
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa
File: 2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa (raw, json)
Hash identifier: ehPWO5aTWPF/B1tJzh2wHM2vpq7Ly2317JBXVlETiMk=
Subject key identifier: 00:8B:2B:67:D5:CF:C1:93:91:1E:EB:1C:F2:72:80:0B:70:B9:FF:EF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3A953286B5A206226AE440
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33659
IP address blocks: 174.166.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3a:95:32:86:b5:a2:06:22:6a:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=45b6eb8b-4c34-4c18-ab2f-c5eb38e6bf62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:4c:69:72:b9:51:63:ea:e1:c4:fc:0f:d1:59:
6d:f7:8a:ea:fe:53:84:ac:e4:6d:74:fe:ce:2d:71:
36:8d:7d:50:6a:79:0e:68:c6:6d:3f:c9:0e:12:e2:
a1:6e:32:2d:5e:36:8f:56:52:0f:e8:39:3c:fb:3e:
60:34:8e:fa:c8:a7:e4:71:bc:e2:dd:0f:e0:83:df:
82:0f:d3:a0:29:c4:42:3d:ca:c1:4a:63:b6:39:a4:
18:b2:91:a4:0c:d6:31:c2:1c:88:f2:4a:f5:1b:db:
af:83:79:a7:77:32:dd:0a:3e:c2:5f:e5:58:8d:ae:
ed:b2:00:e9:94:23:6a:de:a2:7d:cc:fc:bd:46:aa:
7d:ba:91:df:d3:7f:35:b2:98:b7:15:d8:69:51:3f:
1f:2b:24:dd:2f:ce:15:c2:28:93:69:17:a4:de:6d:
73:73:0e:b8:b8:b1:a3:b2:9a:47:ee:4c:f2:27:d9:
5f:73:d6:d4:6b:d1:79:5e:e4:5a:7c:94:63:77:d2:
84:55:bf:59:19:d8:92:b0:ca:a7:ed:63:59:ef:c1:
52:eb:06:a6:b4:dc:01:a1:c8:31:f4:e3:38:f0:3e:
aa:fb:ee:f2:74:dd:9d:5d:6b:fe:4d:bf:4b:fb:6e:
88:db:3d:62:00:0d:4b:a1:9d:3c:22:8a:cd:a3:3b:
31:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:8B:2B:67:D5:CF:C1:93:91:1E:EB:1C:F2:72:80:0B:70:B9:FF:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2ae1c817-cac1-3e26-86ec-733ce93fa8c8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.166.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:7a:d5:3c:7c:aa:e9:24:2e:c8:ee:cb:2d:fb:42:cf:1d:fb:
71:45:f0:64:6a:5c:ea:d8:27:42:73:0e:4a:24:24:85:a5:48:
b1:8f:30:b9:95:8c:6f:52:3f:ec:e6:bb:27:48:d5:77:85:02:
b5:f6:c4:57:f0:df:3b:de:a1:88:b1:00:1f:e1:fc:c5:b4:44:
af:34:34:10:be:96:d2:4b:ec:85:aa:79:be:87:d1:56:50:ca:
1d:ba:39:27:5c:02:d6:5b:4c:24:95:bf:b8:03:8e:9a:4d:71:
80:c3:7c:e6:d9:a6:b7:62:4d:26:c6:7c:45:77:38:ec:2c:08:
ca:60:e8:e3:c1:78:f6:ff:b6:a3:56:0c:40:a8:e3:8f:41:9d:
c4:84:2f:9e:15:99:4c:09:aa:d7:d8:ba:38:65:8f:2d:ff:f9:
cf:b2:8d:85:01:11:71:11:5b:56:51:1c:a8:b6:ca:97:01:bc:
2d:79:5c:37:53:bb:f9:08:08:7d:25:dd:f2:dc:b7:c4:9f:9c:
3f:1e:6f:23:e7:9a:96:23:55:11:58:e3:bf:17:b9:c9:8f:f6:
e7:66:84:6f:cd:0a:c9:a3:b4:74:89:f6:be:b4:2b:df:ea:3b:
8a:fb:a8:a0:3c:cb:92:19:ff:3f:9b:1e:69:11:02:c8:25:79:
53:55:60:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:05:15 2026 by rpki-client