
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4856db40-f882-3b3f-9cf4-1a2989588648.roa
File: 4856db40-f882-3b3f-9cf4-1a2989588648.roa (raw, json)
Hash identifier: Mh2fmpDTHV6jMs7Cu+7r4g0FXWXGNA9yOGi26VmMtOQ=
Subject key identifier: 7E:11:E1:A9:E5:B8:27:3A:9E:09:84:7F:2C:34:F3:00:AE:C9:85:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497FCD357DEC2C5C346C1340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4856db40-f882-3b3f-9cf4-1a2989588648.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 69.247.0.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 10 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:cd:35:7d:ec:2c:5c:34:6c:13:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=9c5d336d-0630-461c-a3c8-0a172db3fe4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:e0:a5:2a:57:f8:0f:da:6c:87:53:fb:09:a6:
dd:7c:8a:8f:2a:7c:57:d3:7f:a9:c0:f9:d0:c7:36:
c2:ed:5c:aa:d5:a6:b9:09:d2:d1:32:aa:a0:42:ba:
b8:7a:06:3d:9d:4f:11:01:dd:da:f5:a7:61:4c:7d:
04:6b:86:d0:95:4e:21:9a:66:0d:2f:d6:8a:ff:b7:
f6:67:0d:0f:aa:c1:00:f9:0f:c4:0f:83:c4:6c:3c:
73:4e:ba:bf:d7:45:e6:e5:34:ab:e4:29:b9:c6:ca:
35:53:7e:1d:01:25:0b:15:a4:b9:2f:4f:01:77:2d:
af:96:ae:9c:e6:eb:ad:23:ab:35:3d:d0:35:9e:4e:
4f:1f:fe:1a:21:9f:4c:17:93:98:1d:6d:e9:b7:b6:
dd:2e:a6:81:0c:be:ed:83:74:43:86:dd:3c:bb:e7:
74:d8:45:af:8d:1f:9a:a7:6b:69:b4:ed:5a:05:39:
fe:6f:69:2c:d9:32:0d:75:30:18:07:4e:2a:10:ac:
2e:f4:05:0f:74:d6:42:14:25:e4:dd:28:9e:9d:91:
42:33:dd:58:8c:db:2e:37:a5:00:7c:b7:f5:31:cc:
d6:56:4f:10:00:94:69:a2:30:0a:52:32:76:ac:8f:
91:b4:bd:cb:cf:a2:10:e5:68:70:e3:2e:96:93:89:
ad:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:11:E1:A9:E5:B8:27:3A:9E:09:84:7F:2C:34:F3:00:AE:C9:85:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4856db40-f882-3b3f-9cf4-1a2989588648.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.247.0.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:5d:ab:a1:0e:ce:72:8b:e1:40:ad:7a:39:a2:eb:08:35:2b:
c2:19:ba:2d:04:08:d6:fc:3d:e7:7a:9c:10:f1:26:2c:88:c2:
21:68:9c:50:d3:25:0b:9e:f5:89:6a:d3:52:7b:93:1b:b2:be:
59:17:b5:58:02:a7:99:33:89:9d:0b:c5:fa:f7:aa:1f:fc:01:
47:b3:57:97:01:f0:29:4a:b7:d5:c6:2a:ee:88:9b:0b:44:00:
b5:2b:44:62:01:8e:00:fa:e6:eb:bb:81:c0:80:87:f6:ca:8f:
fa:75:97:f9:60:1d:50:1b:1f:bd:2d:fa:24:a5:e0:8b:26:1c:
52:e5:be:06:e2:aa:f8:16:dd:6d:30:39:aa:29:d0:4c:1c:59:
7e:32:8c:ea:0a:a2:99:16:48:d4:03:79:a6:9a:a3:76:98:22:
27:9f:30:83:7b:e3:49:4d:5b:f5:64:f3:0b:37:08:59:7e:ce:
81:81:d6:ab:03:9a:a7:64:01:3e:23:51:58:67:19:fd:71:65:
08:be:c2:a7:21:65:e9:f3:7c:23:d3:52:41:af:4b:f9:d7:d2:
8e:f8:e7:43:82:92:77:f3:4b:97:b3:0b:46:46:10:31:eb:3a:
ce:a1:77:69:54:c5:6e:15:70:31:e3:ce:d4:0e:6d:f4:d9:fb:
e1:38:f1:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 8 15:50:27 2026 by rpki-client