
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa
File: b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa (raw, json)
Hash identifier: nlEVQYbS2clUVa5U5bdn5waQgwmeyOsl1agi8Bt8DA8=
Subject key identifier: DB:D0:01:FA:1C:14:E9:61:72:8C:95:19:D6:EE:C5:7E:DB:CB:AD:A6
Certificate issuer: /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial: 010D0C9F4328584F4972D589ECA0CC4563BBD780
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 137409
IP address blocks: 172.94.66.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 25 Oct 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:72:d5:89:ec:a0:cc:45:63:bb:d7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9cf0d3e2-7477-44c1-935f-da7c88988b1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:99:08:2e:ce:03:b9:62:c5:bd:95:f2:89:54:
98:32:6c:c5:ef:6f:24:ec:74:56:32:d0:97:9e:ed:
1d:c7:68:25:7b:7f:25:7d:ce:d2:c3:1d:0a:f8:2a:
49:07:fa:fa:22:2c:01:f9:4c:3e:3a:e0:58:d6:34:
a7:f1:a6:e9:0a:86:77:91:62:05:8f:79:57:d9:26:
3a:e1:a6:25:ef:99:84:0b:ed:3d:94:ea:e8:1a:68:
e1:3a:04:c9:69:1d:aa:5a:a5:9a:3e:fd:5f:b9:91:
f1:09:fd:3f:73:8b:47:70:06:2d:54:f4:ac:7c:bc:
9d:6a:97:08:df:1d:15:18:16:76:93:09:a0:17:71:
2e:6c:9a:d1:c2:fd:62:a7:1e:13:ff:7d:09:17:4a:
49:cd:ae:9b:86:18:a4:ca:c0:d0:57:47:4c:a8:d1:
4c:f2:c5:ba:bd:ab:94:2f:9c:c8:28:de:7d:e0:32:
82:6e:b4:ce:eb:79:60:d1:a9:05:89:93:e9:50:09:
ef:99:00:bc:fe:2f:9c:09:df:07:c5:11:ad:cb:01:
94:ba:7a:96:67:27:37:24:71:a2:b0:5d:c1:4e:86:
98:72:57:77:2d:b0:4d:2e:81:82:39:75:bc:55:be:
26:ec:bf:5e:c0:9d:91:7a:74:1e:39:51:b8:2d:bd:
f6:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:D0:01:FA:1C:14:E9:61:72:8C:95:19:D6:EE:C5:7E:DB:CB:AD:A6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/b676eed9-e9b3-3699-a03d-bec5196ac2e5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
X509v3 Authority Key Identifier:
keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
sbgp-ipAddrBlock: critical
IPv4:
172.94.66.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:8b:ff:2f:b6:73:c6:be:c8:19:a3:1f:49:0c:86:11:a6:b8:
64:3e:48:cd:5a:ba:49:a1:73:cd:f0:c7:ed:72:d9:43:86:97:
9c:25:c1:22:78:4d:39:ad:e8:42:74:d4:e3:b2:90:72:d0:9c:
ec:68:c0:64:e6:b7:a3:fc:b2:bb:01:91:c5:c8:c2:bb:d1:d1:
f7:86:2a:43:0d:5e:fd:db:0c:47:70:a5:2c:48:ff:61:2c:f7:
80:c3:af:b0:7c:6c:b5:dd:6d:d0:c5:62:35:b2:c0:ae:05:e5:
da:e0:c9:43:c2:60:3b:49:8f:10:0d:c6:87:1d:48:40:0d:bf:
49:26:af:01:d4:17:b6:70:98:77:55:24:f1:dc:18:cb:83:81:
37:58:d3:be:d4:4d:e5:0a:bb:f3:12:b2:5f:0b:36:3e:16:48:
97:98:41:6a:9f:87:31:32:a7:74:79:fd:1f:2c:21:42:25:92:
1c:de:8e:fb:4c:2b:72:57:d4:48:b8:94:2f:ba:24:97:6c:c0:
84:49:ac:d6:e8:f7:e8:68:72:09:53:0d:0a:cf:b9:d9:83:45:
b1:4b:f5:11:c4:6f:9d:b0:4a:ef:fc:0c:84:62:a7:a0:64:79:
f8:ea:d4:af:48:16:ea:56:cc:9c:55:b0:2f:c7:24:ba:a3:d6:
2f:43:e1:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 11:09:28 2026 by rpki-client