
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5ffd30-6bf3-3cbf-bb09-a8eaec927550.roa
File: af5ffd30-6bf3-3cbf-bb09-a8eaec927550.roa (raw, json)
Hash identifier: uouexwGMFp0xNrO3QDLk023s9iixU/+l/wmYPvBLPW0=
Subject key identifier: 4D:AD:78:A2:EE:15:FD:BA:BA:86:72:69:FD:BC:0B:B4:AC:50:AF:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119D92EB5D245256C8FC9F30
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5ffd30-6bf3-3cbf-bb09-a8eaec927550.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 174.173.104.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:92:eb:5d:24:52:56:c8:fc:9f:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=61a629f3-5726-4d79-8214-edc276dca022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:75:a9:0d:cd:4d:16:44:0d:09:a9:68:7c:93:
b3:e8:f4:be:6f:03:50:3c:19:0c:70:3c:ed:4c:94:
3c:c4:e8:42:9e:1f:9f:52:1c:1d:d3:be:bd:a6:4a:
e3:a2:ba:6e:dc:06:be:75:d2:99:69:11:d5:33:63:
c1:cc:05:93:d7:89:cb:9b:cc:4b:ec:df:1e:88:56:
cb:e9:90:f1:f9:44:17:d6:1b:46:fb:b7:e6:72:b8:
b9:1e:56:d4:35:0e:11:01:98:d7:e1:b4:58:c1:e9:
c3:e1:26:23:04:07:24:d1:b3:0b:4a:13:a5:85:8c:
c0:0b:ec:5b:ee:08:57:7a:1b:b3:b4:5f:e2:45:33:
16:58:0d:83:21:b5:9e:83:11:a2:d8:11:79:eb:91:
b5:51:0e:7c:33:23:46:7c:56:08:ed:2b:09:6c:43:
c9:f8:d5:05:74:5d:0d:86:87:09:3a:e5:0a:fc:a9:
f0:23:21:d1:44:d0:35:f0:67:c3:95:17:03:bb:1a:
d9:7a:1a:ab:ed:00:31:0d:03:f2:7b:ab:d9:8b:c9:
b3:c4:a0:60:c5:49:7e:0d:dd:84:9e:6f:9c:f7:79:
3b:6e:50:1b:8e:05:18:27:3d:68:c1:47:d0:c8:65:
77:6d:06:73:d3:ca:90:87:c1:43:68:b4:f7:7f:a6:
3e:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:AD:78:A2:EE:15:FD:BA:BA:86:72:69:FD:BC:0B:B4:AC:50:AF:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af5ffd30-6bf3-3cbf-bb09-a8eaec927550.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.173.104.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:69:3a:2e:69:dc:2b:49:e9:2c:9f:17:d0:70:16:f3:49:48:
2b:ee:a2:20:91:96:ac:e3:17:ac:08:e2:38:5a:e7:5d:13:d8:
39:03:47:7d:c0:a0:2f:70:ad:6c:51:54:14:22:c3:c2:c7:73:
a4:89:d9:35:32:36:c9:16:6d:14:b0:4b:f3:10:0b:21:ea:66:
85:69:5e:f5:61:ae:b9:e0:3c:25:be:34:cd:dc:f3:cf:1b:b6:
4f:9e:95:75:c2:01:3f:40:f1:a7:86:8b:5f:bd:40:16:b9:16:
c5:13:50:15:f6:64:41:7e:cf:43:dd:fc:f5:73:51:3e:a6:2f:
3e:db:1f:fe:bc:f0:fe:b5:91:02:93:27:42:fe:f4:c3:66:06:
45:9b:40:6b:1a:70:79:d7:86:fe:10:89:75:de:89:7d:c9:d0:
04:48:69:bd:7c:c7:3b:07:22:a5:2d:a8:97:20:e0:2d:30:e1:
37:5e:eb:e1:80:96:8d:34:8e:0b:1e:45:2a:a8:18:e0:4b:b4:
3d:c4:2d:ac:6c:33:b5:3a:36:cc:32:2d:e4:e7:86:c5:f0:71:
d9:a4:2d:7d:0c:6e:e6:ab:15:49:ce:26:c9:77:05:c9:e8:15:
b4:28:52:b3:10:ff:73:7f:29:f4:8b:43:7e:2e:6f:a6:be:47:
67:a0:ad:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 08:13:41 2026 by rpki-client