
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dfef618-f88a-311b-8aa9-e0a8f1ec696b.roa
File: 9dfef618-f88a-311b-8aa9-e0a8f1ec696b.roa (raw, json)
Hash identifier: i6tgUF4fY5VFEHC5XVuGk1Y7d+4yU+v8JIgVoM27SaQ=
Subject key identifier: C7:1B:04:A3:8B:57:7E:9B:46:1C:7D:79:1C:C8:34:A3:F1:C4:A6:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF784DB261B2D2D07146480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dfef618-f88a-311b-8aa9-e0a8f1ec696b.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 67.173.90.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:84:db:26:1b:2d:2d:07:14:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=11d22acf-c02e-4ed8-8b31-33fdc672ea64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:69:e7:2b:70:59:d9:71:c4:81:7e:06:cc:65:
c9:45:d3:26:ec:06:39:f8:33:1b:c3:08:cb:03:ab:
1d:85:52:5d:2a:c6:63:66:8c:1c:db:fb:48:a0:bf:
6c:0e:11:b8:7f:32:70:b2:a5:9a:50:01:0a:ed:61:
a9:c8:26:28:48:dc:67:e2:eb:a3:4b:45:d8:d9:84:
80:5b:f3:ec:e7:55:f2:d4:a8:5f:07:af:b0:bf:15:
ac:1a:a3:e6:90:85:7d:f6:af:81:7e:c7:eb:1e:f2:
59:be:fb:14:b8:ed:f8:6e:0d:a5:68:7d:1e:71:b0:
72:d7:7d:97:c3:bc:ea:6e:2f:c3:3a:a6:56:3b:17:
73:ee:84:e2:66:68:74:8c:19:fd:1f:fa:2d:d3:84:
36:40:5f:e5:70:a6:fb:76:91:6a:6e:4a:c6:41:d3:
0a:fa:d6:57:d7:fd:1e:a9:05:8b:2d:cc:63:d3:f9:
9d:6e:f8:10:8d:ec:73:e4:cc:f2:12:16:c7:96:fc:
87:60:17:6e:0b:a1:c7:f9:a1:68:68:76:46:cd:49:
9e:51:4d:a1:41:ee:fe:3b:9e:51:2e:48:c0:b3:25:
5b:84:90:7f:a7:a0:7c:70:04:f1:7f:c8:d7:c7:ca:
90:82:a5:bd:4e:b3:84:39:7a:cf:30:55:b4:87:f6:
b5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:1B:04:A3:8B:57:7E:9B:46:1C:7D:79:1C:C8:34:A3:F1:C4:A6:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9dfef618-f88a-311b-8aa9-e0a8f1ec696b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.90.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b7:b5:1d:38:58:6a:0e:6c:42:c4:13:90:11:4a:60:90:fe:
00:67:b2:78:46:92:6d:e1:3d:5c:39:d9:9d:3f:17:1b:ba:8d:
51:17:a9:c2:77:ae:40:2f:87:65:b1:77:47:9b:36:55:56:e0:
78:c8:39:c4:27:a4:4e:92:75:8c:7e:ed:3f:65:e0:8a:f3:10:
89:40:0c:ad:bd:65:84:c4:32:d0:09:51:63:7f:2c:65:15:48:
a7:29:53:61:c2:93:7c:81:3f:a0:66:3b:4f:bc:27:58:f6:6e:
9e:c8:f2:80:91:6a:72:5f:b2:af:da:0c:52:a0:f1:fa:1d:11:
6e:b8:c3:05:c6:d9:26:77:97:f7:5a:cc:5b:63:44:44:cc:7c:
20:00:e8:b9:60:de:d3:61:df:92:d0:4b:b1:fb:2e:f4:45:48:
b0:98:9b:8a:0b:de:8f:77:1f:1f:09:0d:b5:43:b1:69:f5:3d:
a8:69:1e:14:44:8a:0c:63:f4:af:c4:f4:ad:34:2d:2d:37:86:
00:d8:46:3c:05:86:ca:fe:bd:c9:1f:0c:a2:c5:e8:3f:a5:72:
b9:e1:03:cb:39:e7:67:17:80:9f:8b:39:43:91:e2:64:51:ee:
07:93:01:51:65:50:7a:81:5b:21:23:d8:34:cb:94:bf:b6:e3:
df:3f:63:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O94TbJhstLQcUZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
MTFkMjJhY2YtYzAyZS00ZWQ4LThiMzEtMzNmZGM2NzJlYTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy2nnK3BZ2XHEgX4GzGXJRdMm7AY5+DMbwwjL
A6sdhVJdKsZjZowc2/tIoL9sDhG4fzJwsqWaUAEK7WGpyCYoSNxn4uujS0XY2YSA
W/Ps51Xy1KhfB6+wvxWsGqPmkIV99q+BfsfrHvJZvvsUuO34bg2laH0ecbBy132X
w7zqbi/DOqZWOxdz7oTiZmh0jBn9H/ot04Q2QF/lcKb7dpFqbkrGQdMK+tZX1/0e
qQWLLcxj0/mdbvgQjexz5MzyEhbHlvyHYBduC6HH+aFoaHZGzUmeUU2hQe7+O55R
LkjAsyVbhJB/p6B8cATxf8jXx8qQgqW9TrOEOXrPMFW0h/a13wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMcbBKOLV36bRhx9eRzINKPxxKakMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWRmZWY2MTgtZjg4YS0z
MTFiLThhYTktZTBhOGYxZWM2OTZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ61aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAO3tR04WGoObELEE5ARSmCQ/gBnsnhGkm3hPVw52Z0/Fxu6jVEXqcJ3
rkAvh2Wxd0ebNlVW4HjIOcQnpE6SdYx+7T9l4IrzEIlADK29ZYTEMtAJUWN/LGUV
SKcpU2HCk3yBP6BmO0+8J1j2bp7I8oCRanJfsq/aDFKg8fodEW64wwXG2SZ3l/da
zFtjRETMfCAA6Llg3tNh35LQS7H7LvRFSLCYm4oL3o93Hx8JDbVDsWn1PahpHhRE
igxj9K/E9K00LS03hgDYRjwFhsr+vckfDKLF6D+lcrnhA8s552cXgJ+LOUOR4mRR
7geTAVFlUHqBWyEj2DTLlL+2498/YzQ=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:24:10 2026 by rpki-client