
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa
File: 28f43666-e719-3a3b-842f-19d63e1d9c71.roa (raw, json)
Hash identifier: i/BNwqUClmKm6P4FpCwHOkhnI9R7zYtqFVUXaA7WNS0=
Subject key identifier: 08:FF:19:2A:39:37:1A:22:D5:99:2F:D5:54:50:30:12:6F:C1:64:FB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC926A5C62DBC44BA65940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 76.143.248.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:92:6a:5c:62:db:c4:4b:a6:59:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=5c34b1c9-c962-4903-9b58-2d53b17ae90e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:ae:f1:84:46:77:55:ce:4c:26:cf:af:41:38:
33:63:78:ed:41:19:28:c6:89:aa:76:35:ad:14:71:
0f:66:4c:7f:e7:0d:c7:5a:10:9e:a3:77:ec:a2:3c:
01:ba:a6:f7:93:7b:8d:ef:5a:90:a1:17:1d:79:05:
40:63:6e:41:ba:ba:c2:d0:09:fd:76:5a:6d:c2:a1:
e9:a4:e7:2e:cb:8a:01:fb:6c:ec:b5:c8:44:a4:a1:
85:b1:e5:d5:d0:47:3e:de:19:04:09:ff:0b:e4:77:
85:b6:38:af:d0:a8:14:9a:21:f0:3c:6c:78:06:4d:
65:6e:d6:f4:b5:42:15:d2:2d:bd:05:5b:9b:a7:7f:
72:44:58:fc:1c:ab:6b:cc:f0:c9:16:03:bb:9e:bd:
a3:a7:b6:81:49:1d:0d:9f:4a:13:18:42:d1:07:0f:
04:48:32:f1:2e:f0:40:83:f6:8c:e4:d4:e8:35:c1:
e3:a4:84:c3:b2:69:36:d2:ac:6d:38:8f:6f:56:81:
10:06:5b:3f:a5:a9:a0:50:73:54:0b:50:02:2b:85:
19:cf:c7:2b:1a:2f:3c:60:44:d9:c8:62:9d:12:a6:
16:bb:76:5a:2f:d1:61:50:68:15:7d:fb:60:4a:69:
ab:38:68:9f:fe:fe:af:92:97:79:07:37:f4:b0:6d:
e9:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:FF:19:2A:39:37:1A:22:D5:99:2F:D5:54:50:30:12:6F:C1:64:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28f43666-e719-3a3b-842f-19d63e1d9c71.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.143.248.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:7c:42:b9:57:89:95:09:80:ca:8c:3a:e5:d2:b6:bf:d1:2e:
52:c3:df:ec:f9:b6:50:90:bb:81:32:7e:1e:68:14:60:ad:c2:
fe:cf:f7:3c:fa:36:c4:c6:60:89:b1:7f:59:95:9b:02:30:1d:
cc:cb:1b:50:bb:b2:e9:8d:fa:6c:0f:9d:c1:a5:3f:5f:55:94:
5e:58:35:f8:41:8f:3d:75:3d:44:5f:4c:c2:07:ed:3c:f7:61:
7d:80:65:c1:f5:02:a1:44:de:f9:c2:a0:38:9b:c1:2d:29:c6:
3f:dc:8c:04:84:28:f1:8b:4f:7e:0b:4d:9e:7c:d1:3d:52:75:
e6:5a:36:28:a3:fd:f4:fe:fd:5c:c8:ab:31:a3:e2:41:9c:51:
3e:21:27:c1:63:e5:82:81:bf:f6:a5:9b:4c:a8:19:18:49:7b:
97:99:ea:59:57:fa:e5:7c:85:b8:4d:84:3c:69:12:49:69:51:
83:89:72:58:10:c0:8f:e6:83:e4:69:88:7e:21:17:0f:98:52:
98:2e:e7:40:ab:13:68:92:03:1f:f2:4b:3c:f7:3d:03:a8:b5:
9a:26:66:7a:78:01:3f:54:0d:a2:72:14:df:aa:05:59:04:ac:
5d:b5:19:cd:9a:e8:6f:24:a4:de:19:d0:0d:dd:a2:10:ff:99:
7c:aa:24:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:16 2026 by rpki-client