
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa
File: 8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa (raw, json)
Hash identifier: D83GlQynO32ylQ9LoNEFgjq50xmllNo6RYHnGxw4rw8=
Subject key identifier: AB:0A:05:6E:E7:C8:C9:5C:27:55:E1:D6:5C:BC:95:B7:66:4C:AC:83
Certificate issuer: /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial: 010D0C9F4328584D8EF567FC3CBAC7533E82BA00
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 36352
IP address blocks: 66.248.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 05 May 2026 09:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:67:fc:3c:ba:c7:53:3e:82:ba:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=1f09574c-d8ac-437f-99b6-ffa1f0cc836d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:fe:ea:17:bf:e9:7a:a0:4e:d4:0a:61:29:d1:
6c:db:99:8a:e1:68:10:2a:c7:dc:ba:af:d3:db:d2:
b4:26:b5:26:f2:45:28:7e:11:fc:c1:45:35:3a:8c:
a9:00:d1:93:ed:36:90:48:6a:90:93:1c:20:8e:ce:
46:1b:f5:6a:c4:58:f7:2a:b3:10:81:7c:0c:41:ad:
c1:83:0d:33:51:b2:ab:78:8c:88:64:19:23:ff:de:
34:38:26:df:29:df:a6:5a:66:4c:0e:4a:5c:4d:b1:
00:80:a6:f9:75:2c:3f:90:a1:dd:2c:1a:73:8e:8c:
f8:83:83:e1:4a:0e:c4:97:b3:bf:11:7c:64:4e:ee:
98:b8:1f:6b:20:db:7f:f5:47:e3:a6:e9:29:29:07:
16:13:c7:9c:0e:8e:ee:16:36:64:21:73:2b:c7:ac:
7d:94:90:d8:6b:30:7a:41:f8:a3:5d:64:72:c5:bf:
f6:19:d7:94:25:8e:83:a6:b0:2b:d4:0a:51:28:b8:
08:7d:59:59:70:0d:19:a3:12:85:38:cd:50:4a:2a:
d1:50:30:01:48:72:4b:35:d4:07:46:9d:16:1a:a3:
86:18:fd:79:8f:5d:fc:20:bd:27:93:b4:1e:10:8e:
12:69:50:ac:bf:c5:c1:5b:95:17:af:e8:8d:c8:ef:
22:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0A:05:6E:E7:C8:C9:5C:27:55:E1:D6:5C:BC:95:B7:66:4C:AC:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/8bb54f8c-4c01-3ce6-9edd-bafd7a03b530.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
X509v3 Authority Key Identifier:
keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
sbgp-ipAddrBlock: critical
IPv4:
66.248.242.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:32:8d:a9:34:59:62:5c:6b:c2:94:ca:df:27:cd:6c:dc:7d:
49:66:ff:91:70:2e:3f:43:ad:4b:09:e5:78:ff:1b:09:98:c5:
ae:57:44:90:b7:da:b0:08:c3:7e:6c:7e:9c:7d:84:cf:5a:dd:
03:56:c1:be:f9:db:d6:a0:6d:00:44:86:44:55:9e:09:1a:c8:
2e:4b:92:e3:93:b3:8e:03:b5:ca:eb:f5:4c:6c:00:17:5c:e0:
9b:e7:c5:c1:2e:b5:65:58:72:05:7a:6e:fc:81:a1:86:79:e1:
07:f3:7b:3f:46:fb:aa:e1:d1:ce:4e:a2:fc:5a:1a:e2:ca:1b:
2c:1a:83:80:e9:d9:c9:04:e0:72:b3:65:40:d6:85:e1:5f:2c:
81:46:3f:89:c1:ed:60:53:ae:2a:9d:c9:d6:4f:36:77:c8:af:
89:26:8c:de:82:d2:24:e0:86:3c:a2:92:69:e9:89:7e:ea:9c:
7d:2f:22:e0:7a:91:29:3c:e3:cb:e6:67:a8:df:c9:16:75:af:
82:2f:db:43:d4:07:96:05:ec:11:8a:a4:46:75:7e:3c:98:67:
14:e6:dc:a0:c7:c3:4f:5c:40:53:92:a6:d5:1e:c3:2a:0d:dc:
ae:1c:b1:5b:60:af:4a:b3:63:cc:0e:12:92:0d:20:e4:37:56:
24:40:41:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 2 19:45:33 2026 by rpki-client