
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4feda7a2-da10-33e4-aeca-202f86fc893b.roa
File: 4feda7a2-da10-33e4-aeca-202f86fc893b.roa (raw, json)
Hash identifier: 5CFuLmDGabQS8U4XO4oIiNAiCc5/fpijcT3UTnAea40=
Subject key identifier: BF:58:1D:B9:D4:F2:CD:50:BF:7C:81:BC:23:E5:79:01:8E:DA:8A:A8
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584DC135A7FA4D82CC2CC6DC0FC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4feda7a2-da10-33e4-aeca-202f86fc893b.roa
Signing time: Thu 07 May 2026 13:00:31 +0000
ROA not before: Thu 07 May 2026 13:00:31 +0000
ROA not after: Wed 05 Aug 2026 13:00:31 +0000
asID: 23473
IP address blocks: 66.253.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:c1:35:a7:fa:4d:82:cc:2c:c6:dc:0f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: May 7 13:00:31 2026 GMT
Not After : Aug 5 13:00:31 2026 GMT
Subject: CN=5ad77fc4-0615-4175-95af-b80076a3eb0b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:56:9a:46:7b:c8:3f:04:7e:98:05:65:17:9e:
60:ed:ab:ce:46:56:15:ac:bd:82:65:b6:6e:48:67:
03:e3:cc:1b:19:7a:2b:68:28:b7:c0:1b:ce:a2:28:
0c:a6:34:c4:69:80:58:23:d7:f1:4b:70:cd:ad:f5:
d6:dd:54:e1:67:7c:e7:1b:7f:ab:1b:3e:ce:66:78:
5b:d2:5a:45:19:28:20:78:8a:7b:e4:14:15:82:ed:
79:90:4c:bc:8e:7f:a1:c5:f2:ef:00:e1:35:6d:c0:
f7:51:cd:01:0e:d2:fb:f5:df:fc:87:80:1c:ce:b6:
21:02:6a:6d:97:df:d6:00:9d:14:74:88:14:2d:2c:
51:75:ef:89:1a:88:68:12:9d:f2:e7:40:9b:c1:b9:
62:da:fc:14:81:00:71:aa:ff:21:34:3b:57:5b:90:
7f:f9:d9:cd:e4:3a:aa:c8:ad:c4:44:dd:be:df:15:
a8:8a:30:e8:12:08:95:07:48:76:7f:c3:5d:9c:61:
be:b0:37:95:84:c2:da:1e:90:80:b1:f4:d6:44:21:
8b:84:78:e4:14:05:8e:03:bb:eb:e4:4d:e2:aa:7a:
16:62:ae:7e:50:69:74:33:9a:e2:36:fe:75:d6:9d:
b9:9e:af:64:2e:93:fa:f4:8b:16:ee:05:28:9d:d1:
25:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:58:1D:B9:D4:F2:CD:50:BF:7C:81:BC:23:E5:79:01:8E:DA:8A:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/4feda7a2-da10-33e4-aeca-202f86fc893b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.208.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:07:d4:22:b9:b7:ed:31:35:46:7f:d3:7b:64:15:a8:bd:d7:
b9:d0:bf:9b:e9:ae:40:76:17:8a:87:dd:6d:84:1d:29:34:51:
79:52:ba:d5:e1:73:c1:e4:1e:55:a7:b3:c6:d6:95:0b:7d:06:
fb:9a:61:25:04:f4:78:92:1a:c5:81:ae:c9:d3:c5:49:74:87:
20:d7:6b:26:0c:ef:e9:cc:79:7c:59:19:09:8b:63:fa:0a:bb:
ab:3e:f2:cb:f7:e5:2e:a2:8a:15:ea:5e:7a:b2:c9:bc:83:b3:
72:9a:ea:2b:17:ba:d8:3b:20:00:a1:c4:f5:bc:42:e2:12:4c:
d0:af:6b:79:ad:d8:74:2c:53:49:4f:2b:9d:55:4d:76:dc:4e:
72:ce:44:b0:ec:ac:95:89:b8:15:77:d1:28:27:c7:0b:7d:49:
41:4e:c5:ad:03:75:5f:51:19:af:48:27:4a:1c:db:93:3c:d5:
8f:ec:0b:35:3e:9e:cb:79:8e:b6:65:e8:7b:b8:23:f9:f6:40:
16:2a:fb:12:ea:69:90:a5:3f:32:50:7c:16:37:a1:46:23:b2:
be:7e:cd:62:17:a4:8d:aa:d1:21:d8:56:f0:ed:ad:04:a8:6f:
e2:47:f4:e1:0e:6e:7b:49:c4:43:b6:b3:d6:2a:cf:43:0f:40:
b9:0b:6b:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:19 2026 by rpki-client