
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db97692-9c73-3e2f-b09a-186d505faec7.roa
File: 3db97692-9c73-3e2f-b09a-186d505faec7.roa (raw, json)
Hash identifier: e9OuFo7BtIGqfArHNjh9CeZwANtB48VBV1nnDiLWHg8=
Subject key identifier: E1:69:89:BD:B9:CB:0A:95:E1:C0:38:94:B4:5A:DB:CC:0F:BA:1C:E0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119ED43F6A2336E4885456C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db97692-9c73-3e2f-b09a-186d505faec7.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 69.253.210.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:d4:3f:6a:23:36:e4:88:54:56:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=37ef58d5-8ab7-4a4a-9147-b8e62d086dad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:cb:50:aa:b5:d7:d8:0c:9d:1e:57:1e:e6:ce:
36:db:1a:64:88:96:d0:51:7b:13:31:19:86:72:b5:
23:cf:6f:3f:a0:ea:d1:ad:bd:0f:6e:9a:b7:39:d4:
30:7b:b8:e5:53:ae:a1:8d:99:9c:9b:be:72:aa:6d:
12:7d:e9:2d:4b:2a:40:54:78:16:c3:9a:b7:64:9e:
97:37:ee:f8:0f:06:df:8c:5d:15:e5:f7:ea:e8:a6:
d8:d2:91:eb:bf:2a:f9:d1:22:ee:87:a0:00:b9:16:
e6:0e:3a:c1:50:55:26:45:7d:4e:10:82:03:12:42:
7b:ea:00:3c:e3:1a:cb:d0:51:ee:6a:90:ad:1f:a2:
f0:b3:cd:99:06:6b:ca:82:b2:71:b6:6a:1c:8b:ef:
44:3a:0c:3f:9d:0d:5a:d6:d5:a1:29:27:a4:78:66:
56:b0:2c:19:ed:af:00:ae:55:5e:3e:2e:5b:3d:d6:
77:f1:53:7a:b0:14:2b:e3:6d:7f:33:49:e0:4d:58:
d8:03:35:eb:a6:d6:8a:9d:a5:55:3a:84:8d:4f:5c:
da:b5:e7:74:16:d0:6d:74:d8:85:e9:b8:9a:c5:af:
d1:72:73:29:ab:4a:a8:f6:92:86:b5:b2:32:65:12:
63:fd:20:88:7a:53:14:8b:9d:9b:25:69:87:10:51:
77:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:69:89:BD:B9:CB:0A:95:E1:C0:38:94:B4:5A:DB:CC:0F:BA:1C:E0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3db97692-9c73-3e2f-b09a-186d505faec7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.253.210.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:b4:26:0f:21:d9:f7:2e:fa:63:e3:78:42:ce:68:19:e8:58:
f3:2f:94:aa:48:1c:55:a4:b2:d1:b6:dd:f8:6b:60:ca:7a:85:
c8:17:26:7e:6f:b7:df:e4:91:ec:1d:cf:ed:21:62:35:38:be:
fb:0d:ae:0c:57:55:c2:4b:40:e0:96:d2:a6:07:99:b0:a6:83:
12:6a:c3:d0:de:8d:9b:8a:a8:25:19:d8:2d:c6:e8:3a:62:66:
b2:10:07:70:9a:98:ad:81:e3:02:6f:16:12:6b:fb:83:1d:a8:
6e:aa:98:4a:dc:75:9d:dc:22:c5:41:6f:f3:86:4a:f4:a0:3b:
ee:35:ad:e0:ed:46:e6:fa:65:eb:4d:4d:12:7b:e1:37:81:81:
d6:ec:2d:dc:e2:6b:53:c4:7d:9b:3c:d0:45:22:33:fe:81:ea:
ad:c1:57:5c:57:4e:1c:cb:3c:5c:19:47:1e:b0:59:5a:a2:e4:
e8:23:83:1e:82:e5:86:be:05:09:42:a1:e8:3c:d3:05:12:87:
8f:2f:31:fb:14:fc:8b:a1:b9:32:63:4e:2c:22:b5:a2:ef:d8:
04:2e:08:38:fb:1c:90:c0:ff:53:37:35:22:4c:bc:3f:d0:09:
f5:a4:da:63:ac:76:b0:8d:00:41:83:00:80:23:42:c1:43:35:
9e:09:eb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:41:44 2026 by rpki-client