
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b76a28-12dc-3968-a3e1-b214faf2e245.roa
File: 20b76a28-12dc-3968-a3e1-b214faf2e245.roa (raw, json)
Hash identifier: MJ+ZcsygDfj12VNyA9PRDUMho3YTA3Vll05uQV1d+QY=
Subject key identifier: BA:9B:83:E5:6D:5A:E7:89:CB:F2:A5:A4:28:22:89:36:FF:3A:FC:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED8640471D5701F1D3AE69D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b76a28-12dc-3968-a3e1-b214faf2e245.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33662
IP address blocks: 174.170.144.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:64:04:71:d5:70:1f:1d:3a:e6:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=b4b195e1-9c14-4627-8aa6-925a538c19fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:ad:16:fa:c1:00:ea:ae:8a:d4:8c:6e:20:bd:
56:12:59:04:76:19:91:a4:23:36:a9:cd:2c:05:77:
6e:bf:23:1e:59:c3:11:68:9a:9f:fb:64:94:55:6b:
0a:06:fa:c3:c9:77:fb:8e:d6:17:0e:6f:af:c8:b5:
97:ce:7e:7a:a4:0b:9e:9b:78:e6:03:2a:88:56:d6:
3a:a2:61:8c:5a:f1:11:3c:b0:10:5e:50:39:a5:43:
90:84:e8:8c:a4:8b:4f:b4:27:2b:ee:97:6b:6d:db:
2a:46:98:ec:ea:8f:cc:50:d7:2a:82:b2:cc:ed:62:
37:13:69:f1:bc:3f:03:d4:f2:b9:3f:79:c1:35:6d:
98:17:36:51:05:86:72:b8:3e:60:1e:e2:98:db:2d:
4f:b4:19:5c:ab:11:5c:63:b5:64:e9:8c:f0:97:a9:
57:ba:83:29:c4:60:a9:95:19:64:34:ed:7a:8c:5d:
8c:b0:c3:38:aa:98:c5:89:b5:45:00:00:2b:23:ba:
71:82:49:ef:f8:f6:de:f0:4a:2e:b0:82:0e:d3:9b:
02:fd:23:07:17:50:8f:4c:1c:f1:8b:0c:cb:ed:19:
fb:c9:be:dc:5d:65:5f:72:0f:57:b9:a7:a3:e1:6a:
1d:52:2f:c4:0d:2a:0b:2c:00:c2:fa:af:a2:d5:9a:
79:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:9B:83:E5:6D:5A:E7:89:CB:F2:A5:A4:28:22:89:36:FF:3A:FC:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/20b76a28-12dc-3968-a3e1-b214faf2e245.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.144.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:8e:cc:79:e0:64:ab:34:51:22:e2:73:99:4a:7f:81:2b:81:
9b:a8:78:17:e8:3a:73:6c:48:e1:c9:2e:41:5c:0f:34:d6:c7:
e8:a2:6b:8b:d5:f4:bb:4d:89:26:ee:48:77:38:19:97:a9:b9:
b3:02:c4:b1:89:e1:2c:6f:06:50:bb:97:3c:03:15:a0:85:c5:
8b:d1:04:94:e1:c3:26:de:f5:61:50:7f:7a:8a:45:ce:ba:f3:
8d:81:c2:0f:72:34:f8:71:42:ea:c7:56:d1:b7:1c:8e:b8:c5:
2d:4d:6b:42:30:aa:81:e0:b8:0b:79:2f:b7:fc:40:6d:6c:ee:
fd:6c:39:b2:5c:8a:14:e0:97:4f:93:37:f9:1c:04:d9:6c:52:
57:ec:5b:55:93:58:0e:b5:09:06:24:fe:54:7e:76:35:f4:e5:
c7:2a:29:34:52:66:48:ce:f6:e4:78:68:70:23:38:aa:ce:cc:
f1:9d:8c:7b:ad:b6:0f:4a:25:a7:e0:69:43:b1:23:0f:ac:b7:
d2:aa:67:1e:35:65:34:a4:97:42:91:f1:f4:ba:ef:3c:2a:92:
6b:e9:90:fa:0e:c1:cf:59:25:14:fb:c6:53:60:f8:fe:d0:dd:
72:0e:18:24:95:e2:22:83:d3:97:b6:68:40:94:79:3f:88:b9:
31:d4:4f:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 07:25:29 2026 by rpki-client