
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1d6b4e8-5302-348b-9209-0401b9d5c7f8.roa
File: a1d6b4e8-5302-348b-9209-0401b9d5c7f8.roa (raw, json)
Hash identifier: 7UZH7b8NnIqqAeVn0/HvVoraf3QUMRQb6JXw5wxyM+Q=
Subject key identifier: AD:8D:AB:20:06:A7:2D:4A:03:31:C2:4B:5F:96:96:2E:5B:13:A4:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862433C50037174F919AE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1d6b4e8-5302-348b-9209-0401b9d5c7f8.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 7015
IP address blocks: 71.233.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:43:3c:50:03:71:74:f9:19:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=2528cf8e-930e-4e07-9388-7b91c47ab66d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ae:74:56:f5:41:c1:57:7b:75:91:64:4f:e8:
02:14:4c:ad:66:73:5b:5a:fc:75:8d:58:70:6f:8e:
66:c7:63:2c:13:e6:0f:fe:cb:51:e1:d7:c6:69:9f:
db:b8:96:c4:dd:8a:d5:d2:f6:f8:a0:52:c1:23:f4:
34:44:f2:20:b8:ef:0c:4e:f0:e8:fe:9d:74:60:ac:
78:eb:75:f5:bb:28:b9:00:17:90:d4:b7:92:9b:72:
0c:8d:0c:23:fe:fc:77:9c:e5:f3:5f:ae:be:29:7b:
86:01:ab:f0:fe:91:c0:b5:b8:9d:21:00:27:ff:0b:
e0:b9:96:28:d8:28:57:31:18:93:8c:3b:bd:23:b0:
01:d6:c2:02:5c:c4:f6:28:fd:84:6b:a7:02:d7:89:
81:c9:fe:cd:4a:69:25:97:06:5e:29:03:f8:d5:c6:
5b:8c:27:cf:66:07:a8:df:a2:2c:3e:94:5e:77:bc:
06:76:fa:57:db:8d:17:a8:d8:aa:6c:e1:4c:12:da:
8b:c3:9e:6d:49:bb:91:17:a8:56:23:fb:2e:c7:9a:
d7:a5:04:fb:06:e6:c2:fe:04:a0:07:a6:b6:a8:38:
7a:28:1a:bd:25:f9:21:6e:8b:91:52:c3:7d:7d:bf:
1c:f0:1e:48:ae:bf:33:d7:d4:d6:df:14:1f:8b:71:
27:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:8D:AB:20:06:A7:2D:4A:03:31:C2:4B:5F:96:96:2E:5B:13:A4:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1d6b4e8-5302-348b-9209-0401b9d5c7f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.233.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:02:81:90:a9:c4:a3:43:68:c5:b7:a2:f1:a0:a9:5e:85:5d:
97:57:a4:cc:d5:17:52:bd:80:bc:8d:e7:ea:43:e9:bc:f9:8c:
82:3d:a6:35:72:df:7e:1c:bf:16:ca:ad:11:1a:1a:03:f7:a9:
58:bc:85:03:5d:28:e2:84:5a:1b:b0:e1:e6:49:2b:cc:ba:2a:
45:65:af:d4:74:62:38:31:ec:ce:b4:66:83:a7:73:50:b7:d5:
58:05:ce:38:a4:0a:0f:c8:a6:b5:22:15:8a:be:92:0a:ab:12:
a0:a2:6c:13:2b:6e:02:26:76:23:5e:ad:09:cd:40:84:d7:77:
04:a0:ad:24:2e:5b:fd:52:41:d2:1b:53:68:b8:c8:72:68:ef:
a2:78:b1:10:2f:b9:be:77:21:93:80:e4:a3:c4:f5:1f:f0:72:
93:27:10:79:f4:17:b7:fd:75:6c:7b:19:05:da:71:46:a5:f7:
a3:04:a0:c4:53:f9:36:89:7a:d1:60:cd:2d:63:e6:ce:9e:0f:
7a:cc:b8:8f:d2:f1:da:c0:9c:4e:07:ae:8e:bc:06:61:eb:49:
f5:c0:0f:67:67:4c:7a:73:4d:18:2f:90:3d:91:b4:19:8d:e0:
09:aa:78:c3:6c:51:05:56:22:fd:17:0d:71:62:31:48:f9:70:
c9:43:db:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 17:35:40 2026 by rpki-client