
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d61dab8e-cef2-32cd-a0ad-7aa934963164.roa
File: d61dab8e-cef2-32cd-a0ad-7aa934963164.roa (raw, json)
Hash identifier: CjHLYmveB92Bh+SvqmuvaCT5aT5Dm5bW9bVCeDwiC5c=
Subject key identifier: D6:F0:72:11:AC:03:B7:7E:C9:F1:2F:31:56:99:F9:7A:07:BE:A5:35
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584EA797DA05494889C797126B00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d61dab8e-cef2-32cd-a0ad-7aa934963164.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 21433
IP address blocks: 144.36.168.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 13 Aug 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:da:05:49:48:89:c7:97:12:6b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=264c7bd9-79ed-4089-a3bf-d98c4e98878d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:fa:b2:fe:e3:12:ca:8c:d4:dd:23:e7:04:fd:
23:04:21:c7:0c:dd:69:3c:88:ec:5b:9f:27:12:6b:
6f:b0:16:25:b5:21:51:d5:bb:4a:9d:4a:37:4f:e1:
34:86:d3:df:f1:ef:5a:13:c5:9c:57:66:93:ec:9c:
bd:ab:08:ff:98:92:44:db:a7:0e:20:3b:1b:8a:57:
e5:ef:24:71:cf:68:dc:e4:45:0c:94:18:72:5f:b8:
85:8d:c0:dc:e0:a5:66:23:3f:92:d9:eb:61:f1:40:
18:00:15:53:60:68:ef:98:9e:a4:ae:3f:1e:9b:64:
aa:46:fd:1e:02:e4:ec:d6:2e:db:a3:56:90:ef:0a:
16:79:39:dc:9d:e4:d6:90:4a:5e:78:c6:eb:a0:e1:
57:9d:74:b9:69:a6:63:59:0e:20:a7:29:2b:67:4c:
52:f4:30:ef:bc:18:4f:ca:64:06:06:a7:f7:72:73:
c1:d0:d3:0d:e2:29:f1:84:af:c2:84:d2:38:92:49:
52:1f:37:f0:b4:30:a5:66:c7:61:5a:06:d0:c0:09:
5c:6a:9e:5e:dd:2d:2b:1b:01:c6:25:de:4b:46:f4:
c1:bd:83:c3:3d:54:11:76:46:a3:03:8d:cf:64:08:
a6:77:ea:2e:e2:75:1d:d5:df:1d:a0:08:6a:e1:ca:
1a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:F0:72:11:AC:03:B7:7E:C9:F1:2F:31:56:99:F9:7A:07:BE:A5:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d61dab8e-cef2-32cd-a0ad-7aa934963164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
144.36.168.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7d:17:5a:2f:79:72:d2:47:a9:a7:38:45:b2:8d:64:3e:ae:ea:
bf:09:c6:a6:e9:92:51:e7:cd:82:5f:77:9e:f2:5b:50:20:7f:
20:ca:15:15:01:a0:85:09:4b:70:f3:38:d7:57:cb:12:bb:a1:
f4:80:c5:ba:ef:23:92:04:2c:51:c0:e7:55:28:09:4b:31:30:
fa:02:54:3a:4d:c5:5e:56:a0:b1:0a:0c:2a:ea:fd:d6:be:ca:
b1:da:28:e5:23:6c:d8:a8:d0:48:43:a4:0f:ee:9a:1d:ff:11:
ac:98:69:70:d4:08:3a:55:cf:36:cd:14:aa:57:c1:66:83:75:
b3:b2:7b:7d:72:cb:15:3c:c8:06:14:2b:33:bb:9a:f3:ef:87:
1b:2b:75:b2:f5:91:4c:b7:b8:90:8b:2b:7f:0d:27:2a:ae:7f:
04:67:a2:ed:bc:bf:0b:96:0f:73:d6:7c:55:6d:63:63:c6:5f:
2e:b5:b7:d6:83:90:ad:ae:64:a8:86:4c:64:51:2a:30:bd:ed:
5a:d8:53:e7:9d:4f:dd:fd:68:37:ef:ee:83:3a:ec:08:23:3d:
d5:75:b6:81:24:63:ff:89:de:b3:47:c6:4a:80:55:c9:2f:d9:
a0:1d:54:62:5e:6c:81:2d:2d:23:e6:40:28:44:49:45:ce:d6:
2a:eb:d4:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 11 17:12:40 2026 by rpki-client