
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8545effe-0ba9-34a7-ad89-0b326402e772.roa
File: 8545effe-0ba9-34a7-ad89-0b326402e772.roa (raw, json)
Hash identifier: sIrIEfcbhyg7csToof1WTaD5JP7sDluWnhoLgQj1gO4=
Subject key identifier: 67:B1:B7:45:47:2D:E0:0F:BE:00:09:0C:D3:FC:85:A3:78:3B:63:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA789D9D8F269C62BBCC81080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8545effe-0ba9-34a7-ad89-0b326402e772.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33667
IP address blocks: 96.216.198.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:89:d9:d8:f2:69:c6:2b:bc:c8:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=b0957d3c-9a77-4503-9940-a45ad3b76ff0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:d3:0a:1c:be:fd:9a:96:67:e1:a6:c7:b8:
d4:39:31:2e:e5:bd:c1:ce:94:66:e6:65:2c:f9:17:
66:13:78:14:3d:77:87:77:1d:f5:3c:7c:25:c7:ee:
6e:fb:09:5a:de:ec:6e:df:e6:47:d2:68:32:e9:d6:
82:28:7a:84:51:52:10:92:7b:3c:b6:23:7f:b9:b2:
e4:5c:b0:ab:80:75:ed:dd:0c:18:33:a6:30:fa:14:
37:58:1c:ff:ae:4e:34:d6:50:be:fc:97:08:2f:99:
00:26:46:0b:e8:64:20:fd:9e:61:dd:ea:0e:52:e3:
84:22:5b:18:ca:95:bd:fa:eb:92:aa:81:51:f1:f8:
7a:84:1e:9d:56:04:e7:a3:fd:bd:c3:72:f3:3a:9c:
8f:68:d9:77:f3:8f:4e:d9:85:ae:b4:f8:1c:18:97:
09:5e:72:6b:11:c0:e7:a8:c1:77:12:92:d2:45:38:
61:f2:4e:4b:27:99:58:5b:4d:d0:a2:fb:65:41:e4:
cb:64:14:93:8d:c7:aa:dc:d4:74:30:dd:21:a1:8e:
aa:67:ab:74:85:84:6f:14:95:fd:4e:30:d5:be:93:
a0:95:d2:37:05:6d:a8:56:15:4c:6a:3b:a2:88:86:
07:37:03:90:3f:dd:f8:fa:d5:85:da:5a:3d:e9:b1:
6e:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:B1:B7:45:47:2D:E0:0F:BE:00:09:0C:D3:FC:85:A3:78:3B:63:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8545effe-0ba9-34a7-ad89-0b326402e772.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.216.198.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:64:94:85:95:ea:9d:97:66:9e:58:2a:70:96:36:1e:85:c2:
42:7b:47:fb:4f:79:e4:a0:1b:5a:83:e0:eb:68:f4:c3:11:bb:
0e:6b:f7:9e:7a:19:a2:cf:c1:cd:d9:a1:f7:db:a8:a5:85:13:
06:d5:a6:bb:93:bb:3f:09:1e:a8:2b:02:20:e0:61:d5:68:e7:
71:16:8b:aa:7e:b9:cc:e8:6f:42:a1:cb:ec:99:e2:2b:c0:b3:
aa:ee:9f:9d:13:15:ae:12:3c:96:64:4b:bd:d8:fa:bf:e2:c9:
b0:28:c5:d4:37:c7:3e:97:5a:20:3a:b4:5f:89:ee:3f:1c:29:
6e:0c:e0:27:19:51:36:a8:be:7b:0c:df:bf:a9:ae:a2:60:59:
6a:b1:c1:49:c2:1b:27:59:e9:51:d4:06:a6:84:8e:23:df:03:
3d:77:af:18:15:37:8c:c3:df:d5:3f:23:7e:ee:1e:03:19:48:
b7:0c:61:6a:29:31:2b:29:1c:5b:7a:10:f3:8a:77:a1:23:bb:
10:97:57:63:f7:c8:0f:bf:25:ff:70:7e:93:8d:97:84:57:ff:
62:99:14:90:d2:c2:16:41:0f:7e:d4:e8:fc:56:c4:8e:b4:34:
e4:20:76:43:93:7c:bd:4a:48:c0:c8:4c:bd:fd:2a:4a:72:f5:
c2:9d:1d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:40:05 2026 by rpki-client