
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8951162f-da1a-33a6-a547-3e10dc219f35.roa
File: 8951162f-da1a-33a6-a547-3e10dc219f35.roa (raw, json)
Hash identifier: 7UiWDXB/TG5ORafTvw9PAVHPd++9TVdtnYsevmJit5o=
Subject key identifier: 74:DE:D0:E4:F1:7C:E4:4A:54:D8:0B:08:AE:2F:AE:02:D1:E4:A8:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC6CE939626E82FCC0C5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8951162f-da1a-33a6-a547-3e10dc219f35.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 174.170.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:6c:e9:39:62:6e:82:fc:c0:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=902bfb03-7c36-4de7-a128-54f38c5850a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:b4:40:55:83:fd:df:1d:e8:63:61:8d:b6:8c:
ad:97:bb:9c:63:bb:86:8f:a6:d0:64:8a:71:9c:a1:
d5:8d:35:12:f3:71:8f:ad:eb:92:af:88:6d:cd:17:
a5:88:66:46:63:0b:eb:02:a7:e0:63:d7:3f:3d:8b:
42:12:8b:f3:64:bd:6e:9f:86:46:ce:05:d2:c8:23:
a2:d8:47:14:61:07:4c:d5:c5:4d:aa:b9:e1:c3:56:
4a:25:5f:a6:b7:3e:07:9b:63:52:77:e8:44:28:5a:
5e:8a:61:cc:97:e1:78:28:df:d5:5e:cf:11:3e:0d:
fb:38:d7:04:a1:2d:bb:4a:54:8c:43:28:32:c3:7c:
11:df:a6:92:11:20:b3:52:74:f2:b2:35:77:9b:f5:
e8:ed:02:b9:c7:04:9b:85:b5:45:f5:49:2d:8e:4c:
36:a1:54:be:64:c3:49:2e:e6:07:bd:ad:f0:3b:54:
fb:c1:b1:48:c5:24:20:1d:f0:71:9c:0e:41:f1:69:
33:64:97:23:2f:65:66:ef:1f:10:f6:a4:43:be:a3:
04:b5:29:a8:48:c0:65:a9:1c:00:a9:0c:d3:4d:1d:
81:35:cd:02:19:3e:74:a8:17:74:c3:3a:85:78:b2:
c9:ee:c5:44:f4:1a:b9:c6:f1:d1:4f:91:71:7b:1b:
25:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DE:D0:E4:F1:7C:E4:4A:54:D8:0B:08:AE:2F:AE:02:D1:E4:A8:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8951162f-da1a-33a6-a547-3e10dc219f35.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:06:ec:5f:1e:50:a8:6c:85:83:7e:2a:38:37:f9:7c:8a:9b:
17:00:58:7f:4f:b9:fb:75:25:ec:13:95:68:62:ef:35:6c:fe:
70:f2:19:28:c1:00:82:eb:46:fe:41:e2:18:47:ed:f4:22:d9:
5a:cc:1a:39:ab:92:64:60:83:0f:33:f9:78:a6:69:de:ff:14:
c7:56:64:c5:74:fb:d2:5a:4c:e4:da:85:e8:25:dc:43:f1:80:
ee:cc:a5:e8:57:bf:ad:e1:4d:5c:36:10:7d:01:3f:64:d6:12:
7c:86:93:cb:bf:88:da:f0:3e:1c:ad:2f:9f:6a:52:a5:0b:8e:
c1:8b:90:56:74:81:ce:15:14:79:57:90:08:e1:cb:99:8b:bd:
79:80:e0:78:eb:b8:40:04:cf:03:56:ec:02:48:23:e7:a7:91:
d3:eb:35:77:bc:53:f8:21:6d:a5:30:21:12:9b:f6:3a:49:cb:
aa:9c:f8:af:b2:5e:d2:16:23:b9:68:05:13:84:8b:8e:63:23:
5c:9c:0c:7b:c2:f2:50:71:fb:20:e4:d7:4e:62:d9:63:d8:0e:
af:db:42:96:ad:e3:06:77:48:9e:73:32:aa:9d:b7:a4:ca:11:
45:9e:ec:3f:fc:4b:bc:3f:8f:73:f0:65:86:81:48:a1:0e:2a:
0d:5a:fb:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvGzpOWJugvzAxcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
OTAyYmZiMDMtN2MzNi00ZGU3LWExMjgtNTRmMzhjNTg1MGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkbRAVYP93x3oY2GNtoytl7ucY7uGj6bQZIpx
nKHVjTUS83GPreuSr4htzReliGZGYwvrAqfgY9c/PYtCEovzZL1un4ZGzgXSyCOi
2EcUYQdM1cVNqrnhw1ZKJV+mtz4Hm2NSd+hEKFpeimHMl+F4KN/VXs8RPg37ONcE
oS27SlSMQygyw3wR36aSESCzUnTysjV3m/Xo7QK5xwSbhbVF9Uktjkw2oVS+ZMNJ
LuYHva3wO1T7wbFIxSQgHfBxnA5B8WkzZJcjL2Vm7x8Q9qRDvqMEtSmoSMBlqRwA
qQzTTR2BNc0CGT50qBd0wzqFeLLJ7sVE9Bq5xvHRT5Fxexsl2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTe0OTxfORKVNgLCK4vrgLR5KhpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk1MTE2MmYtZGExYS0z
M2E2LWE1NDctM2UxMGRjMjE5ZjM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCrqowMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA8G7F8eUKhshYN+Kjg3+XyKmxcAWH9Puft1JewTlWhi7zVs/nDyGSjB
AILrRv5B4hhH7fQi2VrMGjmrkmRggw8z+Ximad7/FMdWZMV0+9JaTOTahegl3EPx
gO7MpehXv63hTVw2EH0BP2TWEnyGk8u/iNrwPhytL59qUqULjsGLkFZ0gc4VFHlX
kAjhy5mLvXmA4HjruEAEzwNW7AJII+enkdPrNXe8U/ghbaUwIRKb9jpJy6qc+K+y
XtIWI7loBROEi45jI1ycDHvC8lBx+yDk105i2WPYDq/bQpat4wZ3SJ5zMqqdt6TK
EUWe7D/8S7w/j3PwZYaBSKEOKg1a+2Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:52 2026 by rpki-client