
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb89090a-dfbd-3921-b120-3abb48cd6b48.roa
File: bb89090a-dfbd-3921-b120-3abb48cd6b48.roa (raw, json)
Hash identifier: YApCk8qEZUz3FMxlcB1NkbUafpTF+OqX5an5DYLThHw=
Subject key identifier: 85:B8:48:8C:F1:01:4F:6D:3E:42:1A:52:66:FB:9D:32:9E:90:93:9D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119D3C58213018E4AB346980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb89090a-dfbd-3921-b120-3abb48cd6b48.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 71.59.118.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:3c:58:21:30:18:e4:ab:34:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=f4bbcbd5-6c42-4d23-bf4d-16f0c6b798f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:2c:9a:c7:e5:5b:c7:cc:7c:66:a1:de:11:e8:
67:3c:d6:db:2a:3b:b5:f5:54:6d:98:6f:97:74:9d:
a1:3f:80:b5:ba:f7:ee:f3:f5:9f:9e:36:ab:b0:2f:
27:31:e4:a8:c2:aa:7b:bb:eb:ac:2e:ca:83:29:da:
94:6f:c6:e2:a3:d6:f1:52:99:7c:59:ba:51:83:a6:
d7:00:05:49:b7:f1:8a:c7:54:30:72:58:37:11:6e:
cd:b6:dc:af:65:a7:c5:cb:1a:e7:d8:07:fd:f6:c6:
43:75:c0:c4:ab:66:bf:2a:8b:7f:83:d0:f9:df:cf:
78:b3:ec:62:54:db:7b:c6:78:be:21:19:32:91:4f:
a1:1e:69:17:db:7f:66:ce:54:8e:df:76:f0:4f:72:
0e:c4:6f:27:fd:2a:9b:ba:2e:8e:7b:7a:a8:ef:93:
8e:68:e6:6e:e2:da:30:95:f0:a8:11:1c:dc:4d:b7:
ab:0f:6a:2b:fc:b0:06:2a:4c:97:16:0d:8d:48:d7:
ce:7d:bb:4f:05:2c:d4:1e:5a:da:e0:0a:6f:11:72:
c1:e5:da:e0:98:49:5e:30:07:90:bf:18:47:39:74:
fe:19:6c:7f:ad:4e:d9:fa:a6:23:dc:69:d8:30:6c:
4a:5c:ae:bf:e1:22:f1:18:01:b0:9d:e3:d2:30:b5:
ea:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:B8:48:8C:F1:01:4F:6D:3E:42:1A:52:66:FB:9D:32:9E:90:93:9D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb89090a-dfbd-3921-b120-3abb48cd6b48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.59.118.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:f8:6a:cb:3a:ac:b2:fe:c2:7c:76:78:69:da:84:54:57:31:
9e:07:2e:85:03:7b:b3:63:39:e4:6d:5f:1b:fc:3a:2a:fa:02:
e6:fc:51:86:a0:95:f8:35:fb:62:17:77:66:57:c8:89:2a:64:
0c:1f:78:2f:8f:e9:18:3b:70:c3:71:ae:ec:cf:0a:00:a9:bd:
bc:21:19:4e:c7:a0:b2:d0:43:5b:9a:79:39:72:af:3b:6b:e0:
bb:eb:97:01:36:6f:a5:78:60:5f:cd:cd:71:c2:8c:25:b9:7b:
60:eb:08:ff:77:6c:09:ac:c0:54:46:09:ae:b4:c0:68:97:a7:
31:44:9b:a6:39:15:35:6e:2f:15:44:c4:c5:00:f1:b1:ec:b4:
26:c0:5f:f8:3d:70:2f:bb:56:6e:df:8a:1c:9c:41:d9:6a:75:
d7:b2:9d:df:14:7e:fe:de:f6:66:73:d3:e2:3d:21:6f:76:dc:
81:8a:d5:40:0a:8f:38:1d:b2:90:cb:b0:85:3e:64:75:45:4b:
fe:74:d0:b1:02:81:b1:59:f4:19:25:bc:0f:b4:67:e4:7d:a0:
d7:bc:cf:d6:60:31:14:79:94:18:f1:03:88:01:04:19:53:2d:
83:9f:30:dc:ae:91:32:fc:eb:9f:c5:2b:79:52:f2:ec:04:f2:
b4:6f:a6:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:03:07 2026 by rpki-client