
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa
File: fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa (raw, json)
Hash identifier: F2Q4giRgznNO1mHIeBG9JS2XMyQsJVw9jerd546Pazc=
Subject key identifier: 1D:D8:BA:20:63:76:62:BF:80:F1:C2:A7:65:68:6E:6D:82:39:41:33
Certificate issuer: /CN=249140ca-277e-4871-a100-451d066d1c5b
Certificate serial: 010D0C9F4328584EA8EC3AE9358DE0FE4966DB80
Authority key identifier: 70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa
Signing time: Wed 29 Jul 2026 13:00:12 +0000
ROA not before: Wed 29 Jul 2026 13:00:12 +0000
ROA not after: Tue 27 Oct 2026 13:00:12 +0000
asID: 35927
IP address blocks: 64.18.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a8:ec:3a:e9:35:8d:e0:fe:49:66:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=249140ca-277e-4871-a100-451d066d1c5b
Validity
Not Before: Jul 29 13:00:12 2026 GMT
Not After : Oct 27 13:00:12 2026 GMT
Subject: CN=75ee59fc-d1a0-467a-b3ca-87c451b9ae37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:64:80:b0:a0:e6:a0:f3:c4:12:35:ba:34:e4:
e2:5f:dc:6b:f7:3c:8f:95:68:94:92:91:ff:4e:af:
9a:15:aa:73:cc:a7:20:3e:6e:39:f8:56:ea:84:7b:
10:90:85:db:98:c1:f8:b4:23:2a:fb:a5:cd:aa:96:
6f:10:5d:7b:a2:dc:b0:ef:a3:80:99:ff:6e:8d:1b:
39:e9:f3:dd:29:50:06:8a:55:80:5d:57:58:f8:ca:
dc:fd:08:6a:f1:fb:a5:4b:8c:ab:c9:6b:33:26:b7:
e7:f6:87:f1:11:7f:d3:77:d6:5f:f0:11:75:76:e3:
67:9f:7a:ee:a1:69:35:84:54:c3:f6:a4:e8:49:58:
7b:25:da:dc:f6:5f:c3:97:99:06:77:da:bf:3c:3f:
88:a0:ce:6c:c0:8c:cb:a8:63:69:fa:a0:b5:34:75:
64:73:39:0e:f3:0a:e7:a8:42:c2:e8:d3:8d:01:01:
61:e4:72:f8:af:89:72:ed:60:60:f2:2e:95:c4:62:
6b:d5:f8:18:c1:d9:e3:2f:31:be:ef:50:3f:91:73:
7b:44:c9:90:c1:05:58:d3:30:db:6b:67:c5:af:9f:
b9:d4:9c:79:bf:c2:74:7f:2f:03:8f:4b:2d:7d:d3:
55:b6:bc:e7:57:7c:02:0b:28:36:7f:7c:ce:a0:e4:
df:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:D8:BA:20:63:76:62:BF:80:F1:C2:A7:65:68:6E:6D:82:39:41:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/fe1e7bb7-29f9-3461-a13c-fa9ad991426b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b/249140ca-277e-4871-a100-451d066d1c5b.crl
X509v3 Authority Key Identifier:
keyid:70:24:EC:DD:BE:F2:FA:EB:DA:F8:B5:4C:BA:02:C0:43:81:3D:48:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/249140ca-277e-4871-a100-451d066d1c5b.cer
sbgp-ipAddrBlock: critical
IPv4:
64.18.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:d3:91:ce:59:a3:6c:d2:1c:fe:de:37:f9:13:15:39:c1:8c:
fe:79:f8:e6:59:8c:a2:3a:fd:70:03:ac:65:80:ec:46:ac:32:
71:7f:ad:ea:48:5f:d8:a2:7e:66:f0:28:7c:f7:0f:3d:82:8f:
83:86:94:7b:ab:31:7e:fa:f6:0f:d5:eb:8e:43:c7:1e:80:68:
b5:48:8c:0f:69:e0:54:6a:54:40:5b:0a:46:7c:1e:a5:34:e1:
b8:0b:84:d6:9b:68:e4:00:68:90:14:5e:fe:80:99:84:e0:b0:
07:d5:fb:e0:46:ea:88:45:f9:4f:8a:f9:5a:0c:11:cf:e4:12:
a1:eb:b7:7a:4a:2a:e6:27:22:29:28:9e:8c:b4:a9:b2:d2:e4:
85:23:13:f4:9c:72:94:24:a0:7e:09:43:5c:23:cb:bc:dc:f5:
6c:2a:13:d6:fb:68:45:fd:ca:a1:e7:7e:76:f3:89:02:c3:a3:
02:5e:83:bd:82:a7:37:07:94:c0:be:57:2a:f5:4f:e4:47:50:
e7:74:a3:39:45:e3:0e:10:5e:7e:63:4d:fd:cd:1a:9f:83:68:
3a:02:0e:64:38:14:c2:b8:05:9e:80:7d:a9:10:76:3c:e3:e7:
e6:bb:7c:a8:d4:b8:ea:d9:91:a0:0b:b6:c9:8a:94:a7:64:05:
8f:6b:d1:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:23:16 2026 by rpki-client