
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/649c47d0-51b6-3d4c-9b6e-e1cf0d51cc9f.roa
File: 649c47d0-51b6-3d4c-9b6e-e1cf0d51cc9f.roa (raw, json)
Hash identifier: roA+fCD9wirsJBgSnXEF9lBQA5PIj2tSPHV8J9jSJmE=
Subject key identifier: 9D:AD:2D:AA:B4:8A:D1:D0:CD:37:00:E5:21:CA:D0:99:8C:A7:D9:C9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57461A8E8D857DE36BCDC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/649c47d0-51b6-3d4c-9b6e-e1cf0d51cc9f.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33660
IP address blocks: 67.172.224.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:46:1a:8e:8d:85:7d:e3:6b:cd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=9c86998e-b58d-4acc-9421-3800112a6d8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d2:78:83:38:42:0c:92:61:71:55:27:5b:fa:
c5:40:fe:ec:c7:95:bf:ef:23:67:e2:12:db:33:33:
6f:d1:fd:fa:c9:bb:8f:52:12:48:ca:af:a6:04:ec:
c9:38:f3:0b:f6:65:f3:73:ab:42:5a:2a:69:34:ee:
9d:d1:4b:d5:9f:3d:72:b6:ca:0d:0b:37:90:c6:99:
65:e6:85:7a:36:a4:02:60:a3:cc:d9:67:7a:bb:9b:
a4:a2:14:2c:88:38:d5:82:f1:cc:7d:40:bc:5c:61:
16:e6:bf:e5:c4:77:2e:d9:e3:5c:7e:78:77:00:d3:
59:56:e1:69:fb:e7:14:a8:8c:4b:b1:6a:5f:73:e5:
e1:24:a2:ac:06:44:10:6b:99:b5:3a:72:b6:f7:91:
a7:02:91:11:e4:f8:f2:a9:4e:74:a3:1e:61:4c:de:
9f:76:4f:5f:fb:40:b6:6f:b7:b2:0c:df:af:e1:bd:
69:3a:4d:ac:2d:14:6f:97:f8:44:fb:0b:b6:ae:15:
f6:5c:66:0f:d6:3d:b9:ea:50:25:23:45:f1:44:68:
7d:e6:e6:4e:16:d9:d8:93:08:7d:80:82:cf:d1:e6:
cc:35:99:97:7b:b4:a9:0d:69:82:00:d3:37:bf:44:
35:12:c2:5a:8f:fd:fa:5f:bd:8d:aa:27:33:f7:39:
6c:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:AD:2D:AA:B4:8A:D1:D0:CD:37:00:E5:21:CA:D0:99:8C:A7:D9:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/649c47d0-51b6-3d4c-9b6e-e1cf0d51cc9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.172.224.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:a0:cf:12:40:6e:56:fc:8c:ce:6e:de:d5:af:bc:55:c4:2c:
c9:8b:44:10:b2:9c:51:43:c2:77:7f:48:96:9b:cf:bd:5f:54:
a3:15:20:95:0c:7a:04:2e:33:0e:20:2c:18:99:e8:63:b5:fa:
4e:21:a1:3f:f6:e3:e3:7e:65:1c:23:6e:38:76:79:c1:7d:6e:
c9:44:4c:75:08:60:4c:4c:cd:6d:76:c4:a2:1f:d4:a6:27:3a:
03:00:e7:33:9f:87:d1:db:5a:a6:13:11:9d:ad:71:7f:1e:93:
ef:d2:a3:01:c8:96:ed:16:ba:59:7d:30:a4:b9:e7:3a:92:6e:
ee:02:43:29:35:82:5c:16:0a:25:7b:fc:0e:d8:dd:da:8f:3c:
59:ed:dc:4a:30:b0:b7:96:64:71:81:ca:51:e1:04:29:1e:e1:
ae:a9:a7:17:de:7e:b5:4f:42:a8:4a:cd:0b:cc:c1:b0:d0:b7:
67:fd:50:fc:1d:ce:71:6f:cf:f0:d3:ec:75:25:f3:08:ba:13:
dc:f5:eb:0e:b0:a0:82:2e:8c:53:11:ab:32:cf:60:85:fe:fa:
7e:91:8d:c1:3b:6d:af:01:9e:af:c0:bd:67:6f:93:3d:2c:aa:
c0:42:42:62:5e:ab:39:88:61:55:56:48:64:22:96:0b:4c:c6:
cb:c7:35:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:25 2026 by rpki-client