
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa
File: c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa (raw, json)
Hash identifier: YREFRu48zusLI/B1FcDVrNJ4A5P222CyCNvhNofhy/8=
Subject key identifier: 3E:4B:EF:6B:95:12:E5:D7:AA:32:45:2B:30:1A:39:95:7B:4C:FC:21
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5800126D2BB4C494C21F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 67.173.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:00:12:6d:2b:b4:c4:94:c2:1f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=2ccad8b7-f934-4e1f-ab8a-7e18e9cefbd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:3c:5d:1e:af:96:12:69:24:57:c3:da:16:f1:
cc:a6:84:16:6e:04:1a:47:c5:68:b0:e7:b7:e8:3f:
56:5c:f0:6d:2d:36:28:c6:61:e9:a6:b8:e1:39:93:
7a:18:46:eb:e7:d0:25:df:d7:f1:a0:23:11:14:50:
6a:08:74:f6:7d:66:1e:95:6b:a0:81:4d:91:66:67:
02:e3:8b:5c:2c:08:5a:ac:d5:ca:97:09:d8:38:3d:
53:60:c3:f8:47:ba:13:a7:65:35:f2:20:88:6a:3e:
fa:77:bf:fa:4c:e8:b5:5f:99:25:32:26:16:03:24:
8b:4c:97:47:80:40:3f:ce:74:65:a3:c1:34:91:6b:
c8:f3:eb:3f:d3:02:16:1a:de:42:75:b7:23:03:50:
c9:23:5a:eb:a1:eb:19:70:58:5d:68:01:24:4f:dd:
dc:0d:33:4a:44:48:32:5f:1c:72:dd:03:cf:d8:93:
4b:fd:20:ca:fb:1f:10:4d:2a:83:9e:fa:09:22:66:
69:d9:36:84:4b:2f:d8:c1:1e:86:4f:72:f3:75:47:
1f:bc:da:a5:d4:7a:e7:29:8b:05:e7:9a:4b:b0:4d:
ee:fc:78:f5:94:d9:2c:cd:e2:10:46:20:2c:46:99:
d1:0b:4b:a4:51:0d:6b:8e:cb:c6:96:52:5d:90:fa:
51:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:4B:EF:6B:95:12:E5:D7:AA:32:45:2B:30:1A:39:95:7B:4C:FC:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c1c2967c-8201-3f22-8aa7-6b7624fa7571.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.173.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:43:de:7b:55:96:af:9b:a2:a3:4e:9e:d2:5c:a9:79:66:41:
c0:86:bb:c2:e8:aa:eb:97:06:b9:55:e4:4a:b8:af:b7:13:41:
c3:05:c0:f5:43:b2:60:d1:85:cd:fc:87:88:cc:84:23:09:6d:
fd:08:76:60:15:0e:c6:91:f7:8e:51:2f:a7:2f:6f:8b:a6:c2:
90:ef:e7:44:1d:11:9c:a7:b5:7a:de:94:f7:13:46:8b:1e:16:
77:b4:6b:5f:52:ff:19:ba:05:23:2b:16:09:a3:a2:84:79:23:
69:aa:76:d3:86:12:d5:fc:d2:c6:23:8a:16:80:39:ee:5f:f0:
38:f1:af:bb:32:31:b7:fe:79:00:f6:b5:83:86:48:64:77:51:
bb:4e:d5:09:9d:ca:30:c8:12:9c:48:03:d2:83:d3:6f:e5:48:
b9:16:d9:b3:d4:cd:97:24:61:c5:ea:70:a6:30:c4:fa:32:81:
c2:72:70:d8:a8:08:ce:f2:a6:ab:f9:08:28:29:1c:74:42:27:
5e:62:26:86:17:86:b3:bf:95:e6:05:57:40:dd:3d:2b:cb:e6:
3a:28:e1:aa:56:33:b5:cc:1f:49:c0:74:87:4a:ec:01:61:dc:
d5:d7:aa:6e:d1:b3:f8:5f:6b:16:56:a7:53:7b:8c:a2:ce:1b:
41:9f:ca:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:17:02 2026 by rpki-client