
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa
File: 3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa (raw, json)
Hash identifier: RhickLTKUgVnZ6XtJ+Uu9HpbqLRuENmyQim6JvXD0cw=
Subject key identifier: B1:A3:CC:E5:92:2D:75:69:6D:2D:6C:3A:01:F7:0C:1D:62:C1:F6:E7
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584EC4D712BF00E19C1B6BA380E0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa
Signing time: Sat 08 Aug 2026 13:00:11 +0000
ROA not before: Sat 08 Aug 2026 13:00:11 +0000
ROA not after: Fri 06 Nov 2026 14:00:11 +0000
asID: 21433
IP address blocks: 170.248.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:c4:d7:12:bf:00:e1:9c:1b:6b:a3:80:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Aug 8 13:00:11 2026 GMT
Not After : Nov 6 14:00:11 2026 GMT
Subject: CN=c8607d3c-a08f-4c49-a6d9-6c9d2d05c7ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:6a:9a:05:8f:78:19:15:33:ae:89:70:b0:
d7:c3:48:4f:78:9f:ea:6d:dc:21:6d:af:8e:a1:0a:
bf:fa:86:e2:d6:47:5a:63:d4:aa:54:cd:89:55:bc:
f8:26:95:b0:b2:a6:a0:98:f4:ae:0b:2f:45:c2:ad:
f2:5f:fb:74:11:03:7c:db:fc:22:06:c7:50:0a:2e:
9d:ca:45:89:79:fe:35:91:3d:6c:89:2b:66:a6:fd:
ca:ee:d3:f5:44:1d:ac:9e:57:df:cc:66:03:81:5a:
e4:fe:dc:fd:fc:e7:94:ea:4c:98:29:9f:9e:dc:e0:
10:8a:14:80:70:1c:3f:e4:e9:a5:5d:bb:26:bb:e9:
0d:8d:33:db:91:2b:3f:68:6a:c7:e7:91:47:22:a3:
63:fb:75:45:94:95:9b:0b:41:e9:9e:68:61:be:6b:
95:30:c6:a5:d6:02:c2:2a:ac:ce:75:6c:df:18:dd:
1d:33:59:72:b3:26:b1:64:2e:32:97:6e:e3:e5:e7:
5c:cf:cd:7f:d2:ac:79:9a:2b:6c:33:0b:87:0c:69:
9d:6d:6d:ba:4e:96:2d:76:61:23:25:5f:71:c8:cd:
e2:55:cb:f6:3b:ca:71:44:df:90:76:9f:ee:bc:6b:
da:b9:07:0a:c7:e2:99:df:e3:e9:d6:8b:cd:d7:7f:
6a:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:A3:CC:E5:92:2D:75:69:6D:2D:6C:3A:01:F7:0C:1D:62:C1:F6:E7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/3ccfdc80-3cd8-3a12-bd89-27ebe1ffc99f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.248.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1a:66:44:65:55:3a:5b:c8:5f:04:4d:04:b8:47:be:8b:8b:8e:
41:a6:c7:b9:4c:6a:e0:bd:29:a7:cb:d4:59:c8:1a:a0:4c:70:
9c:80:56:cf:ca:94:55:f4:bc:84:55:7f:b8:4b:94:1a:2f:41:
4a:93:4d:11:5e:d6:a6:b8:73:66:b3:d3:49:5a:30:6f:0b:c7:
9e:be:a8:9c:81:9c:c6:78:df:0b:86:15:e7:b4:fb:dc:b5:1b:
96:20:8d:15:a0:44:56:57:89:9a:73:4c:df:e0:c5:87:15:95:
90:be:0c:64:54:a8:56:0b:b9:b2:8c:9a:71:12:59:64:70:b9:
66:6e:ea:a3:1e:ba:55:ea:51:3b:f3:94:cf:7c:a0:ae:b6:4c:
ad:34:5e:3e:13:f7:e2:88:fb:bf:44:f9:ee:7c:ca:b0:97:67:
cc:98:4d:b8:63:3e:39:28:6d:fb:54:06:8f:4f:ff:dd:66:6b:
15:4c:2e:2f:9e:76:c5:3e:b9:3f:4b:40:10:37:c7:12:88:18:
06:98:9c:97:f4:a3:87:16:35:0f:f1:c5:59:31:08:2d:7c:d2:
a3:92:c2:ff:86:c2:57:80:25:53:70:7b:88:5f:59:5d:ee:43:
cf:9a:c2:0e:f6:1d:91:92:6c:58:d7:e1:b7:d4:e7:f6:3a:a8:
ed:20:e8:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:12:34 2026 by rpki-client