
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
File: 834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa (raw, json)
Hash identifier: EMbX7HyLZzJ6uaaBwndiYCSY3Cd4Eci/2q6zjkZUuak=
Subject key identifier: 6E:F3:AA:9E:42:C2:A5:EC:B0:80:33:BB:6F:2C:C2:80:1A:AD:77:FA
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584EEBECA2EBAE68295D50CB3CC0
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
Signing time: Sat 22 Aug 2026 13:00:12 +0000
ROA not before: Sat 22 Aug 2026 13:00:12 +0000
ROA not after: Fri 20 Nov 2026 14:00:12 +0000
asID: 21433
IP address blocks: 170.248.216.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:eb:ec:a2:eb:ae:68:29:5d:50:cb:3c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Aug 22 13:00:12 2026 GMT
Not After : Nov 20 14:00:12 2026 GMT
Subject: CN=b7dd03ba-f819-49eb-8519-e6e1cf378268
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:fe:5b:dc:94:60:38:6f:69:62:7d:c3:e9:c9:
56:2e:d2:df:9f:0d:10:b7:41:f8:01:09:24:52:17:
db:e6:ea:93:33:9d:6c:b5:47:3b:85:94:3a:c1:ca:
3d:a1:15:c2:b8:97:a9:49:2b:eb:2b:18:dd:b0:e6:
ea:ae:f6:91:12:a8:0b:37:86:04:3a:0e:5e:a5:4b:
50:ad:3c:07:99:a1:29:5c:2b:b2:bc:66:b8:06:41:
bf:3e:0b:49:be:93:da:bb:5e:47:18:2a:bf:0f:0c:
8c:b1:09:c9:53:40:c6:46:61:a8:89:20:a9:d9:30:
f5:90:d8:0f:b0:ac:5b:d1:d6:bf:2b:24:fa:0c:32:
65:35:c3:c2:ec:62:f3:60:34:90:c0:9a:d5:dd:be:
9c:8e:d6:ad:38:ba:b6:0a:03:94:67:ab:01:c8:26:
22:37:2c:8a:69:e3:8c:c7:dd:1e:4f:76:10:f7:a9:
28:52:14:b2:36:0b:3a:d7:00:10:37:37:43:47:78:
c6:c6:36:6e:ce:05:94:d5:87:2e:e5:4f:47:5b:56:
6d:a5:ba:5b:fe:bc:e6:e5:c8:b4:cb:b6:b8:75:9d:
48:41:a1:f0:07:91:f4:26:b2:c9:50:7e:5d:7b:7a:
49:d8:bc:03:2d:09:3c:58:b6:22:26:24:cd:05:73:
9f:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:F3:AA:9E:42:C2:A5:EC:B0:80:33:BB:6F:2C:C2:80:1A:AD:77:FA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/834f9b45-000d-389c-b359-0a5b0e3f5cbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.248.216.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:88:c4:10:10:18:78:08:99:87:e0:ea:a2:52:13:fb:b0:20:
f7:bc:51:e7:c4:58:d6:95:7e:23:b9:63:95:ee:9a:e5:9b:ab:
cf:28:70:57:4a:d3:94:31:cc:ee:6f:6f:33:6a:91:9a:b9:34:
f3:77:a2:fa:3d:d0:d7:17:fc:0a:75:a9:8e:56:2b:62:af:42:
1c:23:5a:48:25:3d:30:cd:32:8b:b1:54:47:c0:c0:58:02:7c:
18:c1:e1:5b:2f:f9:69:df:fd:ee:24:74:9a:9b:8f:7f:77:f6:
6b:03:df:71:b6:71:b5:23:17:18:47:dc:1e:37:5b:bc:a3:4d:
1f:aa:b7:48:c0:25:2b:c9:0c:74:ac:dc:7f:43:44:0f:e6:a0:
26:ea:59:65:74:62:11:a9:8c:a8:13:d8:0d:85:95:e5:20:f6:
a7:19:90:de:44:c0:17:23:fa:0b:08:4f:d1:fc:4c:10:90:e8:
dd:37:21:2d:24:8d:21:51:48:a6:e0:ea:97:40:05:c6:4f:78:
e4:ec:81:10:f2:10:5e:80:dd:6a:61:ad:3f:64:13:a6:46:53:
cd:ce:b1:c1:63:46:77:b6:39:49:c9:2e:c1:4a:97:64:4d:57:
98:f6:1e:a0:5c:b4:18:ea:9b:8e:ef:4c:95:13:eb:f6:df:57:
a3:02:c9:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:44:44 2026 by rpki-client