
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/bffe4b47-a010-3d20-8f69-87067738401f.roa
File: bffe4b47-a010-3d20-8f69-87067738401f.roa (raw, json)
Hash identifier: obR8oQwRGiTRLaouRUbqgXaryvk0NXGYiiw0OOohH2o=
Subject key identifier: 5E:47:0F:21:EF:EE:DE:CA:7E:58:48:D8:F8:49:B3:9B:CB:D3:1A:AE
Certificate issuer: /CN=24558553-b258-484a-bd6f-5e8b36c98065
Certificate serial: 010D0C9F4328584D300AB2E1D41F3F3C2F30BFC0
Authority key identifier: 9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/bffe4b47-a010-3d20-8f69-87067738401f.roa
Signing time: Mon 16 Mar 2026 13:00:40 +0000
ROA not before: Mon 16 Mar 2026 13:00:40 +0000
ROA not after: Sun 14 Jun 2026 13:00:40 +0000
asID: 16992
IP address blocks: 66.37.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 20 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:30:0a:b2:e1:d4:1f:3f:3c:2f:30:bf:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24558553-b258-484a-bd6f-5e8b36c98065
Validity
Not Before: Mar 16 13:00:40 2026 GMT
Not After : Jun 14 13:00:40 2026 GMT
Subject: CN=3d538829-d6f3-407a-bf2a-4b646c267cbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:bd:a1:fc:27:4d:66:c7:be:9d:fd:28:00:aa:
7d:22:b5:74:1d:a1:8b:c6:9a:ca:ea:3c:55:7e:30:
01:36:9e:7c:6f:a0:8b:f2:c6:ad:cc:66:28:f2:29:
d4:8b:e0:79:0d:ba:a5:e3:d4:a1:c8:b7:4f:06:47:
94:5f:36:ee:ff:05:9f:3e:6d:de:6d:84:bd:f5:2c:
94:9f:67:db:96:51:7f:08:65:72:22:97:26:a8:bd:
10:c8:43:47:59:dc:53:da:27:bd:50:82:d5:5f:e7:
11:a9:0e:1d:2c:3f:af:8e:f8:cc:62:24:82:74:f4:
38:e6:70:91:ff:06:2f:1c:07:e5:eb:5f:b0:54:f8:
38:a1:28:09:a2:f1:49:77:82:a9:7e:72:75:97:7c:
5e:a7:9f:12:72:b7:db:e2:c0:a9:2b:25:a6:7e:96:
da:85:dd:b5:9a:e7:c7:bf:87:ad:a6:31:ad:71:09:
cc:b0:bf:07:31:bd:e8:0e:00:c3:c1:2b:fc:7c:cc:
45:bf:58:34:4c:5a:7a:32:e3:c6:b2:d6:c3:68:12:
b3:a7:96:03:cc:32:cb:11:f1:c8:78:42:82:8d:34:
94:c3:f7:04:90:da:15:96:fc:fd:37:4c:de:07:de:
c9:47:5f:c5:8f:d5:91:aa:6a:fb:33:4d:33:20:92:
b4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:47:0F:21:EF:EE:DE:CA:7E:58:48:D8:F8:49:B3:9B:CB:D3:1A:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/bffe4b47-a010-3d20-8f69-87067738401f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065/24558553-b258-484a-bd6f-5e8b36c98065.crl
X509v3 Authority Key Identifier:
keyid:9E:01:D5:E4:F7:85:25:4D:C3:43:2A:E2:94:E9:43:3B:49:7A:F5:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/24558553-b258-484a-bd6f-5e8b36c98065.cer
sbgp-ipAddrBlock: critical
IPv4:
66.37.140.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
05:62:7b:68:e6:a0:41:5c:66:be:93:21:9d:86:85:bb:ab:69:
38:69:ba:40:5f:7b:e2:32:96:ec:f7:81:e1:45:e0:9d:65:93:
87:a0:96:2f:97:9a:f0:f5:7e:8c:e8:de:36:7b:3e:09:8c:d6:
47:a7:da:cb:fe:00:cc:99:3d:09:f1:6b:2a:92:4c:95:c9:55:
93:9a:ca:86:7e:39:ba:06:6f:fe:5d:25:01:6d:2f:d7:6c:11:
85:15:a9:50:e2:6e:a3:dc:a8:6e:f0:d7:9a:23:4b:4b:35:75:
34:65:00:12:eb:ea:90:be:7d:cf:2c:e0:c7:cb:15:7f:e1:3d:
a6:b8:26:23:82:a9:79:0b:3d:64:85:89:84:82:6e:5a:d9:ec:
1a:c3:2c:75:86:4a:4a:7a:17:cf:62:c4:f3:75:30:76:7d:c7:
59:05:d4:0a:14:ce:bc:75:05:f2:a0:ae:90:0f:25:0e:02:9f:
fd:41:1a:e6:df:88:66:0c:fa:89:22:b2:7e:c7:ba:0e:fc:61:
14:53:ce:f6:70:29:9a:be:8d:f6:a9:5d:87:82:7d:e5:a1:49:
cf:82:63:3d:15:d1:39:b2:5c:e6:00:f1:cf:5b:74:7a:25:22:
4d:96:98:51:a5:9c:02:71:0c:0f:c4:b7:9c:8d:69:fd:59:55:
5c:81:29:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 19 15:36:51 2026 by rpki-client