
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d488047b-ee1f-3b6d-9f08-21e81fcd3f15.roa
File: d488047b-ee1f-3b6d-9f08-21e81fcd3f15.roa (raw, json)
Hash identifier: 91ojgZuAulGeaD94hAhGn+u/3RE4Efd2bm2/P9+O5cY=
Subject key identifier: 24:0E:95:BD:58:70:0C:C0:47:6D:34:11:C0:C4:58:94:BD:97:E1:EB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119ED39BB254F9379F156CA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d488047b-ee1f-3b6d-9f08-21e81fcd3f15.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 69.253.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:d3:9b:b2:54:f9:37:9f:15:6c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=cfd3c669-19bc-402a-9dd7-437735ff6aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:20:14:fa:60:e5:65:ad:66:b1:56:4a:78:1c:
ac:5c:4c:9a:95:cb:9c:b8:e9:4f:9a:0b:d4:e2:25:
9e:a9:95:1c:8c:fb:8b:ae:44:12:f2:f2:28:65:f1:
67:46:1f:86:71:e7:a6:04:b6:70:04:93:21:54:20:
16:50:e4:36:ea:53:a5:e4:86:d2:a1:ec:a0:73:6c:
f9:57:75:0c:7f:db:2a:ff:f0:e9:01:ff:a5:3f:4a:
e0:e5:7f:1f:2f:16:99:2c:e1:81:04:1d:d5:25:fc:
7c:57:a3:a7:b0:02:2e:48:07:c1:25:a4:2a:23:15:
52:c9:dd:7a:66:88:c8:cf:2d:f5:3d:ce:99:12:8c:
7b:29:f8:1f:11:d0:05:69:4f:25:78:7e:93:52:af:
83:5f:30:ac:d0:ac:67:6f:38:31:d0:fd:b6:5e:5f:
08:e6:c5:25:1a:0f:4f:a6:41:24:a8:89:f0:30:a0:
6f:7e:f8:75:2c:0a:82:41:06:84:bd:8d:b2:cd:4b:
74:4d:68:88:a8:aa:1a:ed:5c:39:39:dc:ce:af:b9:
2a:ca:42:dd:8e:bd:cb:b9:56:34:cc:e9:9e:2d:9f:
a8:c3:5f:f8:0e:48:95:5c:4d:6f:ed:c3:8b:38:97:
b5:b9:99:dc:d2:77:8e:3b:b0:b8:61:04:fa:4f:2c:
14:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:0E:95:BD:58:70:0C:C0:47:6D:34:11:C0:C4:58:94:BD:97:E1:EB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d488047b-ee1f-3b6d-9f08-21e81fcd3f15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.253.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:8d:ef:ce:4e:42:cc:bc:64:35:47:f4:91:c0:c3:9c:ce:1f:
d2:5d:97:54:2d:ea:31:2f:b1:da:f4:e6:f7:33:55:1b:8b:d5:
39:64:2b:05:68:70:0e:37:7d:c8:6a:2b:af:b6:7c:e3:e5:f3:
ff:23:3c:6e:65:fb:80:27:78:91:fb:87:4f:fc:dd:dd:c0:6d:
b8:ab:74:c9:44:8d:47:d5:c6:03:02:6c:49:d3:e3:79:e3:14:
08:e4:30:71:82:15:72:70:dd:8d:5b:d2:ea:8b:9b:8b:cf:59:
0d:00:bd:84:85:ea:d0:7e:d0:4e:97:b2:85:bf:f4:e2:c1:54:
80:03:50:b8:f1:79:53:09:f5:cb:3f:83:ef:bf:28:0c:5b:f9:
11:83:1a:ca:e6:a3:b0:6f:bc:fc:d5:3d:bb:8c:8d:ac:fc:dd:
87:9f:29:7e:f7:d1:ca:ec:1b:ca:90:90:53:41:4e:e8:b3:e5:
38:1f:05:ee:80:30:6b:1b:4e:43:e4:81:61:68:3c:47:b5:d1:
1f:6b:b4:d0:f7:8a:2c:43:e3:5a:1f:58:d8:ce:1b:2d:e9:56:
d6:93:e4:fd:3a:74:3d:97:7f:54:16:24:90:59:ed:6e:e9:bb:
d8:fb:b4:3e:1c:a1:36:ca:eb:70:63:0d:c3:5e:0c:f6:41:72:
a2:86:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:49:45 2026 by rpki-client