
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d8abba7f-d028-3fbe-8735-d8b6732ea1e3.roa
File: d8abba7f-d028-3fbe-8735-d8b6732ea1e3.roa (raw, json)
Hash identifier: WsRxC9YxTZ5pI8WqSgRdm+ZOUXWJBWwpYmIink9H4rU=
Subject key identifier: 81:FA:B0:92:7F:04:87:C5:17:25:B3:79:23:25:78:65:A9:23:A1:B5
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584F68F09158C167E28E06B72F00
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d8abba7f-d028-3fbe-8735-d8b6732ea1e3.roa
Signing time: Tue 06 Oct 2026 07:44:14 +0000
ROA not before: Tue 06 Oct 2026 07:44:14 +0000
ROA not after: Mon 04 Jan 2027 08:44:14 +0000
asID: 21433
IP address blocks: 170.251.49.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:68:f0:91:58:c1:67:e2:8e:06:b7:2f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Oct 6 07:44:14 2026 GMT
Not After : Jan 4 08:44:14 2027 GMT
Subject: CN=3d74ecf6-37d7-43da-b525-6d9d72f79601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b3:05:1b:38:ff:b3:04:63:6c:5d:48:f9:c2:
06:a3:87:fb:26:20:d3:d8:a1:85:1c:ca:97:44:de:
85:c4:46:9a:80:0c:5b:95:00:0e:5b:fe:58:47:1d:
93:6e:65:5c:f0:30:81:a8:60:9d:a2:56:36:1e:61:
a2:2a:05:29:03:03:33:24:54:65:d6:1f:c5:e5:6d:
2a:0c:49:fe:13:3f:5e:f4:10:87:a8:28:03:20:7f:
dc:d9:bd:8b:d1:f0:2d:01:c3:71:29:dd:bd:3d:af:
8a:12:2a:4b:44:9a:b7:6e:21:d3:9a:33:09:9d:77:
a7:18:81:a4:5e:74:2c:8c:de:14:2a:ec:ec:73:5e:
fc:34:93:33:7d:cd:60:2e:f5:b8:87:ea:32:ab:2e:
17:30:60:8f:69:21:75:71:54:9d:37:98:70:8a:39:
15:ee:63:1b:aa:60:81:66:06:24:ec:59:1d:44:8f:
f9:83:e1:18:e1:50:ec:17:12:f5:12:51:4a:6e:59:
d2:ae:54:d9:ef:42:4f:51:64:0b:0c:bf:4f:b5:58:
e9:d0:df:1c:7a:53:27:25:6d:33:28:33:fd:9f:0f:
16:5a:01:27:e5:41:d7:88:95:f9:c4:2b:25:5b:de:
31:5b:e2:95:1b:62:a8:d8:37:e5:ca:c7:84:67:cf:
0f:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FA:B0:92:7F:04:87:C5:17:25:B3:79:23:25:78:65:A9:23:A1:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/d8abba7f-d028-3fbe-8735-d8b6732ea1e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.251.49.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:17:59:89:32:cb:33:73:71:29:94:a1:79:11:c0:5c:1e:20:
52:85:94:a3:7e:1c:df:ff:56:06:8a:f4:f9:a5:ee:d1:fe:70:
f2:fe:21:72:d3:7e:2b:3d:88:41:5b:08:b3:fe:83:79:5d:d0:
5a:7c:69:3e:65:0f:96:dc:a1:27:70:16:0f:80:42:ca:70:2c:
03:7d:3a:fd:51:06:9b:8d:4e:56:b4:1b:2a:09:aa:7e:57:3f:
e3:6c:85:71:69:68:25:f6:73:66:9e:0c:c9:36:3d:f3:b5:7a:
28:16:50:3a:e7:68:d2:8b:07:3f:e8:dd:3d:8d:2f:d7:47:36:
91:6a:13:1a:09:c1:1b:e7:23:c1:c8:94:f9:ce:e9:91:8c:01:
9b:ff:f2:b4:27:03:fe:05:7f:10:9f:f9:f3:b7:4c:18:7a:65:
cf:e7:0e:fb:00:c9:53:84:22:f5:f6:b5:2d:96:08:cb:8d:b4:
3e:ad:ed:f5:47:ac:3f:f4:51:92:35:e6:23:cd:21:73:a3:c3:
b6:17:63:e6:24:b4:8d:60:29:78:2f:61:af:43:87:47:e4:0d:
fd:98:5d:ed:2d:11:da:1b:e4:ee:02:6c:fc:0e:d8:d1:d2:4e:
38:7b:1d:34:73:ac:e8:1d:c1:30:69:c2:9c:11:4d:ce:a3:06:
8e:08:e9:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 19:17:51 2026 by rpki-client