
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbfbd399-ede5-3488-8919-eaceefd3539d.roa
File: cbfbd399-ede5-3488-8919-eaceefd3539d.roa (raw, json)
Hash identifier: fOUeDdQBnUakh+oewrAd4bCKP2KnRbuy3Qnyo8ZmQVI=
Subject key identifier: 93:CA:E9:CB:3A:B5:F3:AF:1A:3A:4F:8D:5C:45:EF:AF:F2:2C:9A:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78CE44F8F7E51BD0F9D6160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbfbd399-ede5-3488-8919-eaceefd3539d.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33650
IP address blocks: 71.231.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8c:e4:4f:8f:7e:51:bd:0f:9d:61:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f0719672-64d5-4355-b35f-e5f1cf07f690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ac:27:57:61:11:71:c1:5c:9e:47:84:73:fe:
80:04:85:59:28:56:61:6b:19:eb:34:d1:e6:19:8d:
05:55:ee:99:96:17:cf:cb:d3:db:c8:e4:14:ba:c9:
cb:7a:ce:57:c4:d9:f7:ec:83:47:29:54:9f:9c:00:
a1:28:73:03:e7:38:0a:61:e4:bc:bd:53:1c:67:c8:
ec:75:72:5a:9f:db:17:d7:5a:5f:4e:41:18:87:4e:
b1:22:a1:0b:69:a4:cf:87:d2:10:ae:cd:27:bd:93:
34:57:55:45:57:cd:19:3a:65:c6:f3:9a:46:0a:38:
91:0d:f1:8d:2f:50:fc:d9:1e:c1:fa:d7:cc:27:2c:
8c:dd:7f:eb:34:69:3c:3e:75:64:ec:3f:cd:88:3d:
d0:f4:cf:ab:d7:ad:3e:a2:98:95:5c:e0:6a:13:c0:
01:f9:99:93:1a:2c:7e:05:bf:74:23:9d:fd:dd:5b:
3c:0c:ef:c0:67:7b:80:fa:fe:4c:b3:07:c8:cc:e4:
eb:32:83:a7:07:d4:04:e1:71:95:64:1e:df:18:a0:
4b:ce:0f:87:c3:0f:7b:27:d8:35:7b:4a:a7:0d:b5:
70:7d:5a:21:13:0e:05:b5:20:da:86:95:c0:e3:66:
d2:18:74:f1:c1:fb:92:6a:a3:bb:f7:5d:cc:94:b7:
c7:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:CA:E9:CB:3A:B5:F3:AF:1A:3A:4F:8D:5C:45:EF:AF:F2:2C:9A:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbfbd399-ede5-3488-8919-eaceefd3539d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.231.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:89:4a:ab:e3:83:98:28:b1:2e:91:75:3a:1d:9e:9b:1e:9e:
46:71:7d:aa:14:2e:c2:08:ba:ff:ed:8a:ed:ee:b8:90:df:0b:
29:11:e3:59:11:9e:3f:f3:eb:47:b9:b9:a9:42:20:08:0e:7d:
8f:02:71:8b:c9:ef:fc:5c:93:7e:0b:71:9a:41:8e:fb:23:b8:
e7:f7:62:3f:9b:57:33:95:8d:d5:99:5d:45:56:84:09:7a:43:
e7:b4:59:19:d0:28:27:7f:44:c9:93:96:89:42:79:71:dd:c3:
d0:c5:1f:d0:2e:98:86:70:3b:1e:ef:75:97:74:73:76:83:6f:
90:8e:e0:fc:1e:63:82:4b:13:c4:7b:68:bb:69:7f:31:28:b3:
6e:33:0d:5e:6c:b0:23:18:62:33:8a:86:05:f0:50:ee:08:48:
56:e3:ec:3f:30:5e:6b:d9:de:cd:4a:bd:3d:b3:fa:bc:bc:94:
b2:a0:f1:eb:7f:dd:7b:1e:92:db:bb:e4:24:e5:80:ef:3d:9d:
7d:51:35:75:1f:a7:b5:6d:dd:4e:28:8c:f8:1d:11:76:e2:95:
e4:80:6f:a9:b1:c3:91:54:04:ff:f1:4c:7a:88:97:52:26:5d:
05:e2:67:ea:b3:10:79:5b:60:9b:77:1a:2c:8f:d0:c4:ef:be:
52:52:39:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 10:52:48 2026 by rpki-client