
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa
File: 33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa (raw, json)
Hash identifier: aJDsb2IJd2FOTrhEeQHNOGHNN9JtQ+v1HZ3DzJFLTWQ=
Subject key identifier: E1:4E:BF:BD:6C:5B:85:80:F9:FC:5D:8F:75:E6:28:15:EE:09:5D:DA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78CD92F5DA0EC80FCCA04A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33490
IP address blocks: 67.189.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8c:d9:2f:5d:a0:ec:80:fc:ca:04:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3a20fa4f-a35c-43b0-8e85-98e95b105288
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:0f:3b:fe:74:28:6b:d5:39:d6:c3:d8:cf:65:
91:c7:be:0b:e2:e8:cc:82:27:4a:7a:ae:de:73:0e:
7e:7d:4f:54:7d:cd:a2:a7:1f:61:b4:35:a2:35:a5:
b2:be:63:84:a8:0f:49:24:27:f7:b2:97:7f:36:34:
5b:f4:90:5a:65:28:38:54:92:93:f7:c0:f1:e2:00:
21:d3:03:fa:f8:c6:fb:f9:62:0c:66:de:7a:1e:9c:
c6:a3:8a:3d:e2:b0:f3:38:d2:67:06:70:25:7a:6d:
c7:f3:90:0a:16:57:df:37:80:1d:60:0b:7f:dd:36:
15:d3:1b:ac:82:05:39:fc:04:89:18:9a:00:c6:9a:
0c:11:d2:93:b3:bf:36:07:f5:bd:1e:69:44:92:fd:
8e:ef:d7:c5:eb:4c:6c:ab:c2:9b:b9:33:d5:32:37:
ed:0b:6c:64:85:8d:66:2a:0f:38:d4:09:4e:3e:0e:
df:07:01:07:50:23:96:ce:b3:be:70:5f:d9:9e:8e:
ce:eb:03:6c:11:36:97:8c:97:37:2a:1c:d9:ee:0d:
dd:7e:87:f0:42:76:dd:81:b9:94:d4:d6:f6:40:74:
d8:f7:64:56:b6:60:e5:84:74:fe:51:e1:ac:29:c0:
6e:81:ad:d9:86:e9:0f:7f:8c:db:2f:63:e2:be:b2:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:4E:BF:BD:6C:5B:85:80:F9:FC:5D:8F:75:E6:28:15:EE:09:5D:DA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33d43b71-2f0a-3d9e-891d-701b5c6c9c07.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.189.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:ef:3e:82:d5:2d:3d:b3:2f:e9:fb:bd:10:0e:7b:bc:6a:db:
c2:7f:34:2b:4d:af:51:56:b7:98:95:d3:8e:26:bb:58:27:c6:
74:f8:e5:75:f7:8f:d1:24:8f:8f:29:a6:36:51:9b:e0:1c:f5:
23:9e:23:fa:2e:b4:db:8a:53:22:51:04:23:8a:6e:45:f7:ab:
38:cc:0b:cc:52:2e:bd:a7:99:d2:f4:b9:fd:01:e9:0e:f4:95:
60:3c:ea:db:f6:0b:d3:fe:58:96:cb:b5:c3:c5:83:fb:50:a5:
f1:77:a0:70:3f:aa:52:e7:48:20:ba:36:81:85:56:17:7f:a8:
e7:df:ad:27:56:4d:9c:18:be:5f:c6:5e:0b:68:6d:b7:a3:55:
d0:33:6c:a2:80:54:de:52:a9:17:39:ae:90:20:f9:36:a2:14:
64:1c:ce:e9:8a:18:ff:ef:be:59:68:cd:ce:ae:9f:b4:d6:c2:
59:5d:5a:34:c6:ff:b5:26:5b:0b:00:1b:38:c7:98:52:7e:67:
5f:e8:d0:bf:69:04:5f:34:7a:dd:1e:87:44:85:01:88:d8:56:
f3:51:49:02:fe:29:1a:22:3e:68:2a:d2:95:e4:4b:05:60:35:
bb:36:6f:ce:e3:19:2b:9f:c4:f9:7a:58:06:26:29:17:7c:7d:
81:f3:4d:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 06:44:28 2026 by rpki-client