
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
File: cb33f4ca-7864-3f1e-854d-1cec059ee046.roa (raw, json)
Hash identifier: pI8v834GPYDJw3DUr8/Z/7xsOL5FP0hVZvWe9HMIOmo=
Subject key identifier: 71:21:CA:86:83:64:71:55:43:B8:62:F3:C2:AF:4D:3E:58:BA:AA:C2
Certificate issuer: /CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Certificate serial: 010D0C9F4328584F89A879B83FADE1F358ACB500
Authority key identifier: 98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
Signing time: Sun 18 Oct 2026 01:00:13 +0000
ROA not before: Sun 18 Oct 2026 01:00:13 +0000
ROA not after: Sat 16 Jan 2027 02:00:13 +0000
asID: 25899
IP address blocks: 67.210.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Nov 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:89:a8:79:b8:3f:ad:e1:f3:58:ac:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e4672ea6-d1c4-43a9-bee1-8da135ae3ff4
Validity
Not Before: Oct 18 01:00:13 2026 GMT
Not After : Jan 16 02:00:13 2027 GMT
Subject: CN=2cded60c-f850-4ecf-8ebf-87723084548a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:94:36:0d:cd:6a:48:66:57:9b:e7:92:fd:a1:
b9:be:99:55:ab:f2:39:cf:3e:fc:29:1c:bb:63:3c:
68:2e:f6:ee:19:c0:33:6d:c5:ce:cb:8f:11:6a:f7:
3d:40:09:7d:6c:eb:19:82:67:df:af:1d:17:0c:6d:
6a:58:97:2f:68:cf:9d:c2:fd:7f:07:72:e6:50:be:
87:83:7d:9a:1a:20:cd:b2:67:e7:18:17:ff:df:8e:
c0:a7:43:41:40:83:11:70:fa:d1:13:12:95:66:7b:
71:02:1b:12:97:ef:7b:88:a4:a1:94:a9:7b:ce:f5:
9f:43:39:5c:9e:2f:47:17:ad:53:b8:b2:aa:be:c4:
e2:14:f5:50:41:93:be:86:f5:63:74:46:28:b2:89:
df:f6:1a:a8:26:e4:7f:bd:2b:29:9d:51:b8:02:3d:
5b:6e:df:56:e0:e3:d2:00:66:6e:b9:70:16:98:24:
3b:e0:32:ab:5f:4a:e9:e0:ab:07:4e:f6:9c:d7:b1:
9e:f6:5f:d6:89:10:0e:f6:04:c9:18:db:bc:58:17:
47:6f:2a:ae:bf:ac:fd:03:bf:e0:d9:99:87:fa:cd:
42:bd:cc:a0:82:ce:9f:3d:5b:7d:61:7d:d2:85:29:
c7:5b:74:e3:c4:a0:83:29:dc:54:1f:c5:a1:ef:20:
61:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:21:CA:86:83:64:71:55:43:B8:62:F3:C2:AF:4D:3E:58:BA:AA:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/cb33f4ca-7864-3f1e-854d-1cec059ee046.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.crl
X509v3 Authority Key Identifier:
keyid:98:4E:41:F7:DF:D5:FB:80:60:E3:1D:EA:AB:F0:0A:C0:6F:B4:4A:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e4672ea6-d1c4-43a9-bee1-8da135ae3ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
67.210.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:b0:bf:37:11:e9:af:cb:2a:29:a9:c5:44:1d:ab:75:85:48:
02:87:ff:78:dd:d2:31:b5:d5:56:69:46:29:3e:ea:f8:30:f3:
81:a3:24:b2:6a:78:c4:a4:a1:0c:ee:20:cf:11:02:00:09:4d:
4a:a4:a3:fd:04:1d:37:91:79:34:c4:3a:bd:46:96:29:62:55:
98:1f:e1:2b:33:f9:9e:58:42:0d:c4:cf:b6:2c:89:f3:d6:d4:
88:38:70:33:79:bd:32:25:f8:8b:31:fe:ba:8f:3f:93:2a:f4:
c4:b4:f8:eb:25:9f:b4:ec:ed:16:d6:0f:a1:16:40:3e:d0:96:
e7:36:a8:ea:0e:a7:ab:13:9f:aa:ef:3a:54:a6:e6:7e:bb:89:
64:ef:f8:19:04:7c:06:58:40:61:ea:0e:1b:f3:c4:06:3f:e3:
43:a9:05:43:0c:0c:ea:4e:11:17:bf:a1:fc:d8:f4:3f:fe:d9:
44:78:de:c5:03:aa:c6:37:d9:8b:f9:32:54:7d:04:e9:35:d3:
bb:69:14:d5:80:eb:f6:b1:5d:bb:94:af:05:b3:ea:10:a2:ea:
9c:b1:f8:6d:5c:06:52:3e:87:0c:52:d0:6f:ba:db:6b:43:93:
9f:4a:c4:95:2d:6b:89:1f:22:17:fe:69:65:a7:b4:b4:f2:29:
20:34:d6:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:03:46 2026 by rpki-client