
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
File: bedfd239-0021-3ee0-be05-d5cf473a267e.roa (raw, json)
Hash identifier: 70bIdmvgcjziRivq2uyLSVZ7sDaDWJjzAbzU/6U+3Ag=
Subject key identifier: 2A:0E:0C:37:24:A5:9A:1A:2D:2D:7D:A1:86:1A:32:58:22:FB:DC:0E
Certificate issuer: /CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Certificate serial: 010D0C9F4328584DA8157601EEE7FC7AF6C94D00
Authority key identifier: F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
Signing time: Tue 28 Apr 2026 13:00:30 +0000
ROA not before: Tue 28 Apr 2026 13:00:30 +0000
ROA not after: Mon 27 Jul 2026 13:00:30 +0000
asID: 13414
IP address blocks: 64.63.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a8:15:76:01:ee:e7:fc:7a:f6:c9:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69f7b69a-b519-4b2d-a7be-03aa505b2576
Validity
Not Before: Apr 28 13:00:30 2026 GMT
Not After : Jul 27 13:00:30 2026 GMT
Subject: CN=777ae83e-6eeb-4569-a531-b597da06cab7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:2f:ec:b8:ab:59:ee:48:3d:b3:4b:60:80:cf:
5c:9b:27:9f:48:62:29:ed:71:93:87:cb:c5:ca:e3:
71:c8:c8:93:bd:b2:b8:ef:0c:99:20:af:f7:18:41:
1a:1a:c6:4c:d7:6f:19:dc:1e:52:0c:e9:58:18:ab:
61:53:a2:87:1c:a9:1d:27:3a:ed:4b:32:6f:86:1d:
95:be:60:64:cb:27:36:50:e6:b1:2d:97:a4:eb:62:
4f:51:bf:d9:12:a4:77:ba:84:11:f7:17:0f:cc:47:
76:39:2f:33:a6:6f:b9:3c:02:ef:1b:6f:30:c7:16:
b2:f7:e6:eb:33:53:c3:e6:00:a9:8e:e3:49:38:76:
3b:ed:49:f5:22:83:f3:b9:b6:c0:f2:48:ca:85:bd:
74:17:0a:95:1c:87:6c:8e:48:da:ef:91:30:92:5b:
bb:7e:65:e7:72:61:34:ef:ec:db:aa:81:e3:74:19:
ee:0b:0f:7e:34:84:2e:04:3b:03:0e:07:c0:28:40:
54:fc:e4:92:8f:38:6b:ff:a6:0d:9a:f7:ea:88:18:
4d:d3:43:47:36:28:0b:ac:e1:59:73:cf:86:f1:5e:
67:fd:1d:cb:ec:99:d8:4b:46:8e:7a:3d:06:8b:83:
d4:50:9b:c4:44:c7:5e:1b:59:3d:f7:4d:e5:a9:d9:
eb:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:0E:0C:37:24:A5:9A:1A:2D:2D:7D:A1:86:1A:32:58:22:FB:DC:0E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/bedfd239-0021-3ee0-be05-d5cf473a267e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576/69f7b69a-b519-4b2d-a7be-03aa505b2576.crl
X509v3 Authority Key Identifier:
keyid:F8:16:7F:27:F3:32:DB:C9:3F:6F:AF:95:76:04:9D:93:5D:9B:19:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/69f7b69a-b519-4b2d-a7be-03aa505b2576.cer
sbgp-ipAddrBlock: critical
IPv4:
64.63.24.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:11:cb:2b:2a:51:11:51:f5:1d:8f:e9:97:4c:9a:21:fc:90:
43:3e:31:b6:91:2e:45:7d:2c:53:af:5e:82:a5:5b:08:13:5e:
4d:d7:20:ea:41:c3:5f:81:d4:73:1a:fa:91:fe:c0:eb:f8:eb:
a4:c3:83:f5:5c:24:8c:7d:7d:4a:50:f7:e2:ec:aa:fc:6c:01:
4f:88:cc:b4:3f:71:90:97:81:d9:71:7c:09:2f:c2:42:b9:32:
b3:e6:ba:82:68:f3:ec:91:ae:cd:e3:56:64:ca:69:22:09:4c:
e1:f1:cf:03:03:99:e2:10:b5:65:03:9e:cc:3f:94:4b:ee:e7:
f5:a3:94:9f:a6:d7:4e:50:fe:15:6a:e7:9f:26:36:a6:96:2f:
d3:2a:08:85:dd:d2:f5:97:05:84:bc:69:dc:9b:0e:aa:21:bf:
01:79:a5:1a:12:96:ac:82:99:0c:0b:4a:21:35:8a:52:49:e2:
9e:6e:e8:b9:55:b4:b4:7c:1f:7b:f5:fa:45:d1:45:8d:23:b9:
da:b7:77:c2:c3:ab:5a:85:b5:f0:94:e2:0d:b4:15:6b:66:c7:
3e:34:7a:71:f6:f4:21:14:a8:56:23:77:8f:3d:2c:e1:d6:ca:
f5:73:e0:29:dd:de:80:da:01:e8:3f:97:d1:b3:d6:ef:39:0f:
b2:cb:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:01:28 2026 by rpki-client