
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84e65b14-5aee-3d74-8293-b09943587e4e.roa
File: 84e65b14-5aee-3d74-8293-b09943587e4e.roa (raw, json)
Hash identifier: XaRoWDJbfSN+FdEBrXMPDd9UF4lnanRBAksDZeTVbC4=
Subject key identifier: F2:1D:7E:06:6C:3D:0D:A9:C6:ED:F5:E7:63:62:D6:71:51:34:83:06
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA7892076AD694AE6BBA63540
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84e65b14-5aee-3d74-8293-b09943587e4e.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 7725
IP address blocks: 70.89.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:89:20:76:ad:69:4a:e6:bb:a6:35:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=25ecf8fa-2c93-46a4-a3bc-f0f7f700ff7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:e1:98:40:b3:ee:c3:f2:1e:de:af:80:d7:
dc:fe:4d:d3:ee:8f:63:e4:31:c2:65:ec:40:8c:72:
55:6a:9b:7a:07:49:d1:4a:1f:d4:93:b6:fd:7d:ea:
79:ab:68:10:8c:66:65:25:ec:68:7c:97:0f:87:f4:
26:fd:e4:7a:ec:2e:79:b3:2f:e9:1e:22:7d:32:e9:
51:f0:4a:1b:35:0c:ec:ae:97:6a:cf:e3:0d:4d:c6:
dc:ca:ec:f8:f4:3b:bc:f4:6a:f3:e2:80:1e:f3:4f:
14:e0:b0:82:ea:0d:5e:76:de:92:cf:9b:04:db:95:
72:d6:77:f1:28:85:93:45:b1:d9:f9:01:55:3e:ec:
08:b0:35:48:ed:db:13:22:d5:c3:1f:ac:e3:ba:4c:
2f:d8:7c:4b:c2:b8:66:a2:15:29:da:2a:7f:d3:ad:
5b:28:e4:b8:be:61:8c:73:6a:06:41:54:03:cd:69:
e7:c1:35:ae:f5:48:1a:9e:3e:ce:b2:2b:94:bb:34:
a0:31:35:0d:5a:e6:a2:c6:cd:a4:63:c3:51:08:ee:
09:80:99:31:75:49:36:64:c8:53:bd:a8:33:3f:e2:
7f:64:49:3a:aa:84:03:f4:d6:ae:1f:5d:b6:64:df:
4d:e7:79:54:0e:58:07:92:b2:07:a1:6d:9c:7f:ab:
73:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:1D:7E:06:6C:3D:0D:A9:C6:ED:F5:E7:63:62:D6:71:51:34:83:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84e65b14-5aee-3d74-8293-b09943587e4e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
70.89.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:c1:d5:3e:2b:14:86:fe:f6:96:b5:b8:85:b8:7a:cd:76:8d:
ed:71:27:f0:10:6c:cb:fa:d3:ef:03:95:a2:f1:b6:37:e4:ba:
9b:e5:45:73:c4:9b:70:8d:f0:e4:49:32:df:21:e3:87:97:93:
38:f6:ec:52:a3:4a:10:54:86:31:25:89:d7:40:01:d7:f7:2b:
a9:b0:6c:dd:02:b3:62:cb:4f:41:45:55:1b:65:70:d0:4d:ce:
36:f7:b5:bb:4e:dd:9b:73:c9:1b:94:d4:2c:f7:58:29:33:92:
8e:ed:b7:4f:94:d7:b0:6e:0d:3d:62:25:0c:b2:1e:ae:29:95:
ca:17:6f:2a:5f:cf:d6:a6:c1:33:36:be:f5:f4:a7:c7:59:c9:
55:88:e1:bc:e0:d8:8b:f5:1b:2c:6d:d1:a8:85:11:8e:1c:5f:
45:ce:bf:00:2e:cf:1c:b2:c8:e5:29:a8:ed:1a:f6:b8:c9:81:
be:1c:14:76:fa:58:d5:02:d2:07:c6:f3:43:4c:cf:9b:cb:3f:
cd:3e:99:11:bd:58:b4:70:9d:fd:1d:79:4d:ac:d3:03:46:84:
96:da:7f:cb:5c:e9:6a:de:80:7e:f1:ee:b0:e5:d2:6c:1a:bd:
e3:a8:d4:ca:b0:2a:f2:07:9a:a5:6d:e5:f6:66:ae:12:e4:00:
7b:ee:25:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:32:48 2026 by rpki-client