
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0efaf841-b870-3457-b197-83554e6aea27.roa
File: 0efaf841-b870-3457-b197-83554e6aea27.roa (raw, json)
Hash identifier: U3ifmR5IOUX87GF13DkUs49AfsSK+flereoVuthCI/I=
Subject key identifier: 81:D7:B1:79:79:39:FF:EB:E0:7C:CD:BD:99:F9:CA:36:E5:A9:95:7F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119D23D5DD8FEECF08B51480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0efaf841-b870-3457-b197-83554e6aea27.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33660
IP address blocks: 67.186.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:23:d5:dd:8f:ee:cf:08:b5:14:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=75e31032-2b7a-4be3-a77a-a85c5d24b404
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:63:7d:0a:7e:a7:e1:ae:a2:a4:2a:ef:7b:5c:
22:ee:fa:14:a5:6b:da:5d:12:b5:d3:69:ae:7c:fa:
aa:8a:47:64:17:00:85:74:3c:46:ac:97:72:b9:99:
ca:e1:8e:a9:8e:c5:b2:e9:34:a3:4a:c3:ef:44:4e:
5d:eb:ad:e2:5d:a0:4b:fc:9d:49:75:e2:6a:b9:21:
e7:c2:4a:3a:89:45:fe:eb:da:3e:65:a8:99:0c:d2:
c9:9d:29:c2:c8:50:22:ab:ae:65:cb:22:bf:35:c2:
c8:82:ca:65:9f:6e:1f:54:da:08:4c:d0:0f:63:79:
d0:6e:43:2c:78:0e:62:6a:56:f9:ce:5b:54:9c:41:
de:bd:82:14:6d:b3:08:10:31:f2:97:bd:31:85:9c:
55:4d:fd:2d:2a:1a:cb:3d:56:d5:1b:68:1a:2b:31:
63:4d:a7:8b:c8:77:5f:bb:1c:94:57:a4:b3:2e:38:
e8:6d:57:bf:e0:94:ef:c5:4b:12:d3:be:51:f1:fb:
e2:2b:f7:45:1a:50:0a:ca:62:f3:62:a7:96:65:9b:
37:50:40:6e:0b:0d:b0:0a:25:1a:e3:13:16:98:66:
64:ac:9c:ae:e1:74:fb:49:ca:53:56:a9:b5:8a:20:
94:2e:e1:76:e8:d7:9d:3f:ed:64:b2:69:71:13:2b:
9e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:D7:B1:79:79:39:FF:EB:E0:7C:CD:BD:99:F9:CA:36:E5:A9:95:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0efaf841-b870-3457-b197-83554e6aea27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.186.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9f:f1:22:aa:ea:33:8e:ab:d6:3a:b8:20:64:76:76:cd:9f:11:
a7:e5:60:69:46:2e:86:e4:64:d4:63:90:be:87:b7:f1:31:27:
33:cf:ad:08:c0:92:0c:12:51:95:e5:9b:c4:78:4d:10:77:0c:
1e:47:f8:3d:d4:74:57:b4:40:87:dd:d8:ee:32:da:89:db:1a:
21:2e:b6:d4:8d:fc:b0:42:55:f4:bc:e3:a6:5f:72:c1:4b:48:
c7:76:58:e2:91:af:d4:40:53:f5:89:01:77:3e:55:82:2d:f7:
7e:46:15:31:7f:93:65:52:d6:68:4b:ab:48:46:49:15:28:65:
1a:e7:d0:02:ca:d7:e8:91:80:06:a3:cc:29:fa:fa:f8:ec:a4:
1c:bb:77:19:87:3f:b6:b4:14:3c:96:ee:f7:dc:4c:55:fb:35:
21:11:a2:06:ea:8c:ee:e9:84:33:15:d0:33:13:0b:46:59:8c:
d1:eb:f2:35:cd:e8:c7:49:cd:d5:3b:23:af:13:a4:d2:a0:8d:
17:6a:88:eb:3c:6a:e9:dd:4c:9c:d3:5b:01:ec:0c:9a:c3:49:
36:49:29:e9:0d:63:15:8a:0c:ad:27:18:4e:46:9f:f9:83:02:
8c:69:31:ae:a5:1d:54:e6:00:99:15:af:42:72:49:93:04:c5:
4a:27:19:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 20:58:22 2026 by rpki-client