
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25f7dc2-ab67-3bea-9499-8246dda202bc.roa
File: f25f7dc2-ab67-3bea-9499-8246dda202bc.roa (raw, json)
Hash identifier: x1ogEkto7I+DcB+kppu+hKBX9GHlPFW+68IrsiqBmRA=
Subject key identifier: 5C:1C:7D:BF:8C:1C:7D:85:1E:ED:E7:D8:FB:75:60:15:4C:CB:64:8B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119EF2CDF26B61A849863740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25f7dc2-ab67-3bea-9499-8246dda202bc.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 174.167.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:f2:cd:f2:6b:61:a8:49:86:37:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=27ed659e-bd27-468e-a701-541cf306330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:4a:43:07:d0:06:41:c0:d2:5c:33:6e:4b:e0:
90:24:ea:81:69:e9:43:54:4c:79:f9:c5:17:9b:1b:
56:b7:b0:a3:c4:e2:12:7d:fd:17:36:34:64:6b:82:
05:62:ae:d4:0d:6a:68:2d:98:26:0c:6b:5e:61:3c:
0d:a7:53:ee:e4:cc:d1:54:e1:bd:25:99:94:12:18:
6d:6c:32:75:dd:3c:64:7b:c7:ee:85:c7:e3:52:4d:
c0:01:a7:ab:5c:26:83:9b:63:f9:24:ce:ab:90:c2:
47:83:9e:91:d4:00:87:e7:b4:91:16:05:e4:10:fa:
56:80:35:dd:fa:8c:fe:e0:91:7d:95:ba:14:54:a1:
02:55:4c:21:d1:4e:00:d6:8c:53:7e:45:4a:1b:6d:
d1:1f:b0:fa:20:41:cd:a4:12:d2:d3:01:75:6d:3a:
a3:8f:c0:91:c9:6b:27:8f:13:a5:f8:c8:27:88:e2:
48:b5:99:61:29:6f:4b:8d:4c:34:5a:59:4f:2b:63:
7d:90:bb:27:4d:8e:7d:ce:20:17:12:60:9d:66:6a:
cd:45:ba:33:b4:dd:2a:86:ba:94:81:24:b7:f6:f4:
72:b5:b5:f5:c5:1e:15:4a:de:2c:96:f3:cc:56:4e:
ee:5d:84:98:62:ed:4d:72:00:d9:62:d4:25:d0:18:
43:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:1C:7D:BF:8C:1C:7D:85:1E:ED:E7:D8:FB:75:60:15:4C:CB:64:8B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f25f7dc2-ab67-3bea-9499-8246dda202bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.167.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:6d:11:ef:6c:a4:28:78:56:dc:2e:f3:7a:9d:a6:44:96:d1:
ca:48:f4:12:e0:88:81:28:0a:08:bd:7c:a5:97:2a:84:86:db:
e5:bc:c2:b3:6d:3e:58:60:81:be:cf:ba:9a:fe:9c:82:f1:d7:
dd:32:91:00:49:e7:6d:3d:d8:a4:f8:fe:bf:63:f6:44:82:a8:
1b:71:c8:cc:d3:65:96:96:d0:07:4f:32:17:63:e4:e7:65:d4:
14:91:00:e1:b4:c1:a3:6b:a1:ec:11:19:be:5c:de:2b:e3:a0:
3b:c4:fa:89:a8:35:1f:e9:90:75:a4:06:9e:10:b5:dc:70:67:
1e:34:57:49:d4:c2:4f:16:ba:40:55:59:09:5f:4c:ff:3f:0c:
2a:3b:63:03:31:81:6f:68:93:f3:56:fe:6c:95:18:3b:2b:f4:
c0:cd:f2:cd:f7:b0:58:0c:b0:11:fe:37:31:cd:d9:82:0c:2e:
42:4e:e5:19:9f:ef:37:1b:c4:92:15:2e:f2:99:52:16:ec:1c:
9a:83:aa:ab:3a:57:4d:f3:0d:18:10:5f:05:c3:f4:a0:4a:2c:
22:6f:49:d2:9f:87:33:ee:6d:2e:20:0b:df:b6:25:90:aa:eb:
8f:5e:7a:27:37:7a:ec:e7:e5:32:96:54:7e:42:31:98:42:34:
cd:3f:f7:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:07:23 2026 by rpki-client