
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c1a91cde-9538-3a4b-b4aa-48adddcfd616.roa
File: c1a91cde-9538-3a4b-b4aa-48adddcfd616.roa (raw, json)
Hash identifier: SjkFE4cMcjOSx9ZQd25LbcaUdBmvwZIhxIp5GweixCg=
Subject key identifier: 1E:61:5A:FD:69:F8:C6:CA:8C:87:E8:16:33:ED:47:75:E1:85:BB:12
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584F66C2C8EC0F6B1DB227634C00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c1a91cde-9538-3a4b-b4aa-48adddcfd616.roa
Signing time: Mon 05 Oct 2026 13:00:13 +0000
ROA not before: Mon 05 Oct 2026 13:00:13 +0000
ROA not after: Sun 03 Jan 2027 14:00:13 +0000
asID: 21433
IP address blocks: 144.36.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:c2:c8:ec:0f:6b:1d:b2:27:63:4c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Oct 5 13:00:13 2026 GMT
Not After : Jan 3 14:00:13 2027 GMT
Subject: CN=dae34fd7-f3cc-4b2e-966c-b65ca3ac68a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f7:87:f8:c5:fd:66:29:2c:01:8f:7d:cb:1d:
e6:3b:bb:2c:5b:c7:9c:57:2a:a2:c0:9d:4f:a8:93:
1a:ad:1c:01:66:66:d6:f1:9c:93:75:3e:d1:5f:04:
71:67:76:b7:d4:05:52:ba:d6:91:cc:94:95:b6:11:
92:5c:9a:e3:23:0f:60:cd:bf:5e:61:e1:7c:35:42:
c0:45:78:ea:ba:e4:e7:22:55:85:90:a3:48:05:36:
f8:86:96:0a:c3:ba:ee:ac:bd:ea:44:a5:0c:9d:2d:
a5:8e:eb:cf:fa:56:e6:8e:03:a1:19:c1:e9:3e:e1:
57:00:92:b0:1c:c1:5e:11:82:a0:66:e2:55:6a:c5:
93:fc:ba:2b:51:48:0c:55:2c:8c:df:ef:2d:74:24:
c1:01:51:f4:1b:61:30:13:59:62:3b:e5:f6:5f:10:
3f:45:ba:61:44:24:30:de:e3:18:35:fc:ca:8d:28:
ce:2d:15:da:c8:1f:29:3b:f3:32:ac:8a:10:8c:15:
ec:56:3b:6e:29:41:d8:31:30:5c:ba:f0:f2:cf:2b:
00:57:1e:4c:d8:1c:87:9c:c4:79:d1:ec:6b:78:a3:
60:c1:11:aa:a2:81:af:ad:89:53:49:47:2a:9c:c8:
78:b3:84:5b:86:ce:f6:29:f3:3c:47:f6:e9:0c:e6:
57:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:61:5A:FD:69:F8:C6:CA:8C:87:E8:16:33:ED:47:75:E1:85:BB:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/c1a91cde-9538-3a4b-b4aa-48adddcfd616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:a5:8f:65:5f:85:93:3e:ea:76:57:2c:3e:ad:43:9e:39:63:
19:a8:06:bb:5b:09:70:f3:d4:12:71:b4:87:44:a6:05:09:c6:
82:01:7f:04:43:08:5c:3c:f8:7f:63:32:25:ff:17:74:25:cc:
b3:25:5f:e8:37:85:85:72:1d:a6:e4:7b:0c:f7:79:9d:a3:1a:
b1:d6:9d:32:ce:c7:bc:54:c9:63:ca:94:29:f6:60:15:d5:c7:
fc:42:88:cd:5e:24:76:18:6f:c0:71:de:b0:5c:a5:2c:ea:22:
76:cc:02:53:27:73:28:f6:37:b6:3b:00:61:44:fe:67:ef:5c:
0a:19:61:4a:88:7b:af:c3:13:01:fe:65:6e:f8:bc:49:1b:79:
40:41:8e:df:73:41:20:8a:c5:86:53:3b:8e:14:4b:52:0d:60:
32:5c:23:ae:9c:31:d2:9b:8e:58:d6:be:92:54:11:7b:fc:06:
7a:03:36:a1:ef:48:42:28:58:2b:22:1a:77:ae:32:2b:3f:a2:
9d:5c:b7:f4:9d:81:3b:1f:fb:e1:ca:f9:bc:6f:dc:c9:a6:71:
9c:41:3a:fe:b0:12:10:bb:c0:cc:38:56:f6:b4:e6:df:f6:1a:
21:de:fe:b0:bc:fc:74:7a:9b:d3:0e:df:bf:e3:54:3b:de:2f:
3f:fb:09:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 17:04:50 2026 by rpki-client