
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef8a2968-3118-3b2c-ab0c-c63717437912.roa
File: ef8a2968-3118-3b2c-ab0c-c63717437912.roa (raw, json)
Hash identifier: LLNGeklsX9BuLP6NzwNrfAGQx0MvXblmKuuRoEaep9c=
Subject key identifier: F9:09:19:95:80:50:82:E2:BA:F6:90:72:7E:6F:DA:3B:CC:BC:D9:1B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5D4787251465289693CF80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef8a2968-3118-3b2c-ab0c-c63717437912.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 67.164.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:47:87:25:14:65:28:96:93:cf:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=70abee70-3d23-423b-b293-cb5b13c88b63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:94:05:34:f7:10:1d:d6:21:4f:db:7c:a9:f7:
7a:f3:f2:cc:00:d5:75:09:9a:83:a6:07:11:bc:ce:
7f:60:cf:09:10:35:52:e9:5f:28:9c:b3:d7:1c:6a:
c8:a2:0a:1f:e7:2a:b0:c8:c8:28:b2:3d:7e:28:d8:
6e:46:00:37:59:aa:10:0a:42:71:95:58:a6:ac:41:
00:d0:e7:83:8e:6a:89:ec:8f:e3:56:e3:62:51:37:
ce:95:78:40:e1:a6:30:c8:4d:ed:2c:b9:56:f2:de:
03:be:da:6b:82:5f:90:54:0e:01:5a:5e:4a:95:f2:
8d:43:60:f0:1d:c0:ed:4d:c2:97:fa:4f:0e:59:e7:
bf:cd:7e:55:b7:9e:25:a2:2c:02:dd:45:e8:39:d5:
a9:3c:d3:a1:ce:99:37:c0:91:d3:0c:3d:2c:53:e7:
98:9b:e2:e1:3b:ce:66:36:96:db:a3:d8:62:34:47:
9a:22:ba:38:af:71:30:16:ff:82:6a:1c:e6:35:48:
3e:c7:33:e6:a5:7d:25:59:60:ef:b7:87:47:f9:5d:
88:9a:b2:48:c9:b2:84:11:55:e8:38:b7:d0:a5:85:
25:5e:2a:7e:70:95:7b:b6:ac:41:c6:39:01:2b:02:
c1:ab:10:b5:b6:15:f3:63:b0:e0:3c:7a:c8:af:a7:
19:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:09:19:95:80:50:82:E2:BA:F6:90:72:7E:6F:DA:3B:CC:BC:D9:1B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef8a2968-3118-3b2c-ab0c-c63717437912.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.164.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:a3:e6:fb:b4:46:a1:38:60:e3:f0:38:30:4e:44:d0:ef:41:
f5:3c:e5:86:a9:7e:9e:43:14:e4:fe:47:75:3a:ff:cf:ef:7e:
95:30:2f:15:43:7b:25:5b:e4:5a:70:79:0b:64:06:a9:f5:a9:
75:81:45:c9:53:5b:b7:93:18:0f:cc:c9:7c:73:29:21:9e:fc:
2c:0f:95:c8:53:0d:52:cb:c1:e8:83:de:df:d3:a3:3b:41:08:
1c:30:5e:4c:1a:1e:54:9f:af:12:ef:b8:67:15:c8:21:0c:62:
d3:b5:5d:35:60:ca:1d:c8:f6:ea:ab:df:eb:08:ed:f2:9e:12:
69:10:c4:39:d0:a2:25:39:5c:8d:e8:9b:6c:fb:4c:cc:e8:2c:
de:14:b9:20:e7:58:0d:fb:c9:70:5a:fb:70:f6:17:75:e6:55:
71:55:5c:de:3d:ee:06:3c:26:43:7a:4f:e6:f8:1d:a5:2b:92:
3a:8d:29:c4:e0:d0:a9:cc:40:a6:01:0a:c3:b9:de:ae:37:c0:
45:e2:fc:77:d3:8e:ec:fb:21:00:01:f4:d9:59:79:b6:ec:9a:
43:45:cc:16:f3:1a:7a:f7:e1:6b:21:b0:5c:ae:df:89:12:67:
2c:91:c4:82:02:29:a0:d3:7b:59:e5:43:bf:5f:57:28:aa:35:
b5:d6:d6:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:01:34 2026 by rpki-client