
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c9b8acf-693b-36e2-9fd9-69bc9026ebc8.roa
File: 4c9b8acf-693b-36e2-9fd9-69bc9026ebc8.roa (raw, json)
Hash identifier: m6TnRto7qrS4K0LYBcIR6t1uIKNXIN8d46envsNKSz8=
Subject key identifier: 07:64:DC:F2:BA:AE:25:2C:E8:AE:80:18:75:0A:6D:69:2D:3B:9A:B1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E7DECAFAB58EB2F03FA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c9b8acf-693b-36e2-9fd9-69bc9026ebc8.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33660
IP address blocks: 67.166.122.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:7d:ec:af:ab:58:eb:2f:03:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=c0a80b74-2614-4f4d-88e5-4727744d6f33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:3c:c6:02:e8:60:24:c3:de:80:be:1c:73:28:
cc:42:cc:6a:7c:ca:e9:ce:87:1e:32:9a:b9:33:4d:
3f:ce:f3:df:a0:4c:48:95:21:58:be:db:33:df:5f:
1c:ae:ce:84:dc:d4:d1:99:c1:80:e6:ad:aa:b6:13:
67:1d:0a:3e:e2:f8:ae:65:0f:bc:ec:16:58:13:69:
04:27:77:e0:75:dc:e7:7a:f8:bd:79:4b:b6:29:f3:
3c:e9:a2:d6:55:a2:73:1e:30:d0:0f:af:34:6c:1e:
71:12:0c:cf:19:ea:86:5e:ba:37:dc:78:34:73:67:
21:f1:48:4a:54:a7:20:72:2a:6d:f7:86:31:df:0c:
db:ee:2a:34:48:30:29:d1:7d:dc:68:2f:73:4a:cb:
28:6f:32:0e:d0:59:d4:74:62:62:c1:df:ad:39:aa:
cf:e3:24:ce:fd:58:dd:31:27:e4:58:da:3d:a4:bc:
c2:02:ea:a7:3d:04:bf:7e:38:6c:23:18:2f:da:a6:
5f:52:db:19:e1:38:28:1a:a1:d6:f4:74:0d:f9:8d:
a5:74:5a:ee:df:f9:b5:51:fa:3c:45:29:c0:8f:d5:
96:52:c7:f6:03:f9:0b:dd:bb:cd:69:c6:b8:f1:9a:
7a:8c:8f:b5:3c:9b:b9:8e:3a:67:6c:07:4c:b6:53:
3e:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:64:DC:F2:BA:AE:25:2C:E8:AE:80:18:75:0A:6D:69:2D:3B:9A:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4c9b8acf-693b-36e2-9fd9-69bc9026ebc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.166.122.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:fb:c8:69:40:98:26:5b:15:e9:00:4f:0e:57:6d:6d:0a:19:
e1:d8:70:e6:d3:72:9c:c8:ae:71:55:87:73:32:be:28:2b:fb:
7f:a9:f5:7d:e4:a4:1a:0e:ff:da:69:89:51:88:15:39:de:1a:
f0:b4:65:ab:0f:92:1d:e6:1c:d8:e2:bc:41:c7:24:73:7c:be:
2b:e1:e4:55:a4:9d:07:55:ba:6e:52:3c:b3:70:ed:cb:2d:b6:
5a:7e:1c:93:2d:56:34:05:b1:6e:b3:a2:ea:d9:98:96:20:f1:
68:42:74:56:2d:c7:bb:ba:85:46:b8:82:c2:68:17:0e:b4:bc:
00:71:71:bc:f0:6f:51:26:3f:57:bd:04:28:a3:0f:9d:35:80:
11:6b:38:26:bd:50:b5:58:c0:bc:d0:41:e4:91:b2:90:22:83:
c7:38:15:d8:68:20:25:02:3e:ba:58:89:32:1c:64:e4:90:f6:
0b:d6:19:63:1e:22:f4:fe:27:ef:49:d9:41:9b:ea:d1:8f:b0:
6d:bd:2f:af:0f:df:18:c4:2a:a5:91:82:5b:c0:f9:5c:09:c3:
dd:68:c2:2b:96:90:c7:d9:2f:7d:fe:1b:2d:33:b6:b3:23:fd:
7d:69:0e:f1:54:92:24:b7:6a:40:67:cd:34:79:47:8d:0d:87:
33:43:1d:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rnn3sr6tY6y8D+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzBhODBiNzQtMjYxNC00ZjRkLTg4ZTUtNDcyNzc0NGQ2ZjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArDzGAuhgJMPegL4ccyjMQsxqfMrpzoceMpq5
M00/zvPfoExIlSFYvtsz318crs6E3NTRmcGA5q2qthNnHQo+4viuZQ+87BZYE2kE
J3fgddznevi9eUu2KfM86aLWVaJzHjDQD680bB5xEgzPGeqGXro33Hg0c2ch8UhK
VKcgcipt94Yx3wzb7io0SDAp0X3caC9zSssobzIO0FnUdGJiwd+tOarP4yTO/Vjd
MSfkWNo9pLzCAuqnPQS/fjhsIxgv2qZfUtsZ4TgoGqHW9HQN+Y2ldFru3/m1Ufo8
RSnAj9WWUsf2A/kL3bvNaca48Zp6jI+1PJu5jjpnbAdMtlM+jQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAdk3PK6riUs6K6AGHUKbWktO5qxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGM5YjhhY2YtNjkzYi0z
NmUyLTlmZDktNjliYzkwMjZlYmM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQ6Z6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEb7yGlAmCZbFekATw5XbW0KGeHYcObTcpzIrnFVh3Myvigr+3+p9X3k
pBoO/9ppiVGIFTneGvC0ZasPkh3mHNjivEHHJHN8vivh5FWknQdVum5SPLNw7cst
tlp+HJMtVjQFsW6zourZmJYg8WhCdFYtx7u6hUa4gsJoFw60vABxcbzwb1EmP1e9
BCijD501gBFrOCa9ULVYwLzQQeSRspAig8c4FdhoICUCPrpYiTIcZOSQ9gvWGWMe
IvT+J+9J2UGb6tGPsG29L68P3xjEKqWRglvA+VwJw91owiuWkMfZL33+Gy0ztrMj
/X1pDvFUkiS3akBnzTR5R40NhzNDHTg=
-----END CERTIFICATE-----
Generated at Thu Sep 24 20:29:32 2026 by rpki-client