02:b7:64:e2:0a:5f:17:eb:7c:63:56:74:e6:eb:a7:
4c:b4:8c:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:45:33 2026 by rpki-client