
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5d1d05-bb57-3b43-acef-126768d1dd18.roa
File: 8d5d1d05-bb57-3b43-acef-126768d1dd18.roa (raw, json)
Hash identifier: PvqDyPgOYDgJQCqjtftV307dupN4azDVjNnVrn5XIuE=
Subject key identifier: 12:C9:88:A1:9B:CF:E5:AE:EA:CC:23:D7:82:7D:AC:4C:69:89:5B:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F11A03913D24517DEBA254100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5d1d05-bb57-3b43-acef-126768d1dd18.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 67.188.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a0:39:13:d2:45:17:de:ba:25:41:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=af9658b3-0242-4f25-b226-c9f2ecaaba89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:cb:5c:73:0a:b2:8f:f0:f7:4d:d8:76:ff:85:
c6:bc:47:cd:89:f0:d0:ca:dc:27:aa:1a:8a:0e:2c:
43:fd:6d:b3:2b:cc:20:f1:0e:f9:7e:9b:50:56:cc:
c5:3e:da:67:2a:84:2f:46:ec:c0:fc:02:de:5d:c4:
5f:d4:14:67:88:e5:91:ae:4c:4e:4e:3a:6c:44:5d:
0c:d3:61:58:55:db:b3:ea:4f:94:73:e8:62:c1:ea:
00:cd:e6:cc:52:80:3f:55:d8:ee:34:a6:77:63:bb:
38:0a:e0:bb:0b:5d:0d:87:d6:c0:9c:c8:9f:9f:2c:
98:b1:45:44:2d:d6:ba:4b:9f:97:c0:a8:c4:d7:ff:
c5:d0:41:56:62:e9:e0:6f:5e:58:ac:0f:2a:eb:66:
8c:e3:74:0d:ab:75:41:06:7f:38:22:e5:03:87:2b:
eb:12:1d:86:96:b3:65:95:cd:fb:3d:0d:f7:c5:c2:
03:89:47:40:60:e2:07:69:78:1f:3f:ba:eb:f8:c8:
97:69:b8:ba:39:40:c6:57:d7:ac:01:af:72:f8:fe:
50:d6:d8:57:e9:cd:09:cd:99:2e:06:a1:25:7b:45:
43:a3:77:fb:92:a9:fa:ab:fc:1b:e7:d6:ac:58:da:
ca:42:62:66:6f:46:21:93:c5:ee:71:31:f3:c6:dd:
8a:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:C9:88:A1:9B:CF:E5:AE:EA:CC:23:D7:82:7D:AC:4C:69:89:5B:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8d5d1d05-bb57-3b43-acef-126768d1dd18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.188.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:d2:65:24:3a:0e:8a:b9:66:a5:72:40:34:52:c0:22:ab:99:
34:8c:f2:24:3c:99:a0:ba:9b:33:ad:b5:c2:b7:2b:9b:ee:7f:
c9:6d:5e:53:c2:53:9f:fd:85:65:d5:87:5b:45:af:24:f8:e4:
e4:ae:a6:49:e0:40:fe:73:73:74:d7:46:e0:68:14:af:09:89:
42:08:14:d1:04:87:ee:f6:be:40:96:15:0b:67:21:b8:db:60:
be:a4:8e:84:9d:3c:b5:a6:2d:b7:f0:b0:7b:c6:46:74:5f:97:
92:85:d6:8a:6f:d3:e8:4e:7c:eb:1d:66:7b:d9:19:98:20:0f:
4b:43:58:1f:08:ff:12:38:4b:72:9d:13:b6:eb:90:45:8b:0d:
cf:11:71:6f:cf:1d:b0:5d:d9:9a:3a:91:cb:ac:50:6e:c3:6a:
0f:b0:86:15:de:56:f1:7a:dd:d1:ef:20:12:d8:01:05:e9:fb:
7b:af:66:8f:a6:b6:4f:3f:51:ec:36:21:e6:01:25:ce:d8:ed:
77:68:7b:f7:1e:ba:3c:22:6e:4e:53:74:2f:6a:74:eb:39:d8:
15:85:a6:00:5b:79:81:32:ee:5e:f8:c5:fc:d6:d4:4b:fd:67:
9d:86:53:e9:79:df:98:16:78:21:61:a1:76:28:76:13:66:1f:
4e:e5:eb:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RoDkT0kUX3rolQQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWY5NjU4YjMtMDI0Mi00ZjI1LWIyMjYtYzlmMmVjYWFiYTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjctccwqyj/D3Tdh2/4XGvEfNifDQytwnqhqK
DixD/W2zK8wg8Q75fptQVszFPtpnKoQvRuzA/ALeXcRf1BRniOWRrkxOTjpsRF0M
02FYVduz6k+Uc+hiweoAzebMUoA/VdjuNKZ3Y7s4CuC7C10Nh9bAnMifnyyYsUVE
Lda6S5+XwKjE1//F0EFWYungb15YrA8q62aM43QNq3VBBn84IuUDhyvrEh2GlrNl
lc37PQ33xcIDiUdAYOIHaXgfP7rr+MiXabi6OUDGV9esAa9y+P5Q1thX6c0JzZku
BqEle0VDo3f7kqn6q/wb59asWNrKQmJmb0Yhk8XucTHzxt2KuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBLJiKGbz+Wu6swj14J9rExpiVt3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGQ1ZDFkMDUtYmI1Ny0z
YjQzLWFjZWYtMTI2NzY4ZDFkZDE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQ7zIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ/SZSQ6Doq5ZqVyQDRSwCKrmTSM8iQ8maC6mzOttcK3K5vuf8ltXlPC
U5/9hWXVh1tFryT45OSupkngQP5zc3TXRuBoFK8JiUIIFNEEh+72vkCWFQtnIbjb
YL6kjoSdPLWmLbfwsHvGRnRfl5KF1opv0+hOfOsdZnvZGZggD0tDWB8I/xI4S3Kd
E7brkEWLDc8RcW/PHbBd2Zo6kcusUG7Dag+whhXeVvF63dHvIBLYAQXp+3uvZo+m
tk8/Uew2IeYBJc7Y7Xdoe/ceujwibk5TdC9qdOs52BWFpgBbeYEy7l74xfzW1Ev9
Z52GU+l535gWeCFhoXYodhNmH07l60E=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:18:55 2026 by rpki-client