
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2927774-3746-3e85-a1a3-d2a70db08513.roa
File: d2927774-3746-3e85-a1a3-d2a70db08513.roa (raw, json)
Hash identifier: 4QCvNd17yFsS2V/wMrtlABj8yk+P+QoRqdErll5vecU=
Subject key identifier: 0A:78:6B:C0:1A:84:5E:0D:D6:E1:B9:92:3A:8E:DB:5E:BF:74:98:00
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F49804F0934FE6604B125BB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2927774-3746-3e85-a1a3-d2a70db08513.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 7016
IP address blocks: 96.97.200.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:80:4f:09:34:fe:66:04:b1:25:bb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=18e64cef-6b73-4932-987a-dcd5d1271540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:d9:e8:e1:f9:90:6a:d5:87:fb:86:12:2d:0f:
2c:dd:1f:d5:22:5c:4b:3e:c7:d2:93:2e:13:63:79:
a9:54:21:9b:08:e1:24:76:53:62:8e:b0:ce:17:bd:
89:b4:10:22:e5:69:89:d3:72:83:44:18:ca:d8:c9:
54:fb:b7:77:fa:62:69:b6:4b:42:a6:f8:8b:26:3d:
2a:55:ee:6f:07:a4:88:b3:54:d5:bc:8e:7f:94:90:
2d:93:5b:f6:97:bf:4d:97:4a:e8:6a:2f:11:5a:4f:
5e:7e:f3:c2:ae:be:ff:7c:a7:ad:02:7e:62:8e:3e:
f7:55:f1:57:b5:5f:e3:9d:57:33:b7:f0:ac:24:a6:
8e:88:05:e6:29:ab:2c:32:50:43:4d:ad:61:a7:02:
ce:33:e4:1e:38:dd:01:01:2b:3b:0d:71:9d:bd:42:
91:c2:77:09:e3:eb:8d:5d:03:63:61:e0:be:cc:4d:
c6:2a:0d:06:be:9b:2a:2e:37:13:ea:0a:68:bd:ea:
7c:98:3a:7e:56:21:f5:1a:a3:38:9c:a4:3f:7d:8a:
e3:4f:ad:d7:68:8b:16:1b:0d:f7:c5:b4:e9:35:7d:
90:d8:0f:95:6e:cb:0e:8c:63:ea:ab:66:d5:86:ee:
04:a9:b8:b9:e6:d3:ee:a7:ba:86:bd:c5:3c:0f:cb:
f9:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:78:6B:C0:1A:84:5E:0D:D6:E1:B9:92:3A:8E:DB:5E:BF:74:98:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2927774-3746-3e85-a1a3-d2a70db08513.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
96.97.200.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
aa:9b:dc:d2:67:17:ef:80:fc:9f:e0:e7:dd:43:e5:ee:13:4c:
56:d8:a0:33:2d:b5:c6:5a:a6:74:a1:d5:1f:42:40:8e:89:42:
e8:9d:3e:d0:4b:74:03:1e:b9:b8:e9:a1:6f:e7:dd:0b:9f:ec:
1b:81:0f:aa:95:79:54:c0:2e:69:70:5a:45:3c:38:00:21:32:
64:69:cd:94:47:57:0d:48:dc:54:ca:59:87:fc:88:6f:3d:e2:
f4:15:7f:6c:96:54:2f:d4:08:ca:6d:60:48:1d:0d:d0:3b:00:
8a:ce:4d:05:b4:fe:1f:38:25:27:00:d2:a1:bf:ce:77:f6:4c:
6d:8d:48:cd:b4:22:bb:54:50:86:61:4d:1d:ec:5b:7f:e5:47:
c7:fc:b8:5d:4d:6c:0a:e8:07:fa:13:4f:38:80:aa:99:28:7d:
00:aa:b3:73:4b:15:e8:29:9d:25:86:b0:1e:d3:3f:76:2f:98:
23:9f:e9:57:82:77:ff:14:1d:b5:3d:7e:f7:8a:23:16:1e:a4:
96:5a:01:10:87:fa:73:05:10:ad:62:fc:7d:48:09:94:be:74:
79:82:38:f4:1e:ba:38:d3:41:b7:27:5e:b4:99:62:d0:4b:58:
fd:56:de:12:fb:33:79:c4:39:a9:42:20:7c:dd:ae:d7:f2:aa:
d1:80:18:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 23:42:38 2026 by rpki-client