
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa
File: cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa (raw, json)
Hash identifier: BEU0ZV+zx1OQ5ZwpGhOGjOm4yaBPODnn2YupgDQaBbU=
Subject key identifier: 84:F5:8B:DA:6D:2B:24:35:5A:DB:4F:F5:15:3C:1A:F6:0B:53:1B:B6
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584E6DD4D1E695F01C8F8CDC3480
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa
Signing time: Wed 08 Jul 2026 09:00:12 +0000
ROA not before: Wed 08 Jul 2026 09:00:12 +0000
ROA not after: Tue 06 Oct 2026 09:00:12 +0000
asID: 23473
IP address blocks: 66.253.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6d:d4:d1:e6:95:f0:1c:8f:8c:dc:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jul 8 09:00:12 2026 GMT
Not After : Oct 6 09:00:12 2026 GMT
Subject: CN=32174c69-ff68-436d-80f4-28be80a0a73c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:79:82:59:8a:09:1d:3a:e5:74:f7:61:96:51:
4e:8b:67:34:d4:90:64:67:a3:7a:bf:76:d0:a8:72:
c1:93:af:b5:d8:bf:e8:ca:4b:86:be:5c:83:5b:d2:
19:ad:39:8c:12:a0:03:fe:fe:6e:f1:89:7d:17:d0:
d0:33:c8:88:d4:46:5f:76:aa:be:e2:e3:12:b3:73:
40:f6:eb:ed:de:94:47:0a:8a:7f:a9:02:be:b7:3c:
dc:4d:53:83:b4:97:e5:d3:d9:4b:46:70:65:a0:1c:
9f:34:89:77:61:9f:ef:ac:5b:31:2e:73:7f:54:f6:
ea:be:e8:2a:cf:8a:cf:18:f0:b1:25:5f:37:38:29:
5a:ef:13:86:84:b3:b0:92:08:24:ca:d3:5e:c7:4e:
b2:1e:a4:01:f3:eb:45:ad:c5:a1:c9:50:e7:6e:82:
85:89:6a:f1:77:e8:b3:83:8a:54:01:c5:f2:0b:ce:
82:e6:1b:76:15:41:7c:46:37:77:a6:d7:10:3c:be:
f1:cf:8c:07:5c:6e:a1:ee:8c:5a:83:b5:83:5d:0f:
57:7d:ec:57:41:39:6f:89:12:7b:74:cb:84:30:4b:
16:6d:21:28:ef:8b:e4:65:b4:a3:eb:23:6c:e8:cf:
28:64:4c:01:be:7a:80:51:24:7c:3d:c6:98:1f:69:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:F5:8B:DA:6D:2B:24:35:5A:DB:4F:F5:15:3C:1A:F6:0B:53:1B:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cb0e87ea-809b-355a-9ddc-cf8f8f977633.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.196.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:fa:98:e6:9f:55:1f:ce:94:d1:9f:9d:ce:51:f1:70:08:de:
3a:ed:4c:b3:70:ef:4a:9a:17:fb:16:7a:5c:ef:22:5c:7a:a7:
23:ec:91:50:fc:d0:f5:13:5e:d6:b5:89:92:80:a7:47:81:51:
85:16:d7:0e:48:36:bc:9e:87:16:4c:60:68:00:bf:91:fd:9f:
b5:4c:ee:dd:b1:40:23:2d:f2:49:9f:7f:5b:4f:86:7c:e3:87:
40:45:00:ae:76:a5:79:52:a3:9d:88:08:fe:99:05:0e:e8:38:
df:56:67:04:14:9b:3a:0b:40:b1:ba:84:53:6f:64:81:7d:9a:
3e:d6:c3:21:2f:22:d3:62:9b:b8:6c:1c:01:9a:3d:19:4d:27:
93:de:43:85:18:b0:e5:a4:d0:b2:40:61:e1:21:0a:a1:75:d2:
fd:fd:be:fe:d6:48:1b:7f:9c:05:37:71:0d:b2:f4:78:56:4d:
20:9d:3d:a7:3f:07:a2:3f:46:13:87:9a:17:be:f8:87:f3:cf:
5d:3e:0e:8e:ba:32:3f:d0:01:07:8a:2c:1d:6a:86:09:93:21:
04:e3:41:52:81:c3:05:3d:17:5d:8b:3d:53:06:8b:18:cc:a7:
69:33:01:66:98:1c:6c:ce:c9:00:30:ea:da:4b:49:d7:2c:aa:
4e:8e:92:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:14:26 2026 by rpki-client