
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9938963f-e87e-33c5-ac98-92c3764d014e.roa
File: 9938963f-e87e-33c5-ac98-92c3764d014e.roa (raw, json)
Hash identifier: V9Q+lsEqFVkrLbcHvxy3HtGb2Erq81f5KiGSbfOs4mc=
Subject key identifier: F2:2A:D9:3C:4B:18:7A:C9:1C:09:B2:90:1E:2B:BC:E6:BC:BB:2E:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A7E07716E6F788EC12C6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9938963f-e87e-33c5-ac98-92c3764d014e.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7015
IP address blocks: 71.192.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:e0:77:16:e6:f7:88:ec:12:c6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=71f12bb3-0f4d-491e-8a54-5040433d7f29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:f3:4a:66:42:4a:ac:06:45:0a:96:53:65:2c:
91:21:d6:85:dd:5c:55:ef:28:7f:82:e5:ef:37:38:
65:e9:b0:fc:04:81:d8:9e:93:45:63:49:98:20:2a:
1c:e2:69:3f:d8:d9:b1:9e:ff:8e:0d:c5:2d:ea:7e:
1e:77:89:cd:5b:93:89:ac:ea:06:32:b2:2a:c7:ce:
97:cf:21:45:14:0b:88:c5:79:6d:6b:3c:f2:cf:2b:
76:a6:99:43:f6:d7:cb:1c:a6:4c:61:3e:ba:5c:90:
bd:6e:d4:c3:19:25:37:35:c4:1e:5c:ce:c1:a0:b1:
7f:8a:83:85:7b:56:58:57:c5:db:8b:de:ae:55:f8:
eb:55:07:f5:81:07:bf:28:2c:6c:dd:57:8a:ca:ee:
b9:ae:e0:63:f7:7d:2f:d7:b5:79:61:91:fa:68:ee:
28:a1:86:b7:46:83:7b:27:a4:8c:45:e6:9b:86:61:
56:ab:e0:f2:ac:91:20:40:b7:d5:cc:a1:f5:c8:0d:
27:4b:87:70:1a:37:3e:f9:4a:18:d3:20:12:2a:77:
ee:62:68:32:1d:b0:11:89:e8:e9:cd:87:3c:bd:b8:
64:d1:4a:ff:3e:cc:92:4c:2e:89:9f:f5:1e:3e:c7:
09:95:38:b3:7d:2e:e6:d0:41:4e:52:e1:00:e6:7a:
31:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:2A:D9:3C:4B:18:7A:C9:1C:09:B2:90:1E:2B:BC:E6:BC:BB:2E:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9938963f-e87e-33c5-ac98-92c3764d014e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.192.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:5f:27:8b:2d:a0:44:17:5f:29:c1:c6:b0:db:5d:18:89:0b:
e6:cb:6b:5c:25:3f:4a:46:a2:2b:52:80:09:a2:18:44:d5:13:
d9:5c:56:5f:fe:0f:8d:fd:1a:8f:d4:cf:9a:36:91:da:99:7c:
2f:ba:b9:55:f6:dc:3d:36:0d:7a:6e:96:94:9c:02:2a:b8:1d:
ae:19:9f:39:31:cf:96:88:44:54:13:f0:e2:d2:0c:5e:03:8a:
1e:c5:62:da:5b:71:c7:39:06:a7:48:42:b1:cd:ae:bc:b7:41:
a5:d7:d5:c3:3d:dc:a2:38:b7:f3:38:c1:64:15:c8:89:57:16:
e9:fe:76:ac:9e:b1:07:28:91:e1:5f:3a:6b:41:90:43:11:ec:
5b:16:fb:ff:07:f4:32:2e:b7:85:74:43:7c:34:b0:e3:18:78:
46:d2:05:04:bf:7e:20:63:c7:d8:ac:10:6b:3c:80:47:7d:33:
c0:98:05:59:9c:af:1f:87:55:04:4a:1e:ee:cd:d9:cc:2e:94:
16:ff:61:e7:97:d0:fe:a0:fd:2d:cd:20:c1:ca:46:da:c8:e6:
36:f2:94:31:c5:5d:f2:8a:2e:a9:81:71:65:b9:a0:57:b1:c8:
a2:64:7f:28:4f:80:0f:1c:50:99:e6:07:e3:98:80:7b:7f:6a:
e4:de:4f:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 22:05:57 2026 by rpki-client