
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/953ca8a6-0a97-374e-97cb-c02be7a5e257.roa
File: 953ca8a6-0a97-374e-97cb-c02be7a5e257.roa (raw, json)
Hash identifier: E8qbyPQCHcn9sjQFTE5SiekbASGTAiE/ohB4SrgN2JU=
Subject key identifier: B1:07:CB:15:3B:4A:6D:02:AA:C9:FD:07:3B:DA:C5:66:A0:0A:74:F1
Certificate issuer: /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial: 010D0C9F4328584F5A32F93F1F184FD3A29A2580
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/953ca8a6-0a97-374e-97cb-c02be7a5e257.roa
Signing time: Thu 01 Oct 2026 01:00:12 +0000
ROA not before: Thu 01 Oct 2026 01:00:12 +0000
ROA not after: Wed 30 Dec 2026 02:00:12 +0000
asID: 20001
IP address blocks: 66.84.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5a:32:f9:3f:1f:18:4f:d3:a2:9a:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Validity
Not Before: Oct 1 01:00:12 2026 GMT
Not After : Dec 30 02:00:12 2026 GMT
Subject: CN=e9ddd34c-644e-4868-b620-c695235926e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:33:9c:99:14:f1:df:1d:61:7b:5b:c6:59:8c:
f3:01:0c:cc:a7:3f:a8:82:6e:db:70:7a:85:33:b9:
bd:1d:43:17:79:0c:2c:00:00:14:b0:f8:26:fd:b6:
96:12:a7:8a:a0:1d:85:a4:24:4b:52:cb:6b:41:09:
c6:5d:ab:c2:75:8e:88:7e:89:96:93:13:f6:75:31:
1d:29:07:13:95:35:fc:aa:03:c9:52:27:84:df:2c:
83:7d:20:99:31:09:7d:54:89:11:98:00:86:80:73:
73:c8:f1:03:e4:de:0f:f8:aa:c3:c1:ea:a0:62:3f:
6a:39:08:f2:86:28:2d:22:b2:11:4e:c5:80:a8:4f:
3a:14:ff:4d:05:e7:e0:e6:19:3b:f1:74:18:57:c4:
43:bb:ed:80:ca:c9:65:9c:fe:d8:34:c4:dd:50:43:
84:58:60:e6:fd:76:58:03:58:79:e8:27:48:0d:83:
d5:fc:1a:12:0c:35:ac:42:70:ba:6b:75:7c:2f:3e:
4d:2e:f1:26:6e:ee:24:e0:4c:33:27:f1:d7:0a:a0:
21:f5:fa:35:8b:ca:14:49:d8:5f:41:3f:4f:1b:3b:
eb:c3:d0:92:31:39:61:21:10:3d:2f:dd:a7:50:a5:
da:39:52:1a:5c:bd:92:f9:79:d9:d1:23:c2:7b:a3:
c9:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:07:CB:15:3B:4A:6D:02:AA:C9:FD:07:3B:DA:C5:66:A0:0A:74:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/953ca8a6-0a97-374e-97cb-c02be7a5e257.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
X509v3 Authority Key Identifier:
keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
sbgp-ipAddrBlock: critical
IPv4:
66.84.93.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:e8:82:d5:55:3c:cd:7e:38:72:57:c7:00:51:bb:89:bd:77:
4d:ef:8f:62:f5:9e:66:4f:53:d3:01:16:a1:00:4e:84:08:d5:
ff:c1:6f:08:c8:95:e9:2d:c9:ca:9d:ee:c1:d4:2f:ed:63:22:
1c:3e:77:45:e0:98:b9:fb:c2:24:3a:f6:4d:c7:fa:43:4f:53:
3d:2f:0d:cc:98:48:fb:7f:f4:8d:f8:7c:c3:e5:c4:7c:f3:bf:
15:69:68:9c:2d:90:4a:1f:5e:60:3b:85:51:89:63:90:aa:54:
21:a8:44:05:ca:95:e6:7a:5a:2d:d4:a4:24:1c:87:6e:04:d2:
2d:f8:02:15:cc:74:b4:84:2c:37:3a:61:0a:16:b4:94:19:45:
0c:74:5c:3e:0f:a1:de:da:48:de:00:1e:7f:62:e7:44:1b:63:
e1:ab:c7:b8:7c:aa:e0:81:29:22:a9:b9:8c:43:d3:bc:29:0a:
5a:a2:f5:3a:6b:ef:b9:f4:69:4c:69:32:52:1b:52:b3:70:9c:
a8:2f:ab:ec:46:52:72:7f:c3:d8:2a:16:6e:0a:94:42:25:67:
03:59:b3:f6:77:5c:b1:19:54:e3:65:56:cc:4f:4c:27:56:0e:
93:99:cb:23:67:e0:a0:2d:c8:85:6a:10:23:d4:62:40:92:0e:
d2:93:8e:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 23:52:18 2026 by rpki-client