
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfc3288-7489-335b-99cc-2d2468401e68.roa
File: 6bfc3288-7489-335b-99cc-2d2468401e68.roa (raw, json)
Hash identifier: 6DpHHjK5pBunCWmuWX2EZ4PwCJ7KcMr3gplIP9XecBg=
Subject key identifier: CD:2C:6A:80:60:88:27:D1:B5:77:BF:6D:5E:C1:E6:7A:E1:4D:71:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E337B19E537F869FD1CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfc3288-7489-335b-99cc-2d2468401e68.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 67.174.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:33:7b:19:e5:37:f8:69:fd:1c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=299fee01-2302-495c-9ccf-bf7b1a69e1d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:80:d8:49:1a:1f:a4:78:17:11:61:eb:11:02:
b0:07:ec:40:10:17:78:d7:cc:3e:44:4a:4f:6e:ef:
6f:13:e8:b5:ee:43:22:43:02:62:8c:99:1a:8f:8f:
ad:69:a8:f1:c4:e3:ed:8c:25:34:89:c7:85:11:25:
4e:e2:3b:42:f4:79:be:4c:e3:c9:39:44:1a:5e:90:
51:27:ca:6f:81:a8:54:75:d1:48:29:fc:ad:71:d6:
c8:57:f4:06:7e:4f:61:7b:0a:8b:39:18:1c:3d:89:
8c:15:c4:87:e2:ee:d6:f5:18:17:38:18:57:71:0f:
13:f9:fb:1c:49:7f:b7:1c:93:7f:9b:31:62:08:9c:
ce:39:65:a2:e2:da:08:b7:c5:16:57:75:31:67:97:
19:6f:77:50:c9:99:12:a5:b9:49:19:87:6c:bf:20:
c5:48:78:fa:70:9c:1f:d0:20:53:6d:02:a5:e3:d3:
cf:50:c3:79:e7:a9:10:95:30:33:60:b7:e6:e7:39:
91:d3:35:21:0e:5f:83:df:93:b4:63:d2:e8:f5:9b:
38:73:4e:a5:16:fe:6c:a3:54:99:68:f3:85:8f:af:
f9:44:c0:31:67:bc:08:62:64:a1:25:55:25:5d:7f:
b8:c4:b6:7c:c8:78:a9:e0:6b:3e:31:01:5d:d1:69:
a1:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:2C:6A:80:60:88:27:D1:B5:77:BF:6D:5E:C1:E6:7A:E1:4D:71:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6bfc3288-7489-335b-99cc-2d2468401e68.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.174.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
31:a2:0c:6f:27:6e:40:63:48:cb:05:45:a0:86:3e:5b:9f:f9:
24:27:ed:cc:95:42:f7:3f:c9:c7:62:72:94:dd:83:e3:ce:c3:
b1:b5:bf:85:f2:e2:a4:6e:9e:c0:01:12:b5:f5:12:48:88:6b:
80:0e:a8:07:a8:43:36:25:10:6e:70:08:ea:ef:74:ae:79:78:
d8:b8:1f:2c:44:3f:37:e4:78:ec:68:09:3b:fe:88:c4:78:14:
a1:1b:f8:d2:1d:dd:7d:d8:43:0e:2f:1a:46:ae:35:71:6c:20:
d7:93:66:e6:bc:c7:c0:fc:aa:26:f6:42:e2:82:73:dd:48:29:
95:e7:f5:61:c6:92:30:f3:24:52:40:58:85:60:16:a9:eb:2b:
f6:3f:93:54:88:a2:f2:1f:ad:84:09:90:dc:54:b5:a0:a3:34:
e0:8c:5e:fa:57:e9:a7:b9:36:47:d2:3d:a2:a2:c3:67:c7:2d:
90:58:b2:5a:09:d6:2a:15:6d:59:ec:73:4c:9e:8d:76:9c:15:
c1:96:37:a7:73:7a:dd:4e:11:35:d3:d5:63:91:f9:8b:0e:8b:
01:0e:75:4e:8e:81:4d:85:ce:d2:2f:16:bb:09:eb:e2:a4:9e:
11:b6:52:54:9c:91:fd:30:80:be:df:6f:a5:c8:62:bc:70:58:
c4:d1:0b:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:56:10 2026 by rpki-client