
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17e12be9-ab3f-3247-86fb-200277d1c04e.roa
File: 17e12be9-ab3f-3247-86fb-200277d1c04e.roa (raw, json)
Hash identifier: hugppbzQt/tr8t0vuGbLSvs6s7f1n8H0MDmU3fG5yFk=
Subject key identifier: FF:EA:D0:3C:7F:E0:DB:CC:43:5F:22:8F:E1:F0:D5:C5:C9:98:B6:F3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D143D3E70262DA52BFFBAA180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17e12be9-ab3f-3247-86fb-200277d1c04e.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 33491
IP address blocks: 67.173.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:3e:70:26:2d:a5:2b:ff:ba:a1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=f46b038f-bc33-429d-8051-395cb92e8e97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:72:f9:9d:9f:fd:e8:2e:40:11:12:52:b8:dc:
8f:65:dd:3d:70:9e:2f:65:4b:8e:80:be:83:f5:66:
04:5f:de:46:34:9a:d5:2b:c5:22:32:9f:f7:60:0c:
1b:29:da:02:77:2e:61:ab:99:4d:66:ad:fc:6f:60:
fd:26:55:a0:0d:d9:7b:b3:90:56:e7:0e:57:eb:e9:
69:99:30:f3:af:5f:31:ab:ba:71:d3:a4:14:4c:79:
df:88:08:fe:8f:ed:30:e9:9a:8d:2c:14:c7:23:05:
10:25:bf:34:1d:b3:25:63:68:0c:3d:cd:de:c0:7e:
92:c6:3a:b8:2c:00:b7:47:c7:83:dc:db:68:37:bd:
6b:81:a2:0a:6f:76:ec:22:20:99:8f:ad:90:1c:4f:
aa:23:3f:ce:13:bc:82:b0:c2:e9:23:39:39:ee:e7:
77:3d:aa:1f:c8:e0:0c:90:18:2c:d1:c6:61:98:3e:
ca:84:2b:26:45:8e:b0:1e:73:e1:54:4d:bc:ef:46:
b5:4e:2b:eb:8b:4f:e9:bc:07:e2:88:1b:54:71:d8:
dd:6e:16:40:88:66:f4:ab:31:c2:1e:22:33:0e:a1:
85:bf:64:52:91:fe:84:5a:2b:2d:28:8a:c4:09:00:
aa:c3:64:24:9f:aa:51:d2:a9:7a:28:b9:87:6e:cb:
50:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:EA:D0:3C:7F:E0:DB:CC:43:5F:22:8F:E1:F0:D5:C5:C9:98:B6:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17e12be9-ab3f-3247-86fb-200277d1c04e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:f8:cb:45:61:76:69:8c:f2:5b:a7:14:7d:e9:4b:f5:db:4d:
33:b4:19:ea:86:11:3d:d9:a3:75:33:58:b7:9e:07:29:04:8c:
31:52:8d:44:f0:8e:13:0e:1c:17:8f:4b:74:5f:44:14:0d:17:
02:9a:d1:fa:19:1e:8d:01:7f:73:f3:7f:9d:a7:f6:78:91:1a:
d8:51:b8:b0:28:27:16:b1:b3:c0:c0:fa:06:5f:e8:20:b2:68:
cf:bd:fe:eb:03:d1:6b:4a:41:71:f7:bc:d8:f1:22:56:64:70:
c9:48:fc:5f:85:e6:31:35:64:8c:97:e8:72:f3:38:fd:75:af:
e2:0e:19:95:a9:bb:43:fe:57:6c:c3:41:bb:46:a6:67:b2:4f:
9f:f4:a2:03:dc:af:7d:0a:ad:20:41:8e:69:bb:79:81:6c:c5:
d3:bd:74:18:07:61:d7:ea:c4:ba:63:19:27:0d:2a:b9:c3:6e:
f6:e2:ca:c0:d5:6d:69:d6:3c:b0:53:d3:68:aa:b0:be:49:93:
e2:ff:0c:bd:90:94:66:b8:af:7b:ce:7c:c7:b4:91:6f:97:b0:
0b:3b:ac:02:35:55:7d:35:df:b3:4e:5e:8d:fc:ae:13:62:b0:
c6:23:0a:e0:56:3a:3c:dd:7a:8c:ab:39:19:cd:ef:23:1e:c3:
6a:58:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 7 10:34:06 2026 by rpki-client