
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf2d9d9-3f79-36cb-b7be-e82cc420a431.roa
File: 2cf2d9d9-3f79-36cb-b7be-e82cc420a431.roa (raw, json)
Hash identifier: krfxToRB5r835vnCxmXW6NkvhlkOjMorTwECBzE3MBk=
Subject key identifier: 81:DC:9C:4B:58:AF:7D:FA:96:AC:C7:50:7F:72:75:E4:B7:1E:40:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED86300FBC79138C37B3D4E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf2d9d9-3f79-36cb-b7be-e82cc420a431.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33662
IP address blocks: 73.76.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:00:fb:c7:91:38:c3:7b:3d:4e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=2e4b5eef-7352-4cff-8e38-79e5d1b0f83b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:75:ae:b5:fd:ed:4e:39:af:79:78:ca:fc:a1:
c3:90:5f:3e:41:fa:a3:56:43:0e:cf:8d:4b:4a:47:
53:10:ac:ea:65:94:aa:d2:ab:c8:78:cb:04:53:a1:
0a:60:e1:58:8b:ed:cd:1b:f0:af:84:f8:27:bc:7a:
9b:1f:26:55:03:6b:b6:57:71:a5:0b:54:34:3b:4a:
77:8b:f2:ac:29:24:98:0b:42:37:36:d1:78:00:1e:
71:c4:54:4e:15:98:42:fb:fc:d8:13:83:dc:69:2b:
e5:81:64:66:aa:a3:f9:a6:0f:c5:5a:10:05:94:da:
39:e0:da:47:d3:bb:8a:69:bd:68:0c:92:a5:0c:f1:
6b:b9:45:8b:5e:d5:65:58:0b:21:6d:c2:d1:fe:8c:
4a:c0:46:4a:f6:8a:bf:6a:e0:23:e8:16:b7:18:31:
39:d3:06:54:42:52:9d:5e:ea:aa:05:80:2c:b6:3e:
75:23:82:6d:a7:c0:92:96:b3:9c:05:5a:93:2e:13:
f9:19:7f:9b:91:7c:22:57:df:5a:87:63:71:55:47:
8f:34:c8:08:31:58:86:d6:05:ac:6f:87:1c:00:cf:
9d:a9:35:b3:7f:e2:5e:32:6f:9b:ba:0e:54:b1:71:
f7:86:07:25:64:d4:56:ea:42:6f:fd:96:98:19:2e:
0f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:DC:9C:4B:58:AF:7D:FA:96:AC:C7:50:7F:72:75:E4:B7:1E:40:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2cf2d9d9-3f79-36cb-b7be-e82cc420a431.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.76.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:0e:2f:a1:12:a6:02:19:0f:25:ea:a6:b3:bb:bf:8a:2f:9d:
f8:a6:74:88:e7:77:67:90:52:44:fd:76:51:60:a5:b3:98:61:
7e:9e:aa:f5:a6:c1:48:5a:5e:1d:b6:54:14:d2:a9:aa:93:c2:
3a:c8:49:a0:98:2c:bb:67:56:7e:d1:8f:74:e9:fd:bb:41:e0:
64:55:96:18:4f:21:74:9c:74:62:63:cb:7c:90:57:ee:75:88:
72:0f:41:b1:c8:8d:ef:9f:7d:36:b3:d4:91:08:04:c8:df:c1:
61:c2:84:f7:be:ef:e6:6f:89:6c:74:72:ce:50:22:9e:1b:a8:
76:b0:be:1f:ee:a5:0d:f0:81:27:63:7a:e9:3c:40:fb:df:d4:
eb:41:84:56:da:8d:dc:1d:28:1a:bc:6c:10:ec:0f:b4:41:49:
48:06:00:4b:3e:30:49:38:c2:60:43:31:99:96:04:a9:d4:61:
04:57:21:bc:9d:d2:98:b3:02:94:43:d1:aa:fb:32:f1:9b:e3:
ed:45:b2:8c:ae:f6:2e:04:85:18:47:68:c7:4d:4a:a5:db:3d:
31:0f:96:36:10:de:2b:bf:02:a1:eb:f4:17:4c:f6:62:a5:72:
e0:c2:a3:26:4d:10:3e:0e:fd:1d:41:96:65:a9:1f:bb:fc:82:
f4:63:e3:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 20:47:51 2026 by rpki-client