
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3985d75b-cf6e-3031-a62a-162ee795ba5d.roa
File: 3985d75b-cf6e-3031-a62a-162ee795ba5d.roa (raw, json)
Hash identifier: 86DOqVmaUNA7ZdHgPJO3yw/QwsAn800SNcIyl+qgjeY=
Subject key identifier: C4:22:95:FB:2D:BF:8A:71:6A:11:4C:38:0E:40:8F:73:B2:0D:89:1C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4EDA6E9AC69DCCC2715C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3985d75b-cf6e-3031-a62a-162ee795ba5d.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33490
IP address blocks: 174.174.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:da:6e:9a:c6:9d:cc:c2:71:5c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=f5ac7bd8-4f4e-4b5d-a62e-47f0163fcfcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:dd:3a:0b:b7:1f:4f:f2:8c:b1:80:96:73:1a:
a0:b3:76:b5:62:c6:f5:2b:77:b0:8a:24:25:2f:91:
8c:03:d1:74:ad:89:3b:bf:ac:dc:e8:d5:f7:3a:6d:
80:cc:00:72:ac:ec:0b:e6:00:30:13:47:16:a4:05:
24:d7:da:43:53:54:a9:3e:5f:a8:1d:f5:fd:c5:39:
a4:41:93:16:6f:90:4d:40:7a:f6:07:e4:bd:9b:a3:
a4:c0:29:e0:ea:21:43:ae:38:ad:6e:43:15:6c:c5:
f5:cc:d8:b7:68:34:f5:4c:de:3c:bb:09:f9:a4:e5:
82:2d:9c:6b:5d:05:f6:fb:22:c1:79:46:7c:c2:39:
45:78:96:5a:76:71:18:04:91:5f:58:c7:aa:60:2c:
da:c1:fa:38:3b:30:78:4d:4b:34:9e:5f:48:0a:c8:
16:39:3f:5a:16:f3:48:6a:3c:0a:4b:da:01:ac:f2:
f4:32:5b:e4:99:27:14:78:75:38:de:7b:f2:aa:50:
c8:90:fa:bd:b6:e8:ec:c5:cb:25:4d:51:d3:b9:f8:
39:e7:38:3d:df:f0:f1:b3:10:fd:ca:c2:c4:4f:fc:
59:4d:53:49:7a:7c:fb:6c:64:2c:5c:75:b8:48:6b:
c5:17:a7:a8:42:e2:5b:8e:63:9d:5c:7b:ea:58:c0:
8c:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:22:95:FB:2D:BF:8A:71:6A:11:4C:38:0E:40:8F:73:B2:0D:89:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3985d75b-cf6e-3031-a62a-162ee795ba5d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.174.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bf:a9:8e:69:6f:ba:32:b1:9e:91:bc:66:01:ca:3e:43:c8:18:
6b:02:6f:0f:67:ba:05:59:33:de:5f:89:c5:62:58:c3:a4:8d:
ff:f7:78:77:a3:72:fb:a8:75:75:32:63:e0:c5:77:d7:f9:15:
1b:49:9e:e5:e0:c7:4f:4e:31:f9:a9:c6:ef:52:ae:05:85:32:
7e:b2:c0:cc:cd:cd:b8:3a:f6:43:df:5b:ef:1d:f4:e6:03:62:
85:c4:a1:b6:1f:5d:04:57:1b:c5:e8:f8:d2:35:ce:c6:56:99:
77:06:44:06:a2:5f:ec:93:cc:0e:fc:f1:ba:99:35:f8:03:64:
43:00:f8:95:20:51:b5:cb:ba:b7:56:63:a8:86:cc:f6:ed:96:
4a:c2:79:fb:dd:46:f4:96:0f:14:8a:22:43:af:34:d3:7e:e7:
41:5b:25:06:48:0b:c4:fa:4f:57:f8:42:d0:98:3e:b4:a8:b8:
92:38:a5:33:cd:6a:81:29:16:5b:dd:b8:13:7b:8a:88:9d:5a:
4d:7a:e9:4b:4e:7b:80:18:4e:60:d7:82:fa:71:d2:66:3d:b4:
82:f7:6a:75:02:99:cf:71:2b:b5:e8:17:b7:e7:16:f8:38:84:
ac:9e:01:41:82:00:89:25:0a:a5:a8:09:ee:d1:7a:0d:ac:13:
c4:08:d7:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 10:42:22 2026 by rpki-client