
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa
File: 9a4b6489-f063-398d-a440-ddfd34fb38fc.roa (raw, json)
Hash identifier: 5NB/q/8RvJE0UP4DbVQVPEhq7ePs1i3Egoqqq9sBd+g=
Subject key identifier: 54:12:30:19:15:42:2F:BD:59:56:74:C7:C9:30:67:2A:75:57:72:53
Certificate issuer: /CN=590468a2-be81-410c-b887-a35157322fb1
Certificate serial: 010D0C9F4328584D5E1A6E61B1268147D4789300
Authority key identifier: CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 13487
IP address blocks: 66.103.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 09 Apr 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:6e:61:b1:26:81:47:d4:78:93:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=590468a2-be81-410c-b887-a35157322fb1
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=8eb10c87-a45e-4888-9c35-5ca572a327fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c8:c8:4b:3a:12:1c:01:8a:cf:c3:4f:5f:e5:
c0:6c:82:11:1f:53:26:47:ac:90:ab:47:c8:d7:64:
59:f1:56:4c:81:dc:81:3e:20:3d:fb:88:01:7f:35:
61:f0:91:01:06:80:55:28:1c:64:49:c2:1b:e3:3a:
bf:9a:76:31:1e:14:25:f9:2a:db:bb:43:72:af:90:
5c:53:df:99:9f:64:3d:ed:86:8c:bd:03:4e:05:d0:
74:de:48:b2:c6:21:39:8b:46:e8:8e:80:df:39:fe:
34:db:e9:7d:0f:17:7e:8e:74:46:21:72:14:8c:02:
e7:2f:23:5a:c5:90:cb:54:17:d6:7a:25:f2:1c:4f:
c3:30:f8:f7:97:3d:da:b4:ac:17:d0:6f:4d:10:8b:
c4:3f:9e:7a:dd:b3:bb:31:18:84:e0:d2:a4:d8:88:
b4:40:82:13:05:fe:65:98:f5:01:c6:9e:b2:4d:65:
e9:a7:49:ba:7a:e1:78:14:db:b1:c2:3a:d7:52:f3:
60:bd:9b:21:44:3c:a1:b4:56:83:48:5a:c6:4a:86:
52:41:d4:2d:5a:f8:70:c5:b4:1d:65:9b:ab:a9:c1:
bd:bc:d5:a8:80:6d:5b:e4:37:38:11:d4:8a:de:af:
c1:77:f4:3f:55:38:ee:96:3c:d9:3a:b2:b4:8c:38:
11:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:12:30:19:15:42:2F:BD:59:56:74:C7:C9:30:67:2A:75:57:72:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/9a4b6489-f063-398d-a440-ddfd34fb38fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1/590468a2-be81-410c-b887-a35157322fb1.crl
X509v3 Authority Key Identifier:
keyid:CF:DF:9C:BF:5D:27:FD:69:41:08:E0:A4:C0:BC:C2:DA:A9:E8:0E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/590468a2-be81-410c-b887-a35157322fb1.cer
sbgp-ipAddrBlock: critical
IPv4:
66.103.155.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:10:68:e4:f9:f5:9c:54:a1:2e:14:d9:19:59:1a:f1:ea:67:
53:68:aa:28:72:35:a1:db:7d:34:54:67:04:46:bf:f8:ff:af:
52:44:2b:35:78:cd:f6:1b:10:2f:6f:dc:bc:cd:8f:6d:dd:01:
81:a2:e6:f6:f1:06:ff:5f:8b:9b:a2:37:04:80:ea:d0:b1:49:
8c:70:ef:aa:2e:b5:77:53:48:21:56:f5:29:e8:90:ba:ce:d7:
39:c6:65:fa:24:16:21:21:45:91:46:48:a7:51:3d:04:6d:6c:
21:c6:c6:83:c5:ca:87:be:f9:1d:1b:1d:72:6a:20:da:f1:47:
51:4c:3e:db:23:39:41:e6:b7:41:9c:e2:38:02:9f:c1:70:20:
23:99:c2:fc:e8:75:b0:12:68:e4:7a:92:cf:83:ab:0a:8f:9e:
02:a2:28:e4:92:dc:10:29:3e:27:a3:a5:1b:bf:92:22:99:8c:
38:06:06:d3:a0:6f:03:b5:ad:37:b6:48:8b:c6:0a:34:e9:2a:
31:e0:e6:be:3c:a1:80:23:d5:2e:2b:ce:a3:ec:d1:b8:7d:b4:
bc:79:7b:54:1e:9d:16:af:2a:d4:09:e7:e6:1d:78:49:a1:8c:
d4:ea:8e:08:da:0e:78:fa:5b:31:9c:5e:c6:6c:97:c0:62:6b:
45:8d:2b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 8 14:36:54 2026 by rpki-client