
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a07b8e7d-f825-3389-8698-a209423817ca.roa
File: a07b8e7d-f825-3389-8698-a209423817ca.roa (raw, json)
Hash identifier: ToXHaNQwEaKg248wozcBGYrwyVT58wOtDAlD1InO33E=
Subject key identifier: 72:2F:37:A6:8C:43:BD:30:1A:F1:C9:BF:E7:C7:0B:A0:F7:CB:99:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4EE1CD1641CA09BA89B850
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a07b8e7d-f825-3389-8698-a209423817ca.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33490
IP address blocks: 67.189.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:e1:cd:16:41:ca:09:ba:89:b8:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=40840931-0a91-4a7f-9f3d-86df07776cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f9:a2:c8:65:06:82:4e:d3:e9:97:9e:67:44:
f5:ed:1b:cf:72:7a:76:0b:0c:fa:7d:c1:7c:92:c0:
05:1c:aa:ec:30:61:20:37:4e:70:d6:1a:67:6b:59:
e0:6c:42:7b:8e:bf:72:7d:a3:d2:14:cb:92:db:87:
41:5c:c3:7c:77:2d:1d:b5:5c:33:f5:8f:5b:4a:02:
2e:f3:8c:ee:25:3d:75:48:3b:47:5e:80:63:f2:e6:
1b:ff:ad:7c:a4:cc:ec:e6:27:03:1e:ff:28:64:dd:
06:c0:76:cb:ae:fd:fe:cc:01:56:00:a8:96:5a:8e:
d7:87:38:61:cd:be:17:48:47:1d:1c:22:f6:fd:7e:
1c:78:6c:f5:77:1c:59:46:57:c8:a4:2a:1d:02:33:
3c:93:78:f7:d1:b6:c9:03:f7:45:89:2b:55:ac:f5:
c1:fc:3f:85:c7:4c:eb:2d:79:10:23:8f:7f:c4:c8:
b4:51:e6:83:5b:bb:73:dd:4c:41:8f:c0:0f:4b:b8:
7e:d5:cc:a8:3c:18:e3:d7:f9:19:98:c9:39:6b:ae:
9b:88:65:e7:99:f2:69:20:ff:7b:03:1b:43:72:bf:
22:95:0b:6b:78:12:3a:0e:4f:f5:33:08:bc:d2:3b:
b6:d4:b4:9c:c9:cf:66:e4:b8:8f:e5:a7:82:52:a0:
db:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:2F:37:A6:8C:43:BD:30:1A:F1:C9:BF:E7:C7:0B:A0:F7:CB:99:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a07b8e7d-f825-3389-8698-a209423817ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:46:7c:3f:a9:d5:c9:64:2f:b9:70:67:3d:60:10:16:fa:ed:
15:9e:21:8d:e3:1d:48:42:1b:b2:bf:06:58:24:10:32:77:bd:
6a:a1:17:e2:66:86:81:f1:fd:bf:a4:9e:7f:00:1f:ec:93:90:
16:54:5b:6c:e7:d1:8e:a7:be:8f:a0:eb:02:ba:92:90:49:e7:
64:ce:85:7e:d7:12:ad:23:75:52:a7:e6:76:37:b9:ec:8e:e6:
10:55:dc:db:66:5e:94:88:d1:cf:7f:c6:f3:21:63:4f:8a:76:
ad:7c:0c:44:cb:f0:5b:15:3c:6b:2e:ed:ce:26:3d:1e:a7:fd:
40:af:52:fa:6b:c6:ac:65:a7:31:01:5e:d1:4e:c2:25:7c:0f:
18:e8:b8:8a:91:cf:01:f6:5f:2f:ad:ba:03:b5:82:90:4a:89:
81:56:37:16:d5:5f:eb:02:ba:78:5a:84:01:30:17:84:e2:fb:
44:f4:9c:1b:71:f0:81:6f:ab:57:3c:6d:87:47:29:a0:82:d7:
59:65:50:63:68:de:46:bf:d4:d3:d4:37:9b:3d:6c:fb:fa:d9:
21:93:0a:d8:90:8a:79:b5:20:86:93:ee:2f:9f:0a:e1:9e:17:
02:cb:7f:1a:01:3f:d7:da:6c:df:8d:68:4d:dc:7c:a9:4a:af:
6f:ad:b5:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 15:59:54 2026 by rpki-client