
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f585f8f-13a4-3b40-af61-c00fe57ac697.roa
File: 2f585f8f-13a4-3b40-af61-c00fe57ac697.roa (raw, json)
Hash identifier: UiXXWRsdjNKEUO4Dn0v7/5uDERmOSW0ZCQWHSsuMhSY=
Subject key identifier: B1:8E:EA:F9:C6:B0:AB:E1:AD:EC:57:D4:F0:C2:18:6B:B7:12:74:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119ED0019EDC6436E875E300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f585f8f-13a4-3b40-af61-c00fe57ac697.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 69.141.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:d0:01:9e:dc:64:36:e8:75:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=dbb90973-ba64-4450-b6f7-8bb6c388a99a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:70:ce:42:44:17:a2:bc:55:4c:95:62:1d:b4:
45:3f:29:80:bc:82:65:8e:ed:46:8c:c2:94:a1:4f:
2a:ef:94:68:ed:39:da:6b:c3:92:05:1b:69:ce:cd:
5d:30:d2:97:b7:47:91:a5:cf:5e:cb:e9:bf:e5:63:
d2:36:97:9a:a5:e8:2c:7e:ae:22:07:99:b2:bb:32:
38:b7:0a:d3:b9:12:a4:cf:e7:38:fa:77:8c:c7:80:
9d:d9:03:55:e8:73:ea:df:e3:4c:10:de:38:ee:c5:
46:3e:a9:5c:c9:95:aa:b1:9b:32:ca:49:80:4a:8b:
f5:ad:0e:63:1c:a0:cb:f1:48:5b:34:d4:cc:cd:99:
c3:57:0f:db:8a:bc:92:7b:d9:1c:cc:82:98:3a:8d:
e9:9d:50:7f:7a:71:8b:cc:1b:62:31:53:c3:04:d3:
71:7a:a8:7c:da:e0:68:1c:d2:a1:f3:f0:52:5e:08:
1a:6c:58:38:59:d7:f3:b7:e9:bf:d1:e2:4a:e4:0f:
36:5d:32:56:52:f3:96:74:f9:fc:c9:dc:fa:71:68:
3d:69:24:74:96:80:5c:cb:5c:81:f7:7e:9f:83:60:
06:25:cc:e1:65:0a:71:bd:ab:16:99:f2:cd:8b:7a:
42:fd:a8:40:50:6a:8b:9a:75:79:e5:63:d9:0b:eb:
de:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:8E:EA:F9:C6:B0:AB:E1:AD:EC:57:D4:F0:C2:18:6B:B7:12:74:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2f585f8f-13a4-3b40-af61-c00fe57ac697.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.141.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:37:b0:c9:3c:f9:5b:33:29:c2:37:5b:38:fe:6c:d8:05:93:
65:38:4f:a9:2c:66:1c:4e:2c:17:0d:d0:5b:bf:19:eb:ea:ce:
51:f6:6f:c2:d9:b9:c4:54:69:19:1b:50:61:62:3c:7d:59:4f:
7f:d3:6d:ff:da:aa:91:4d:bc:b7:07:20:ac:bc:2a:cb:e2:e2:
33:0a:f0:87:37:3f:89:a4:27:da:82:12:7e:79:09:a1:56:3a:
32:ce:c6:22:87:9d:11:1b:0d:94:5a:3f:ae:a0:c8:9b:fb:83:
c3:48:f0:ab:36:14:33:21:3e:ad:8a:6a:5e:e6:e4:02:06:31:
c8:07:35:42:aa:17:d7:ab:b7:f5:b8:88:07:90:c9:05:e0:3d:
70:00:69:3b:e0:b9:f1:73:f1:a9:5c:be:d3:4a:bc:f6:df:b8:
3c:93:5a:64:71:c3:7a:3b:58:e4:eb:f7:62:1b:2f:4f:e0:b0:
0b:31:8a:d1:f9:42:4d:47:31:e9:a8:4e:c3:d1:a7:74:0f:89:
88:96:be:2d:cb:a5:1c:3b:55:51:a7:a3:6f:59:1f:af:e2:5f:
1d:ec:d3:ec:ae:8a:ed:49:e2:5f:47:3a:f6:f1:fd:98:43:2c:
bc:76:da:63:c5:32:9b:b4:e7:fa:10:78:c8:de:5d:cc:88:37:
60:3e:77:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RntABntxkNuh14wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGJiOTA5NzMtYmE2NC00NDUwLWI2ZjctOGJiNmMzODhhOTlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXDOQkQXorxVTJViHbRFPymAvIJlju1GjMKU
oU8q75Ro7Tnaa8OSBRtpzs1dMNKXt0eRpc9ey+m/5WPSNpeapegsfq4iB5myuzI4
twrTuRKkz+c4+neMx4Cd2QNV6HPq3+NMEN447sVGPqlcyZWqsZsyykmASov1rQ5j
HKDL8UhbNNTMzZnDVw/birySe9kczIKYOo3pnVB/enGLzBtiMVPDBNNxeqh82uBo
HNKh8/BSXggabFg4Wdfzt+m/0eJK5A82XTJWUvOWdPn8ydz6cWg9aSR0loBcy1yB
936fg2AGJczhZQpxvasWmfLNi3pC/ahAUGqLmnV55WPZC+vePQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLGO6vnGsKvhrexX1PDCGGu3EnTYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmY1ODVmOGYtMTNhNC0z
YjQwLWFmNjEtYzAwZmU1N2FjNjk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRY2sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEI3sMk8+VszKcI3Wzj+bNgFk2U4T6ksZhxOLBcN0Fu/GevqzlH2b8LZ
ucRUaRkbUGFiPH1ZT3/Tbf/aqpFNvLcHIKy8Ksvi4jMK8Ic3P4mkJ9qCEn55CaFW
OjLOxiKHnREbDZRaP66gyJv7g8NI8Ks2FDMhPq2Kal7m5AIGMcgHNUKqF9ert/W4
iAeQyQXgPXAAaTvgufFz8alcvtNKvPbfuDyTWmRxw3o7WOTr92IbL0/gsAsxitH5
Qk1HMemoTsPRp3QPiYiWvi3LpRw7VVGno29ZH6/iXx3s0+yuiu1J4l9HOvbx/ZhD
LLx22mPFMpu05/oQeMjeXcyIN2A+d70=
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:51:50 2026 by rpki-client