
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa
File: d3d0583a-32b8-341b-8a18-30793c6e87fd.roa (raw, json)
Hash identifier: NMeW0zLxCcVkf3vqVRtg2diysrasvg8yA1sE0KFbJjk=
Subject key identifier: B5:26:6E:4D:5A:28:9E:0E:EA:80:DD:F6:A9:80:1E:05:67:4D:28:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED431F7B37DD948A49C536080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 22258
IP address blocks: 174.161.252.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:31:f7:b3:7d:d9:48:a4:9c:53:60:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=a450f67d-d5dc-4203-a053-f19066f0ea7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:8f:5d:87:d5:74:bd:83:e2:1b:e4:42:ee:9d:
97:23:c8:db:8a:bd:cc:5c:68:b7:01:af:10:ba:51:
4c:a5:76:e4:2d:d9:02:b1:d8:6f:42:64:6b:aa:11:
bb:17:72:e5:26:61:5c:f8:8b:84:80:08:31:72:35:
de:42:b9:fe:8e:d4:45:2b:2a:59:2f:82:e2:53:5c:
9c:4f:45:4e:2f:f1:a4:dd:c9:cd:85:c0:78:0e:22:
81:bb:c0:e4:fe:07:d5:6f:b0:02:b1:0f:0e:16:52:
44:78:4e:8e:0d:35:84:78:df:84:4a:89:9e:97:fd:
11:8b:08:0f:b7:87:2a:ea:61:a9:f3:93:da:73:0a:
00:f1:7d:c9:bf:c0:c8:f1:1a:41:47:43:c1:3b:35:
57:b9:4d:17:5e:cd:37:7b:8a:79:7c:ba:ae:36:99:
0f:26:17:d5:f4:11:8e:92:a8:8d:aa:13:a9:41:8a:
fe:95:51:57:41:0d:a7:e3:18:ef:ee:36:8e:68:d5:
49:44:a9:74:19:f9:db:de:04:14:0c:02:ff:90:d5:
a3:29:ae:c9:dd:5a:b2:ee:4f:90:f9:f9:d7:f1:c3:
ca:ad:ac:50:02:65:87:71:6d:d9:4d:7c:28:87:a4:
57:ba:ec:9b:82:8a:5c:fb:b8:6a:e1:da:3e:cf:68:
48:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:26:6E:4D:5A:28:9E:0E:EA:80:DD:F6:A9:80:1E:05:67:4D:28:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d3d0583a-32b8-341b-8a18-30793c6e87fd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.161.252.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:c9:41:09:b5:2f:e3:1b:93:4c:30:25:ef:a2:85:56:0c:33:
bb:24:4a:cd:0e:31:16:48:56:27:87:9c:24:c0:4b:27:d1:d4:
64:eb:d3:79:d0:1e:98:9c:2b:55:96:28:f9:d8:30:f3:d1:8f:
48:f9:aa:96:9c:89:21:7e:e1:56:c2:bd:ad:bc:1b:29:46:d2:
30:57:66:7c:d6:2f:ab:3d:b4:2b:1d:08:da:7c:d7:f9:0c:60:
d9:c2:c1:df:ef:5a:db:d7:e8:53:bf:61:f4:d8:32:2d:a0:e2:
02:08:88:6b:43:0c:0d:08:3c:88:cf:35:bb:c9:b5:26:66:37:
45:23:f0:3d:9f:87:38:8f:c2:5c:d9:0e:ef:a2:30:03:94:e9:
00:81:e2:af:e1:0c:04:2f:33:8b:c2:37:c5:46:3c:a7:34:4a:
af:69:22:c3:da:c1:10:ae:4c:82:03:51:4a:9e:6e:00:e9:5a:
43:40:f1:44:75:f8:a6:c1:2d:83:77:ed:03:1f:09:d3:63:74:
05:a1:1c:4b:7e:7c:51:c4:40:6e:be:77:74:41:a0:f5:44:89:
8c:58:9f:ea:e7:04:1e:c7:b0:0f:0e:43:55:03:7b:14:6e:7b:
5f:da:ac:11:aa:8d:cf:e9:6f:3c:aa:e3:84:f6:14:c5:81:09:
bd:72:c2:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 16:08:01 2026 by rpki-client