
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a432d0-2e99-3101-9bff-25ed2d4c0ffe.roa
File: 10a432d0-2e99-3101-9bff-25ed2d4c0ffe.roa (raw, json)
Hash identifier: jBb1JimDmWvjcD1bEQKOqGTXDMxl/sbZROUNwpyRfk4=
Subject key identifier: 78:DA:AA:BF:D0:68:86:D9:B0:13:C7:55:95:53:25:5A:40:DA:33:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78D6346DCAFCF2712CB4320
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a432d0-2e99-3101-9bff-25ed2d4c0ffe.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33668
IP address blocks: 70.91.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8d:63:46:dc:af:cf:27:12:cb:43:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3b35c140-f497-4e47-bdfe-e788acf7350c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:cc:e4:65:2c:66:bc:2d:7c:37:e6:c0:17:03:
72:88:f1:b9:2d:04:35:5f:17:b9:c1:9a:3a:4c:78:
a7:9b:7c:37:4f:88:67:d2:df:cb:4c:75:0f:d7:c3:
48:06:a2:52:e8:cd:e4:5c:70:a1:eb:d7:d0:c4:c9:
24:1c:da:f6:24:0a:b2:5c:b0:74:86:a3:87:a5:13:
2f:0c:38:37:0a:c4:03:39:b4:cd:73:17:db:2b:fa:
ac:9e:82:0d:b6:a0:1c:41:72:6c:fd:71:84:ef:90:
4e:1f:fd:3e:ae:ba:4a:a0:7a:03:2f:0b:a9:ea:a2:
54:09:d6:75:5a:2f:ba:b7:4e:62:74:6b:b2:27:f4:
2b:2c:5b:d4:65:39:d8:6a:61:41:c5:e7:26:8a:b1:
4a:14:29:34:c1:c1:e0:b9:bf:2f:ab:aa:d7:6f:b7:
67:ed:46:50:90:48:47:ea:3d:eb:04:85:80:fa:71:
c3:78:b9:22:49:71:44:9e:90:dd:89:e4:84:57:eb:
50:eb:fc:8a:b9:87:12:4d:97:ca:c8:0a:7c:7c:ea:
2e:27:b4:2f:ee:9c:bb:07:b4:08:3a:79:69:53:8b:
81:f8:40:c8:24:84:be:aa:ac:03:84:ff:30:5f:e6:
31:cd:cc:f1:23:30:ca:3d:53:f8:a7:ea:82:8d:e8:
d2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:DA:AA:BF:D0:68:86:D9:B0:13:C7:55:95:53:25:5A:40:DA:33:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/10a432d0-2e99-3101-9bff-25ed2d4c0ffe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.91.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:fe:f6:1a:8c:27:6e:86:77:a1:98:c0:fc:a7:0b:4e:52:6d:
db:65:28:ec:09:e6:bb:a0:6b:b5:92:93:96:de:0b:f9:08:9d:
bb:7a:6b:84:c2:8d:d4:ef:22:3c:9d:74:03:b3:bb:22:02:21:
67:68:e9:0c:25:56:e3:ec:9c:84:58:ad:6b:61:24:c5:e7:67:
d9:4a:08:ad:76:92:5d:c5:6f:63:cf:82:e5:00:5b:7d:bb:e4:
05:a9:0f:15:64:55:df:6a:75:36:4c:bc:84:03:d7:05:50:32:
7f:5a:70:cd:d8:2e:96:68:57:4f:c9:6f:da:6f:95:01:d5:19:
29:b9:c3:46:ae:af:49:6a:07:dd:b7:80:5d:f9:34:b6:e1:b5:
de:02:99:e6:8b:74:9e:45:d2:44:45:55:aa:e6:b2:e9:9c:1a:
81:47:11:e4:4c:56:a6:42:d1:fd:ba:de:3c:c2:11:6e:27:81:
1e:01:6c:aa:fa:35:63:7c:42:cf:b8:ae:60:27:60:d7:d1:50:
88:6d:2b:1d:45:1a:0a:07:2b:42:d7:73:f7:0e:e5:28:ad:db:
a4:c3:99:2c:27:b9:7b:48:8d:b5:27:a1:32:9a:d5:11:b3:3e:
db:95:12:66:d6:ae:ee:8b:d7:5d:00:1c:8b:05:31:ce:fd:93:
a2:49:2b:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:37:05 2026 by rpki-client