
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa
File: e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa (raw, json)
Hash identifier: zP6ZhPMZlGvVT+GpyLzmpRFyTpgIyUuEWjQkMYisDx4=
Subject key identifier: A6:D2:29:97:62:1F:60:BD:06:12:68:1B:0A:61:AC:2D:C8:CC:08:B9
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584F66C2BC8D0EE92924D5358E18
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa
Signing time: Mon 05 Oct 2026 13:00:13 +0000
ROA not before: Mon 05 Oct 2026 13:00:13 +0000
ROA not after: Sun 03 Jan 2027 14:00:13 +0000
asID: 21433
IP address blocks: 170.248.218.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:66:c2:bc:8d:0e:e9:29:24:d5:35:8e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Oct 5 13:00:13 2026 GMT
Not After : Jan 3 14:00:13 2027 GMT
Subject: CN=ffda248c-e39f-4fc3-9d96-1b63d5463636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:6e:94:3e:34:63:46:50:da:e4:a6:96:d1:
04:05:bd:f4:bd:83:77:d8:0d:71:13:8b:ed:f3:69:
c6:79:a3:f7:19:5e:8e:39:91:f0:ca:a9:18:b7:14:
89:30:dc:41:4f:1d:c2:e0:8f:ee:d6:ae:e3:50:84:
9e:8a:59:7f:98:c0:b0:5d:b1:2a:54:cd:97:f8:35:
bb:0b:52:93:14:43:2f:f6:3e:99:33:72:88:1a:78:
17:54:1c:80:3f:21:50:62:d6:95:f0:48:87:47:aa:
d4:04:e8:b3:55:e9:58:04:67:b7:07:ef:47:c5:0e:
76:05:a9:63:73:d7:11:b6:21:c2:a2:8f:3f:94:0a:
56:df:d0:2f:b8:ed:2c:51:9f:09:13:4f:0d:85:ce:
72:92:2b:38:dc:64:9f:21:6f:25:c2:59:6f:bb:a2:
23:c8:6f:aa:91:a9:d0:ed:80:79:a5:dd:cf:58:2a:
6f:cb:ce:be:31:f2:68:53:f2:73:c6:9c:b6:bd:a1:
75:54:30:3f:6a:9d:79:ba:09:63:15:9b:57:6f:c9:
9a:33:b3:37:9d:76:65:f8:55:45:40:c5:06:d7:38:
b5:7e:a9:bf:ec:e7:5a:92:8f:ef:ad:6b:45:19:be:
55:01:90:22:31:5f:c1:62:13:20:64:3c:3a:20:6c:
ce:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:D2:29:97:62:1F:60:BD:06:12:68:1B:0A:61:AC:2D:C8:CC:08:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/e5b4c3b4-8392-3c96-b1fd-e61dcad1c147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.248.218.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:63:f3:e4:5f:15:4c:24:c7:12:78:9e:b0:60:75:64:8c:c0:
39:20:e1:b4:73:cb:34:05:5d:32:e6:4c:0a:07:d5:6c:26:a3:
8a:22:d7:d9:f0:70:cd:75:d9:b3:10:e6:ec:8d:b4:d2:6e:74:
63:a6:f5:dc:8d:2d:91:c8:00:7d:10:a8:ac:17:69:4d:c5:ae:
f2:6d:40:62:73:69:ee:79:58:61:6a:47:65:4d:2e:93:0d:a0:
35:1a:b4:24:58:ab:bb:af:c1:76:9e:a4:f9:b7:4a:9c:3d:11:
cb:7e:b4:f7:17:62:f0:9a:12:81:89:fe:ef:79:ad:dc:46:93:
3c:6e:65:c1:ae:ef:06:f5:94:ba:90:91:69:60:5c:ea:5f:27:
10:01:7b:6b:d3:ff:2c:fd:89:e8:0b:f7:36:95:ad:dc:68:bb:
96:fa:c3:5f:c8:b5:54:56:50:39:ae:d4:70:cf:08:5a:bc:ca:
89:f0:35:22:d4:20:59:3f:a3:5e:0c:32:a2:9f:47:6b:df:e1:
d1:aa:81:72:c0:a7:c6:95:ba:59:5c:74:75:25:66:43:b3:3c:
41:17:33:22:71:0b:6e:df:1c:73:bd:f5:be:25:08:0d:16:dd:
7b:4e:6f:50:15:e7:4a:3f:69:6c:38:4a:4d:0a:91:d0:4e:85:
11:01:b8:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 22:52:44 2026 by rpki-client