
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30a7e47c-c882-324c-aca7-a400618489e6.roa
File: 30a7e47c-c882-324c-aca7-a400618489e6.roa (raw, json)
Hash identifier: PYdHBWb417YREHaCbVS/b4BXtwl7LIik/uIYBHxzIE8=
Subject key identifier: 36:A7:5B:81:C9:04:71:0C:9E:5B:39:FE:F4:D2:D5:18:A2:1D:1F:5E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497A1D92897BA09A2277EE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30a7e47c-c882-324c-aca7-a400618489e6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33657
IP address blocks: 96.220.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:1d:92:89:7b:a0:9a:22:77:ee:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0a559926-3b3b-4c80-94ff-20c77a596c2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:ea:23:27:70:ed:a4:0f:38:24:ba:75:06:d7:
48:00:3b:48:6c:e6:d3:f6:90:cb:d4:6d:3c:92:b2:
69:87:a4:c8:3b:39:12:04:b3:5c:54:91:7d:87:ae:
1f:b2:d8:e9:56:eb:c0:63:65:c8:3a:6d:b7:d2:8b:
57:48:cd:39:f8:62:9c:4c:05:56:6c:74:22:53:84:
f3:90:b7:50:5d:af:bd:6e:e8:e8:83:99:fb:a7:07:
34:bb:a6:1f:6b:cc:01:c8:38:8c:cd:07:e2:02:43:
26:36:1a:4b:cb:a2:ce:f7:9a:74:44:18:5d:3d:b6:
26:87:50:db:82:09:83:e1:d8:be:25:de:09:38:a8:
c3:fc:ce:9c:f4:fe:ae:39:c6:43:2c:1f:7e:35:f1:
0c:cf:7d:dc:63:d0:e8:47:b6:7d:73:24:3d:7b:3c:
dd:99:c6:d9:db:60:fa:8c:b1:7c:cd:0c:b1:da:5b:
96:1c:f7:d4:7d:6a:e1:02:23:fb:17:e4:da:ea:ce:
8f:33:e0:62:19:68:f2:01:3f:32:76:d3:d3:0d:29:
42:ad:9c:10:ad:d5:79:98:ee:53:f1:f9:67:87:26:
74:82:6e:1f:2f:46:f6:30:b6:5c:03:3a:ae:bd:3a:
b6:77:71:dd:ba:63:ad:d3:61:7b:3e:0e:e5:f2:8c:
dc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A7:5B:81:C9:04:71:0C:9E:5B:39:FE:F4:D2:D5:18:A2:1D:1F:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/30a7e47c-c882-324c-aca7-a400618489e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.220.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:44:09:65:9c:8d:b0:e4:40:24:0c:f2:65:46:7f:e9:48:50:
10:fa:54:2b:df:26:d2:dd:7c:31:7b:d5:cc:d9:f2:6e:b0:d7:
7d:3c:61:03:41:f3:35:8b:1d:a7:2a:dc:ba:4f:61:8d:15:d3:
4f:5f:71:4c:c7:37:f1:01:26:51:d5:ab:6c:7e:1f:e2:06:2d:
78:9c:0d:05:fc:dc:f5:d1:41:7a:84:1b:bc:c3:83:9e:8e:35:
5e:f5:69:25:bd:7c:d1:68:88:9c:ac:06:1c:61:cd:5f:81:15:
df:c7:2c:8b:7c:2f:14:8c:34:40:28:af:c7:0d:fb:27:13:a0:
6b:59:06:f6:ef:35:56:bf:c9:0c:11:bc:56:75:8b:1f:8c:a6:
1c:60:d2:07:55:5a:eb:49:a1:f9:22:8e:fe:16:da:b1:12:f3:
ad:39:35:c9:fa:9c:b0:eb:22:fe:21:6f:36:2a:80:5a:3e:74:
06:84:ea:d2:0b:33:0a:74:a0:6c:3e:3f:62:e4:b0:05:59:65:
33:04:16:04:95:35:07:09:0a:ee:17:14:93:31:9a:84:3d:ed:
41:5b:ab:83:d8:6b:d8:86:47:c7:c7:a7:aa:28:eb:dd:89:2c:
d3:2b:9c:70:c8:b4:74:5c:88:0d:1b:94:af:bb:1d:b8:7b:57:
7e:e5:d0:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:53:16 2026 by rpki-client