
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
File: 887961af-3aed-3506-bd33-2d162c0a8179.roa (raw, json)
Hash identifier: 70jhxOVMmhCzAY292nYJB4W+MNeIQMkyeRgb/Xxjd+I=
Subject key identifier: 76:1A:6C:8C:AE:5D:79:55:72:17:5E:6D:90:84:A1:F8:1F:8C:E9:44
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584E6DD4CE6C765274644D50C300
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
Signing time: Wed 08 Jul 2026 09:00:12 +0000
ROA not before: Wed 08 Jul 2026 09:00:12 +0000
ROA not after: Tue 06 Oct 2026 09:00:12 +0000
asID: 23473
IP address blocks: 66.253.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6d:d4:ce:6c:76:52:74:64:4d:50:c3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jul 8 09:00:12 2026 GMT
Not After : Oct 6 09:00:12 2026 GMT
Subject: CN=8d0a9404-19c3-4fd8-bd66-51d3e21f78e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:8c:93:7b:8b:ac:51:da:3b:ea:d0:c3:3b:2a:
06:f9:5c:5f:a9:90:48:f2:7d:b0:17:47:18:5f:e6:
9e:c3:cf:2c:c5:e3:8d:37:43:08:f2:12:db:1b:7b:
55:19:ca:79:ee:7d:a3:d1:9c:ee:03:71:e1:7c:f6:
bc:42:0e:41:64:5d:99:b2:2e:f2:c8:02:a8:89:e8:
42:5a:a0:0e:6b:eb:e9:06:f3:bb:ec:6a:d5:9a:b6:
4c:c0:69:74:33:f9:e0:cb:0c:44:7f:01:07:cc:39:
ac:87:18:03:7a:8e:33:27:d5:92:ee:a3:d7:e1:3a:
de:93:5e:98:e3:e4:1d:e0:c6:f8:7a:8b:00:9d:39:
06:2a:07:90:72:e8:b1:f8:75:b9:24:7f:ce:52:80:
6c:91:f2:49:ba:b3:9a:bf:dd:bd:73:f0:22:42:83:
f2:fd:ed:d1:ff:84:eb:d3:1e:ac:b4:7f:cf:a4:b2:
24:c2:1e:a1:51:c9:4b:79:90:67:3d:61:88:5e:19:
22:c7:aa:0b:a9:2d:1c:39:2a:19:f9:55:8a:ab:af:
49:17:8e:d5:25:2a:1c:2e:97:b1:8e:48:dd:d8:89:
3e:40:94:a6:6b:8f:bb:8b:85:ee:c5:11:96:d1:17:
6c:78:db:ee:fa:cb:ec:c0:1e:9c:d5:b0:d4:46:ab:
7e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:1A:6C:8C:AE:5D:79:55:72:17:5E:6D:90:84:A1:F8:1F:8C:E9:44
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/887961af-3aed-3506-bd33-2d162c0a8179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.172.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:9b:a5:8d:81:21:4a:9b:3d:2b:71:9d:6a:1f:a8:5e:a7:d2:
d7:09:f5:41:e8:bd:8c:ca:3d:6a:bd:c6:80:f5:d4:b4:38:1a:
55:d1:9c:a6:19:ed:2f:ea:cb:71:83:cc:87:59:67:35:4d:9a:
c7:5d:a9:96:9e:cb:6e:73:78:e3:f1:78:6a:59:c5:a4:d1:d9:
aa:b2:d0:01:89:a2:eb:63:a2:f5:52:d6:e8:38:e8:9f:bc:c1:
e4:53:66:43:df:ee:78:ef:b1:8e:98:e6:8d:4a:a0:0e:2e:29:
52:de:58:15:95:a6:d2:b3:c3:e6:48:4a:3a:02:4c:2a:08:22:
f0:b1:de:b6:75:4e:a4:d1:45:8c:b2:07:a0:74:2a:84:d7:fc:
7e:b0:4b:e9:2e:61:b7:a1:98:10:bd:4a:4a:8c:ef:3b:f5:3a:
18:83:2b:b1:58:7c:ba:d7:52:36:0b:e0:ff:7c:d0:df:a6:c0:
c9:0d:b6:bb:6d:5a:d9:96:72:e6:c0:1c:2f:ab:89:94:68:d3:
79:b5:87:ed:02:b5:28:03:f3:37:02:0e:fe:c5:2e:cb:8d:42:
60:88:96:d6:38:04:0e:dd:31:3e:c2:a9:59:59:22:92:d2:19:
25:c9:94:bf:86:f6:3f:ec:cf:95:f9:d4:c9:cd:3e:2a:21:f7:
a9:bd:32:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5t1M5sdlJ0ZE1QwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDcwODA5MDAxMloXDTI2MTAwNjA5MDAxMlowLzEtMCsGA1UEAxMk
OGQwYTk0MDQtMTljMy00ZmQ4LWJkNjYtNTFkM2UyMWY3OGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7IyTe4usUdo76tDDOyoG+VxfqZBI8n2wF0cY
X+aew88sxeONN0MI8hLbG3tVGcp57n2j0ZzuA3HhfPa8Qg5BZF2Zsi7yyAKoiehC
WqAOa+vpBvO77GrVmrZMwGl0M/ngywxEfwEHzDmshxgDeo4zJ9WS7qPX4Trek16Y
4+Qd4Mb4eosAnTkGKgeQcuix+HW5JH/OUoBskfJJurOav929c/AiQoPy/e3R/4Tr
0x6stH/PpLIkwh6hUclLeZBnPWGIXhkix6oLqS0cOSoZ+VWKq69JF47VJSocLpex
jkjd2Ik+QJSma4+7i4XuxRGW0RdseNvu+svswB6c1bDURqt+QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYabIyuXXlVchdebZCEofgfjOlEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvODg3OTYxYWYtM2FlZC0z
NTA2LWJkMzMtMmQxNjJjMGE4MTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQv2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2bpY2BIUqbPStxnWofqF6n0tcJ9UHovYzKPWq9xoD11LQ4GlXRnKYZ
7S/qy3GDzIdZZzVNmsddqZaey25zeOPxeGpZxaTR2aqy0AGJoutjovVS1ug46J+8
weRTZkPf7njvsY6Y5o1KoA4uKVLeWBWVptKzw+ZISjoCTCoIIvCx3rZ1TqTRRYyy
B6B0KoTX/H6wS+kuYbehmBC9SkqM7zv1OhiDK7FYfLrXUjYL4P980N+mwMkNtrtt
WtmWcubAHC+riZRo03m1h+0CtSgD8zcCDv7FLsuNQmCIltY4BA7dMT7CqVlZIpLS
GSXJlL+G9j/sz5X51MnNPioh96m9Mpg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 10:27:46 2026 by rpki-client