
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dfca23c-4528-3e4e-8d11-856a07c727d0.roa
File: 5dfca23c-4528-3e4e-8d11-856a07c727d0.roa (raw, json)
Hash identifier: bH1zx6W5lnCmVmCVbR+RaNjfxvOeNZPYPdQZDRe7jEg=
Subject key identifier: 55:5E:26:04:E4:12:1B:11:06:22:85:89:E7:E1:C0:34:47:37:2C:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4978F0110FCC4C935C055C20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dfca23c-4528-3e4e-8d11-856a07c727d0.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33668
IP address blocks: 96.109.146.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:78:f0:11:0f:cc:4c:93:5c:05:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1144f88b-785b-4964-b874-b29cda68cc31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:b5:bb:36:f4:fa:ab:f3:04:63:42:42:54:95:
50:cb:53:a1:30:92:d7:ea:88:65:ba:20:64:83:6f:
3d:c1:9d:2a:03:2c:6c:1c:7c:e2:6b:79:b8:eb:76:
92:93:18:d5:3f:4a:ba:0d:39:11:ad:47:38:97:79:
1e:70:fd:31:fc:ad:57:a2:eb:1c:29:68:06:95:11:
34:db:59:86:f3:0d:a9:6a:ba:ae:8f:13:2b:4a:c2:
86:da:11:29:71:00:01:fa:6e:cf:6c:1d:c5:b8:c7:
1f:96:84:38:25:29:80:85:84:2d:59:cc:77:05:11:
68:b9:9d:01:84:f4:04:78:f4:51:48:4d:28:e4:83:
6c:59:85:68:c2:a7:2e:49:ca:e7:c9:c5:82:c2:38:
d4:d5:0c:8d:ab:dc:0f:df:8e:24:1e:9d:99:4b:63:
41:ae:5a:53:57:92:bd:09:a2:2f:c2:a5:5d:d2:87:
38:7a:31:8f:3c:54:b9:b6:86:81:93:e1:77:df:78:
c4:cf:af:0a:a7:ac:95:90:32:0f:29:5f:ed:9a:3c:
ab:00:38:c1:4c:4c:a6:44:71:f9:27:80:f9:0a:7e:
b6:9a:72:e6:87:1b:44:db:e0:57:3f:18:a7:63:eb:
a7:85:ca:e3:5f:1c:c7:d3:ee:10:90:b5:25:ab:0b:
17:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:5E:26:04:E4:12:1B:11:06:22:85:89:E7:E1:C0:34:47:37:2C:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5dfca23c-4528-3e4e-8d11-856a07c727d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.109.146.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:fe:d2:82:9e:a2:a0:29:6b:51:63:72:2b:de:32:6c:1d:37:
75:d7:5a:93:e0:4d:8d:30:f1:fd:c8:f4:d2:9b:49:31:11:ac:
77:83:10:06:9d:e3:93:31:21:14:af:47:60:c1:90:f4:8c:89:
a0:cf:dd:7d:71:d6:65:33:84:c9:19:49:04:5a:b6:d1:05:73:
67:bf:7e:d7:76:12:66:77:63:f1:27:c7:25:fe:0d:7b:6a:b0:
ba:e8:02:67:d0:8c:37:21:0e:03:bb:a7:52:5c:79:4f:01:d1:
ab:3d:a0:cb:9e:fe:62:3b:15:47:cc:86:3b:85:d6:82:9c:fd:
6f:ea:0b:65:8a:55:96:58:0b:5f:0d:26:ed:e1:a8:d7:a2:fb:
e8:c7:7f:a8:f1:a3:0e:87:3c:c6:a6:78:d9:91:78:00:fe:ec:
73:47:7d:db:d3:fd:ea:80:63:52:17:e9:4b:f2:bf:50:93:27:
89:2c:05:57:68:37:dc:25:cc:50:71:3b:3a:1a:c1:57:69:c7:
49:4a:f6:bf:1a:11:4c:94:0f:68:c2:13:fd:d6:81:b8:c5:f4:
5b:e7:88:e5:bf:d3:97:a1:74:f3:e3:bd:3b:77:74:1c:4a:b8:
8c:ae:27:83:2f:f1:e4:ab:69:d3:7b:aa:c9:53:69:de:15:4e:
69:58:8c:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 14:23:45 2026 by rpki-client