
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31074b2-4f6a-37f7-967f-fb0576bccb05.roa
File: b31074b2-4f6a-37f7-967f-fb0576bccb05.roa (raw, json)
Hash identifier: W9LeMnjuj+js1v4OZApYja4qhN0KAmxE0TQPnO3c5z4=
Subject key identifier: 18:E1:91:81:F8:3D:A5:A6:90:52:A8:61:D6:79:0A:16:C5:37:18:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E321F9C4C68D20E2ED300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31074b2-4f6a-37f7-967f-fb0576bccb05.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 67.169.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:32:1f:9c:4c:68:d2:0e:2e:d3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=f0650fce-41d1-4185-bb5b-d2e1acaeacfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:c5:eb:04:53:6b:48:d3:07:03:b5:ec:22:a2:
c4:1a:fa:db:ca:df:8b:b1:40:79:d0:df:c9:f0:cb:
63:3e:41:b5:99:5e:36:79:57:41:0e:a4:6b:b0:9d:
1c:46:ba:62:79:d1:f2:e6:39:1b:a3:05:1e:e2:79:
b3:27:73:24:62:80:7c:3e:00:3f:08:a6:dd:b0:95:
f4:20:c4:28:47:6c:37:b0:50:b0:11:f0:0f:84:7c:
b4:39:59:66:07:78:16:27:10:f5:3e:f8:43:86:79:
07:a5:ed:20:b8:81:e1:67:a7:39:10:32:6d:51:a3:
98:8f:3f:78:13:f4:d6:e0:8d:e0:08:47:fb:ca:b3:
c6:4f:53:c4:07:82:35:e5:f5:92:b3:36:ab:4b:3e:
c7:e8:09:14:cb:0a:3f:cb:d5:0d:0f:3f:12:66:02:
ea:7e:10:b9:78:28:0b:82:7a:10:45:1a:84:33:84:
f2:78:e9:0d:b4:07:75:f3:fa:91:ad:3e:62:f4:49:
96:d9:d1:d7:8b:33:fd:d8:9f:3d:6f:70:55:78:0e:
42:6a:8c:e3:12:9d:63:98:61:f7:48:89:e1:fc:94:
a0:84:bf:08:b7:de:7b:25:2c:99:ae:42:c9:d8:ed:
7e:78:5c:3b:68:d6:75:28:75:ba:b9:49:33:00:7e:
60:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E1:91:81:F8:3D:A5:A6:90:52:A8:61:D6:79:0A:16:C5:37:18:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b31074b2-4f6a-37f7-967f-fb0576bccb05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.169.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:d5:8f:3d:47:30:a5:e2:c6:3b:5c:8f:20:01:ee:04:67:89:
68:20:6d:6b:9f:bc:a3:ba:96:06:79:2f:39:09:7e:f6:57:ea:
ee:67:28:ff:0d:6d:d0:d6:f1:e3:bc:ea:d1:43:b8:2b:63:32:
de:7e:b7:4f:f6:bb:fa:3d:4b:43:82:3d:e2:35:15:7e:71:f0:
bf:84:64:dc:c8:69:58:93:e3:d3:51:ca:39:8b:06:63:7a:ee:
ee:1b:c4:c6:51:92:89:f0:2b:cc:d9:f4:fb:c0:b2:a4:b8:61:
29:56:46:ba:bc:86:56:6c:91:ef:aa:b1:88:fe:6e:fd:dc:31:
fe:fe:c7:37:42:cf:c8:f9:d3:f8:07:a0:c8:bd:6a:67:f5:4b:
1e:9f:e1:77:ab:36:7c:76:e5:9a:6a:ba:68:46:b7:42:ba:22:
0c:12:d7:9d:40:8e:be:53:2d:26:ec:63:2e:29:05:80:d6:f5:
7e:00:39:0b:ce:8a:b8:05:dd:8f:18:f5:2b:4b:21:19:c8:6c:
72:d5:17:20:71:60:c8:d1:22:dd:31:18:3a:fa:a1:b8:4e:af:
19:5b:a6:ed:6d:6c:f1:d8:82:4c:95:69:7e:71:8d:fc:88:b3:
1a:40:e7:21:c9:6c:77:ac:29:83:11:4e:15:bd:c2:43:3b:fe:
57:a0:7b:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:31:28 2026 by rpki-client