
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa
File: 3afc778c-fe91-3470-95c6-7fc9caadde5f.roa (raw, json)
Hash identifier: DwskBFBYMLqCP2e8PjzlIPUkscwgAjWFCe/pjMxj+6E=
Subject key identifier: F7:58:4F:A5:EA:C2:84:9D:0D:76:46:8B:10:AC:EF:78:0B:FE:6E:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E35A8EEB4F32FD0BC2A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 67.188.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:35:a8:ee:b4:f3:2f:d0:bc:2a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=590373bb-ca02-46e1-9637-f53386c76ef0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:03:8c:43:f3:fd:f6:f1:bd:ee:88:61:6c:
31:16:a6:a7:e6:02:7c:ea:16:f0:c6:ce:2b:ee:d7:
0c:5b:ce:93:01:74:cf:ec:45:21:20:4f:d8:20:1e:
86:e5:fa:65:16:48:77:cf:32:07:bb:87:9a:a2:2a:
7d:f7:c7:07:42:69:94:51:ca:45:f5:51:d9:f1:24:
38:46:61:aa:a2:8e:f9:2e:b7:98:bf:b1:ee:65:bc:
eb:2e:08:44:af:f6:c0:f5:1c:c5:ed:ae:f1:c5:0c:
be:41:9f:61:84:6e:2a:ee:69:eb:5d:ca:37:1b:ac:
aa:42:a8:f4:13:66:6a:f0:99:5e:7a:db:06:83:d5:
f4:13:06:21:ca:ba:17:db:54:79:20:dc:c0:79:d4:
76:d3:16:88:1f:c3:43:93:d3:76:37:12:2c:f2:24:
70:7d:be:ec:3d:8e:b0:22:33:ef:fb:d8:83:5c:41:
16:da:f0:7d:39:1b:7d:a6:28:99:42:09:37:f3:df:
41:09:31:d6:60:3b:36:94:e3:7b:ce:20:bf:45:ed:
2e:81:87:f6:eb:61:53:b2:c4:c5:29:3d:5f:aa:7b:
e7:52:f7:6f:3a:0a:66:7d:40:75:22:13:91:c3:8c:
ff:79:93:55:ef:96:d8:d9:21:82:8c:68:ef:4c:e7:
f5:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:58:4F:A5:EA:C2:84:9D:0D:76:46:8B:10:AC:EF:78:0B:FE:6E:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3afc778c-fe91-3470-95c6-7fc9caadde5f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.188.160.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:a0:97:6a:28:ba:58:ed:90:5d:dd:2c:18:c6:47:39:fb:7a:
e3:cb:04:4f:89:33:44:80:69:d3:88:c0:31:28:ca:96:6f:86:
0f:f9:3a:95:cf:4c:db:7a:2f:0e:07:08:68:31:df:d8:2c:25:
94:fe:e8:98:ae:b7:43:55:80:a2:3b:3b:21:54:ac:dc:6c:04:
e9:91:1c:a0:92:99:6b:c4:fb:ba:25:25:48:32:e3:3f:83:5c:
82:d7:74:53:96:e0:a9:30:f5:39:14:e1:78:c0:01:9a:dd:3c:
ac:99:7a:88:a8:a1:38:f0:bb:28:19:26:48:cb:ff:9f:c5:ef:
7b:25:8a:44:95:5c:53:30:46:2c:f4:e4:14:7c:a2:4e:ca:bd:
c8:d3:a8:5f:3f:75:9d:3b:a6:32:19:05:9e:6c:33:02:df:76:
47:01:62:42:45:b8:36:b0:b2:ee:09:a2:15:7a:98:03:6e:27:
08:11:b7:aa:75:b4:2c:02:84:39:f5:4c:19:8f:d2:ae:34:1d:
b0:df:b1:86:ea:1c:4e:15:34:90:f7:43:1e:61:f3:d4:da:f1:
49:01:86:54:d5:ef:ba:dd:75:b9:ea:a8:68:c8:4f:46:ce:41:
b9:7b:ce:b1:1e:4a:36:8f:de:e6:36:62:e2:4e:e5:46:29:6f:
b2:aa:38:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 09:58:15 2026 by rpki-client