
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9961f955-244a-398f-aa07-f6cfa1e85168.roa
File: 9961f955-244a-398f-aa07-f6cfa1e85168.roa (raw, json)
Hash identifier: Mw1LP7xotmTdhNkwquI+98uXRUgYpijyB+Bt54Fm92Q=
Subject key identifier: C4:B5:61:04:94:C8:86:A7:78:39:25:7B:24:82:11:8D:4B:9E:3D:C5
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584F0A5AA573CD3A5E30D9863C00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9961f955-244a-398f-aa07-f6cfa1e85168.roa
Signing time: Wed 02 Sep 2026 10:36:10 +0000
ROA not before: Wed 02 Sep 2026 10:36:10 +0000
ROA not after: Tue 01 Dec 2026 11:36:10 +0000
asID: 3573
IP address blocks: 170.251.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 18 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0a:5a:a5:73:cd:3a:5e:30:d9:86:3c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Sep 2 10:36:10 2026 GMT
Not After : Dec 1 11:36:10 2026 GMT
Subject: CN=abd39e1d-df8a-4ab7-9730-edac77388dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:91:f1:86:7d:47:80:24:ef:b1:95:2a:6e:53:
ad:62:ec:20:b7:5e:e4:92:7e:4e:d0:7f:39:9c:a7:
ef:9f:bf:e8:a4:cf:64:4c:a1:3f:e9:3e:9a:27:cf:
38:89:2e:ec:d9:0d:a7:05:28:fd:d0:ff:ad:ba:4a:
57:d0:83:d7:8d:5c:eb:c7:cf:98:cf:9f:1d:c7:ee:
bc:c7:33:13:3a:9a:dc:41:a4:57:fd:25:39:a5:d8:
c3:47:e9:35:fe:1b:e7:99:14:43:e5:95:bc:f1:ab:
b9:05:3d:50:ad:68:b0:e3:bd:a6:a2:9b:ae:3c:8b:
f3:69:28:1c:d1:6c:34:94:9d:14:f5:7c:8b:0b:d4:
89:d4:c9:c3:40:26:d5:9e:03:bf:01:ae:2e:bf:c0:
5f:64:8b:5c:13:ec:ee:ba:a4:53:6c:63:bb:6e:6a:
a1:95:38:9e:09:10:c2:03:7f:5f:ce:9e:12:f2:29:
a7:e9:54:26:a5:38:c4:00:d2:1f:5f:a1:fc:b7:d1:
ae:27:a7:c1:42:35:71:c4:63:05:64:bd:98:37:d4:
e1:e5:48:13:73:42:78:44:97:be:8a:1b:42:2e:28:
a8:12:4e:71:fd:d4:1a:4a:10:37:a5:ff:d7:81:9f:
66:24:73:57:a3:b0:a0:6a:d4:c0:5c:c6:e6:a2:3d:
39:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:B5:61:04:94:C8:86:A7:78:39:25:7B:24:82:11:8D:4B:9E:3D:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/9961f955-244a-398f-aa07-f6cfa1e85168.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.251.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:1c:8f:18:5c:e3:a3:33:86:03:7d:3d:0c:01:ed:34:f4:00:
18:c2:72:38:d2:22:58:f3:cc:d0:c1:73:00:dd:c4:af:03:5f:
12:90:0e:64:3a:2d:46:ab:60:5c:d8:ec:5c:81:c4:45:8c:d8:
b5:c0:ef:ce:d8:28:61:e7:cf:68:bd:c4:3f:02:7c:58:4d:20:
4e:f5:6b:f3:0e:d6:cb:39:3c:e5:68:79:8d:36:fb:58:6f:c8:
83:ce:e4:49:80:c3:65:aa:ce:5a:52:52:0e:4a:e1:e0:8a:75:
dd:4d:f5:00:e5:f2:d4:07:64:2b:c4:3e:6f:40:76:a9:ed:c4:
2d:92:2d:5a:ff:88:cc:93:91:bf:22:03:3e:ee:85:30:67:1a:
01:35:2e:02:c8:51:f3:ee:f1:84:b4:ca:1b:3d:9b:1d:8e:52:
36:64:24:59:d5:e6:a5:38:1e:31:73:11:db:ae:2e:6e:a6:75:
d0:ea:9d:67:0e:fb:81:9d:6a:e4:04:70:ac:e3:c7:17:23:bf:
99:ab:24:be:6e:5a:28:dc:98:31:2d:5a:49:3f:e4:04:4a:0a:
a5:90:64:9d:22:1f:33:a7:36:0e:4c:35:f8:7a:d5:7b:01:0b:
41:5e:e2:5c:c5:cd:00:a5:f9:b4:7c:24:83:41:ab:3c:06:74:
06:1a:ca:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 16 18:04:27 2026 by rpki-client