
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cffea628-771b-3646-a17a-1a3e192bd620.roa
File: cffea628-771b-3646-a17a-1a3e192bd620.roa (raw, json)
Hash identifier: y5uChYOCUet1tX5Zuo0Ws5lzbD3/vfTuyWSf9nFugfs=
Subject key identifier: 65:67:76:90:E4:6A:BF:0D:A1:D5:56:DE:7F:2C:B9:7F:AF:D4:2F:81
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED43243C7906640D7DA227D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cffea628-771b-3646-a17a-1a3e192bd620.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 22258
IP address blocks: 73.91.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:32:43:c7:90:66:40:d7:da:22:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=bb0dbeb1-9a71-436b-9132-156288065147
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:e9:3a:5b:66:b7:e4:35:2a:b2:cc:d7:c9:
0f:c1:1f:61:83:d4:f8:b9:10:5d:92:a3:2a:6f:69:
36:62:20:a0:5b:28:b9:42:84:35:39:9b:b1:e3:85:
82:9d:57:36:3a:83:c6:0b:62:a7:aa:95:07:c7:58:
94:f1:ba:c5:4d:da:23:10:ad:f5:7a:bf:a1:d1:a7:
3b:50:2a:08:69:c9:26:01:13:45:0e:13:78:9d:bf:
4a:83:41:89:30:14:5f:62:35:f6:c4:ea:c7:99:10:
26:89:2b:34:30:cb:f9:e3:0a:f5:19:17:ea:03:e1:
16:f8:91:10:ba:b6:6c:00:b9:91:9a:79:14:6d:f7:
04:1a:08:05:28:d5:c4:ce:a7:a1:13:c3:da:e7:40:
65:6c:02:93:de:3c:df:fb:3f:4a:37:40:22:79:82:
6b:cb:fa:29:f4:cf:c5:1b:e4:cb:d1:51:83:e5:23:
3b:f9:41:24:33:26:78:90:37:20:f1:f2:b0:19:6a:
13:e7:f2:6e:31:9f:c0:38:15:8a:c8:cd:00:35:eb:
0e:98:2b:be:ec:92:e1:2c:94:ba:a8:55:dd:6f:db:
20:0d:d9:6d:fd:58:10:8f:b5:f7:36:39:8e:5d:dd:
ff:88:0b:2b:b2:03:db:c6:ea:ee:40:f4:8f:e4:dd:
b6:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:67:76:90:E4:6A:BF:0D:A1:D5:56:DE:7F:2C:B9:7F:AF:D4:2F:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cffea628-771b-3646-a17a-1a3e192bd620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.91.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:bf:58:ad:a0:18:56:8c:29:2e:df:75:b6:6a:1c:89:3f:31:
d8:aa:be:5e:fc:eb:ed:af:31:e9:99:f2:48:dc:c3:3b:29:f0:
04:b2:81:99:b8:d2:c4:d5:3e:3a:09:45:db:ea:7d:d2:26:5a:
83:3e:c0:62:62:27:d0:67:5e:4e:aa:48:a9:55:51:ce:dd:fe:
66:ea:b6:bd:af:62:5c:37:f3:2e:28:e0:8b:85:48:53:6f:0a:
a2:4f:c1:f0:74:4a:4f:75:5c:ed:bb:f5:ea:96:4f:4f:72:27:
2e:c8:37:0d:9e:ce:67:a1:6a:9a:1e:d5:ab:eb:fb:e7:8e:55:
41:6f:f8:24:4c:c8:16:03:e6:a4:9d:6e:bb:62:e7:0f:a4:64:
59:00:18:92:3a:9e:ae:de:ec:6d:57:db:cf:ea:8b:9f:88:24:
45:89:c3:11:48:34:f6:7a:df:bd:70:f7:3d:55:ec:1d:0a:8e:
42:e7:8e:23:33:7e:94:43:1f:d7:9d:c2:b8:e0:30:67:f4:93:
7e:e6:f7:48:ec:98:ae:06:3d:19:83:8d:9d:06:91:39:db:e1:
f5:97:52:d6:f3:23:9d:da:76:38:f1:47:8f:23:cb:0e:88:95:
55:81:3b:a7:51:be:16:dd:8f:cb:e4:a5:5b:06:d0:7c:a4:e2:
43:57:93:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7UMkPHkGZA19oifYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNDAxMDAxM1oXDTI2MTExMjAyMDAxM1owLzEtMCsGA1UEAxMk
YmIwZGJlYjEtOWE3MS00MzZiLTkxMzItMTU2Mjg4MDY1MTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJTpOltmt+Q1KrLM18kPwR9hg9T4uRBdkqMq
b2k2YiCgWyi5QoQ1OZux44WCnVc2OoPGC2KnqpUHx1iU8brFTdojEK31er+h0ac7
UCoIackmARNFDhN4nb9Kg0GJMBRfYjX2xOrHmRAmiSs0MMv54wr1GRfqA+EW+JEQ
urZsALmRmnkUbfcEGggFKNXEzqehE8Pa50BlbAKT3jzf+z9KN0AieYJry/op9M/F
G+TL0VGD5SM7+UEkMyZ4kDcg8fKwGWoT5/JuMZ/AOBWKyM0ANesOmCu+7JLhLJS6
qFXdb9sgDdlt/VgQj7X3NjmOXd3/iAsrsgPbxuruQPSP5N22/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGVndpDkar8NodVW3n8suX+v1C+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ZmZWE2MjgtNzcxYi0z
NjQ2LWExN2EtMWEzZTE5MmJkNjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSVvcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABa/WK2gGFaMKS7fdbZqHIk/Mdiqvl786+2vMemZ8kjcwzsp8ASygZm4
0sTVPjoJRdvqfdImWoM+wGJiJ9BnXk6qSKlVUc7d/mbqtr2vYlw38y4o4IuFSFNv
CqJPwfB0Sk91XO279eqWT09yJy7INw2ezmehapoe1avr++eOVUFv+CRMyBYD5qSd
brti5w+kZFkAGJI6nq7e7G1X28/qi5+IJEWJwxFINPZ6371w9z1V7B0KjkLnjiMz
fpRDH9edwrjgMGf0k37m90jsmK4GPRmDjZ0GkTnb4fWXUtbzI53adjjxR48jyw6I
lVWBO6dRvhbdj8vkpVsG0Hyk4kNXk5g=
-----END CERTIFICATE-----
Generated at Sat Sep 5 10:23:25 2026 by rpki-client