
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a248c3c3-2ae8-3ac5-a4bc-b88a2ddb20bf.roa
File: a248c3c3-2ae8-3ac5-a4bc-b88a2ddb20bf.roa (raw, json)
Hash identifier: 23cvui/eVpjcG6N9mYjpXXvpEafmIB1WQmpPZSA6ge0=
Subject key identifier: A3:3F:5F:70:C5:18:B2:3C:98:88:6A:1E:AE:FE:5D:98:2A:AF:E8:D1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497A525C8C1B76149416D4C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a248c3c3-2ae8-3ac5-a4bc-b88a2ddb20bf.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 96.108.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:52:5c:8c:1b:76:14:94:16:d4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3ba7bac6-9139-4333-9e10-4e56d8a92f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:1c:79:d2:e7:1f:0f:54:63:3f:05:71:0e:87:
b0:d2:1e:20:e2:72:26:2b:c6:21:b0:97:f9:4a:c5:
b9:c5:ba:45:80:31:9b:9f:0b:ac:21:9a:8b:20:ac:
1b:ba:a2:94:bb:cf:07:47:ee:b4:87:e0:ca:f9:52:
ff:f1:ac:51:5f:0e:26:d0:e3:a1:22:12:82:2d:9b:
91:09:64:89:04:f6:c3:71:18:6d:fd:ca:a0:18:1b:
bd:47:98:3d:bd:0e:30:dd:a6:cd:92:51:d0:7f:d0:
c6:a0:6e:2b:43:83:5c:d9:11:5b:37:79:01:bb:2a:
4d:66:8b:cb:5c:18:f7:75:20:f6:39:3f:46:1a:ff:
1c:e9:4e:70:8a:d7:33:98:7d:f6:0e:3c:6b:1c:2c:
eb:69:db:c2:ce:c9:df:a2:54:00:6e:aa:46:0e:b2:
08:0d:b6:8d:f5:58:32:4e:29:61:6a:a0:5e:3a:a8:
54:7c:cf:a8:05:3f:be:60:14:bc:65:0a:3a:d6:c2:
d6:8b:b2:97:ff:9b:6b:ca:a2:58:e3:17:95:81:b1:
10:bd:19:62:6f:c6:ff:e6:12:2a:e4:e6:ce:ec:ed:
99:98:83:b3:6e:b3:10:b7:65:7b:08:86:a5:bf:40:
9c:ee:11:e7:01:75:2a:1e:2c:41:55:65:87:e7:1b:
24:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3F:5F:70:C5:18:B2:3C:98:88:6A:1E:AE:FE:5D:98:2A:AF:E8:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a248c3c3-2ae8-3ac5-a4bc-b88a2ddb20bf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.108.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:22:a0:86:b5:4f:1c:59:ab:2f:53:31:3f:87:df:11:af:4c:
dc:3a:68:4a:dd:fc:e1:db:03:e7:55:0d:7a:4c:21:17:69:56:
57:91:58:e4:01:de:d6:54:cc:8b:f3:6e:39:84:9f:ed:e8:9c:
78:f1:c8:0a:a7:cc:7d:fd:96:1e:d1:e8:9b:3b:d1:53:e9:b3:
46:0a:10:ee:17:2a:44:08:3b:6e:02:ca:b2:06:4f:5b:b3:12:
8d:36:d9:23:4d:2f:b1:9c:26:4f:1d:1c:d6:2b:b9:2e:ca:33:
17:77:65:24:e5:70:2a:a1:18:7f:ce:e5:f0:5e:64:d3:79:09:
8e:08:4c:59:71:4e:78:da:ff:46:64:19:15:aa:61:80:57:73:
32:8d:db:f6:c5:1e:84:7c:fe:47:36:c9:ab:c4:fe:ac:ae:17:
6e:12:8d:72:d3:78:e3:22:ac:f7:61:78:eb:28:40:bb:07:23:
29:e9:aa:b7:1a:e7:50:50:f6:b2:68:d7:60:c2:dc:a4:de:4d:
7d:94:a5:85:98:16:7a:e4:72:30:1c:94:43:5e:3c:9f:59:0b:
48:86:18:c6:71:b5:9a:0a:7c:23:32:4a:00:e4:6b:1e:33:04:
5a:76:b2:82:73:9f:00:9f:ea:90:86:db:be:2f:05:a1:c8:0d:
13:5d:73:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 03:13:26 2026 by rpki-client