
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
File: 834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa (raw, json)
Hash identifier: JBY0vOuN0/FHH3eTnqt2dwQAabfPcOpQ/out9Qz0P2Y=
Subject key identifier: 8E:11:A2:89:9B:A5:D0:6E:AB:C2:EB:6C:11:C7:C3:DB:29:DA:3A:E2
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584D6944F98CF6D66E681613F7C0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
Signing time: Mon 06 Apr 2026 01:00:24 +0000
ROA not before: Mon 06 Apr 2026 01:00:24 +0000
ROA not after: Sun 05 Jul 2026 01:00:24 +0000
asID: 21433
IP address blocks: 170.248.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:69:44:f9:8c:f6:d6:6e:68:16:13:f7:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Apr 6 01:00:24 2026 GMT
Not After : Jul 5 01:00:24 2026 GMT
Subject: CN=a358127b-cc3b-4b15-b54e-65d72e0fcb47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:41:c9:8e:8a:9e:ce:f4:81:ef:69:f6:50:da:
0e:b9:90:c2:e7:97:8e:85:14:dc:f5:29:fe:28:63:
46:97:9e:82:ff:d9:1e:c1:c3:71:12:bc:3c:0c:c9:
83:5c:ac:f5:f0:5d:13:7a:4f:7f:f7:67:15:ac:09:
2b:b4:a5:d7:7d:6c:55:3b:a6:fb:81:e7:aa:1e:08:
69:62:b7:4f:d6:20:80:12:0f:53:af:d8:6c:59:5d:
fa:a0:c6:64:bd:d3:58:37:6d:16:88:3f:e8:b0:72:
45:31:a2:3b:b0:97:f4:fd:ac:a5:a6:0a:17:d8:14:
3e:54:8e:66:4a:8e:4d:4b:fb:15:06:f6:6c:c6:26:
f9:87:4b:d4:2a:f4:1d:f3:e5:02:bf:10:4f:0c:71:
f9:75:57:48:d1:26:22:44:b2:03:19:d9:67:92:79:
5e:3b:a6:37:ad:ae:07:36:54:51:01:54:ce:d4:66:
27:a7:26:23:24:67:24:0f:22:01:d6:23:94:22:a8:
25:d0:23:a1:5d:f8:d5:11:8c:83:59:af:73:b3:7c:
a5:59:fc:4c:a2:1a:8b:bd:c9:04:17:e2:54:59:da:
96:57:00:93:5e:47:b3:6a:c5:29:f2:d1:d9:a2:7f:
19:eb:4c:17:e5:f4:d9:a6:2b:38:e7:00:fb:a1:2c:
c4:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:11:A2:89:9B:A5:D0:6E:AB:C2:EB:6C:11:C7:C3:DB:29:DA:3A:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.248.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
96:dd:bc:58:0b:4d:a0:61:b9:32:1a:89:09:1c:c3:b2:67:99:
48:2a:8e:26:bc:c7:a6:20:7f:56:9e:08:9b:49:b9:87:af:5f:
7f:14:85:1a:6b:aa:f8:1b:b2:40:04:7e:f2:8b:09:e5:4d:a3:
55:69:50:39:f2:57:9f:87:5d:9e:58:fb:99:cd:e1:a4:62:96:
40:5f:cf:5b:26:19:2c:72:51:77:ff:df:55:8d:88:4a:c7:12:
33:5a:32:e1:f4:5f:81:24:a5:fb:db:c4:ab:4a:77:77:c4:50:
e1:39:47:0c:58:17:d7:84:9f:69:8a:0e:27:2e:3c:63:5d:bd:
e0:a6:99:d2:93:be:dc:3d:da:42:df:4c:85:4f:e7:b8:b8:73:
e5:fe:9c:43:91:0a:a8:22:68:1b:e3:f7:81:a6:19:25:f3:1a:
48:7f:84:34:20:f5:6e:82:54:2d:3c:ca:5b:65:ce:94:ab:92:
c9:e6:75:27:f6:5f:a7:47:80:61:44:48:db:bd:71:72:11:ca:
bc:e8:c4:1d:db:98:36:5c:bf:fb:a1:c1:bf:eb:80:6c:b8:06:
d5:ba:89:57:c5:1a:46:1f:c4:f9:b7:cf:ae:41:54:e1:e3:79:
a6:93:51:bf:51:b1:14:ab:25:59:19:19:a4:58:26:08:64:a1:
12:52:3c:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:06:10 2026 by rpki-client