
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99a4ab0b-8bb3-36dd-a189-42db857702fb.roa
File: 99a4ab0b-8bb3-36dd-a189-42db857702fb.roa (raw, json)
Hash identifier: cf8ycO6kPUN/E7ny3Ckfrd3Jv2PPuffZgPjPKDhcr+E=
Subject key identifier: 05:9A:7D:AB:A7:D7:DF:F3:A3:E5:31:70:BE:4C:ED:7B:DB:88:3E:9A
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584DABB9A773C5469D8E2B4ED880
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99a4ab0b-8bb3-36dd-a189-42db857702fb.roa
Signing time: Wed 29 Apr 2026 20:18:52 +0000
ROA not before: Wed 29 Apr 2026 20:18:52 +0000
ROA not after: Tue 28 Jul 2026 20:18:52 +0000
asID: 23473
IP address blocks: 66.253.133.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 09 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ab:b9:a7:73:c5:46:9d:8e:2b:4e:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 29 20:18:52 2026 GMT
Not After : Jul 28 20:18:52 2026 GMT
Subject: CN=2d9ebeee-dfcc-42a0-ba79-9651292a117a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:cb:78:e0:c3:17:24:19:38:94:1c:d0:10:81:
e8:a3:b7:a8:d9:03:1d:96:9e:42:fc:a7:f3:2f:39:
ec:3d:dc:76:bc:ad:e4:97:7d:05:de:cd:70:4a:e9:
a0:ea:aa:04:e4:6f:25:90:7a:59:3f:f4:6a:11:98:
ed:15:e7:f2:47:ed:90:07:ac:d3:44:e9:d2:b1:ad:
a1:f0:29:99:94:08:b2:68:96:ac:68:13:a7:83:5d:
7d:65:2a:20:ea:4c:78:c2:39:2c:ef:03:bf:7b:12:
37:6b:ad:50:be:f2:60:c8:58:3a:30:5f:81:fb:bd:
d9:41:b3:36:60:6d:d2:3a:04:40:58:ff:f6:e9:dd:
09:bd:10:e1:02:05:d6:a9:3d:fb:96:a8:f9:dc:9f:
0e:d0:3a:95:df:ae:9d:6f:81:6e:f5:96:94:83:e3:
ea:46:7e:5e:c1:96:f7:55:8a:26:a9:59:76:3c:8e:
9f:a0:f6:81:f9:23:18:36:17:7a:9b:44:e9:60:cc:
6d:27:f4:bd:84:7f:19:98:09:21:7d:a6:88:2d:4a:
06:a8:76:94:d9:31:83:1c:c3:0a:7e:b2:2f:4f:35:
b6:8b:b6:df:cd:e3:40:fd:9c:0f:b7:94:70:57:a8:
ac:4a:9a:aa:f1:59:80:ab:bb:c8:c2:4f:2f:f4:af:
d8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:9A:7D:AB:A7:D7:DF:F3:A3:E5:31:70:BE:4C:ED:7B:DB:88:3E:9A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/99a4ab0b-8bb3-36dd-a189-42db857702fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
66.253.133.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:e9:98:a3:28:26:da:83:b5:44:0f:1b:8b:a0:05:de:77:1d:
3a:c3:7a:61:4a:e3:07:1e:7a:86:3c:5d:9c:86:1e:04:dc:b4:
47:47:c7:d8:6c:5c:92:f8:63:7a:4a:28:a1:03:7b:72:4e:d2:
ed:fd:09:2c:7e:8e:99:da:ea:5d:70:c8:a7:ba:ae:fa:a8:56:
c4:2b:33:0b:49:23:6d:02:66:08:52:03:4b:04:f4:54:55:11:
6a:ae:df:ad:f0:51:c8:7d:4e:a8:4e:72:e7:0b:23:26:e1:24:
38:f9:56:24:d8:91:e1:1f:3c:0e:6a:48:c4:b3:c1:55:e3:9b:
62:85:50:7c:36:6a:b4:ee:69:3b:38:07:d0:97:41:06:be:71:
1d:24:de:9e:f9:f1:c1:44:20:ff:3c:93:61:82:96:bf:e6:a5:
87:b4:e8:3f:7b:fb:05:2b:6c:84:a4:45:1d:6d:1b:b6:b9:9a:
27:bb:77:7d:cb:3c:5f:40:bb:31:fe:90:5c:09:94:c3:82:86:
c6:87:6a:ca:83:78:ca:f0:53:16:7b:b8:c6:ab:37:cb:78:6f:
bc:71:b4:56:6e:17:d6:f0:38:24:d1:b8:9f:40:8a:c9:8f:e1:
0e:4e:7b:fa:00:6b:eb:5f:b2:68:d2:d7:22:17:b1:10:bd:31:
a2:bf:4a:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 03:12:20 2026 by rpki-client