
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2397e96c-7720-3d7e-92cb-e6209acb4baa.roa
File: 2397e96c-7720-3d7e-92cb-e6209acb4baa.roa (raw, json)
Hash identifier: gGMdqxGaf5MnASirwFuS4c6nV/o6nY0hxA7WHq/aBA8=
Subject key identifier: 47:77:DD:F7:A1:E7:B6:63:A1:1F:CB:CB:4A:5A:E5:EA:0B:1E:56:B4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E35FF2F8D55D1FD074CF72400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2397e96c-7720-3d7e-92cb-e6209acb4baa.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33490
IP address blocks: 71.193.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:35:ff:2f:8d:55:d1:fd:07:4c:f7:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=e9e13ca8-fe9f-4f26-89d9-4385fb4fbbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:f6:7e:bf:af:74:d8:55:3b:4a:52:fb:ce:
bd:0f:33:c3:3b:2a:5e:c9:8a:60:24:91:a7:67:23:
b4:f4:bc:a3:d2:d2:26:29:24:43:68:c4:a7:52:78:
e1:55:de:7e:e6:a7:83:c8:64:dd:39:8c:69:8d:af:
ae:b0:01:85:76:8e:c9:25:71:e5:15:00:b3:e1:a9:
70:33:a0:6a:ae:fa:3a:91:37:ec:56:e1:0f:51:9e:
3c:6c:ff:25:99:87:f4:e9:32:99:39:a9:f8:a0:30:
0f:6c:1e:27:f8:79:c9:f9:24:53:12:37:0c:69:5b:
1a:0a:1f:5e:d1:93:78:95:5e:57:65:c9:fd:12:82:
e5:87:2d:c8:bb:e4:ad:62:9a:be:92:10:f9:14:d2:
0c:a2:32:c1:6d:e2:9f:2f:9c:0f:96:3a:a6:9c:57:
bd:f3:2f:af:8a:26:05:6c:11:04:52:76:a1:48:0d:
19:77:9e:91:77:7c:ef:2a:e8:e6:4c:80:1e:76:72:
ec:2d:9e:eb:07:9b:68:bc:6f:63:0a:e8:81:92:3b:
62:f8:90:7e:fa:c5:e2:fa:f5:cc:f2:f9:c6:a2:9c:
e5:2c:6f:07:cf:89:dd:86:c2:28:b1:f2:c4:ff:e9:
e9:2a:ea:24:16:d2:ef:13:66:ec:1d:8f:c5:52:9e:
0e:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:77:DD:F7:A1:E7:B6:63:A1:1F:CB:CB:4A:5A:E5:EA:0B:1E:56:B4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2397e96c-7720-3d7e-92cb-e6209acb4baa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.193.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7f:37:1b:34:39:df:e5:18:56:0f:23:73:8e:ec:91:3c:84:
bb:55:b1:96:3d:83:d9:50:4e:ef:fa:bb:c9:e0:06:94:82:ed:
88:e9:86:92:70:a6:93:96:60:51:fc:71:f9:8f:77:19:cc:0d:
6c:3d:ee:a4:86:77:7a:fe:13:1f:2b:c1:d9:56:8d:c1:7f:a5:
f1:cc:71:5b:38:d1:c7:de:0c:22:db:c1:ed:12:40:45:b5:e6:
16:a0:59:07:8f:19:e5:18:36:a6:fc:10:ce:1a:33:f8:2f:2f:
4f:8a:f4:de:1c:31:c6:0c:4f:99:48:5d:ae:fb:6a:38:c5:b5:
f3:19:f8:24:5c:a9:86:17:82:95:c7:94:b1:d2:40:ed:41:4f:
43:76:de:3d:5b:c5:d8:d7:d0:fd:48:7d:d8:3a:e5:25:f2:4d:
f8:c8:bc:4d:8c:bd:d9:b0:83:90:cb:f8:4e:2b:9c:7b:bc:f4:
c5:91:64:1c:71:e5:a1:25:e3:1d:e6:8b:4e:33:a0:79:3c:30:
52:dd:ca:0b:56:ad:ba:d9:40:0e:0a:33:f9:08:99:72:7e:3c:
9b:0a:d5:93:50:65:28:28:c2:3d:54:58:d2:56:5c:d4:8f:d5:
6b:13:09:30:8c:8e:78:18:c4:fe:36:e8:16:1c:ac:c5:f5:85:
be:19:5b:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:21:22 2026 by rpki-client