
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35869f11-402f-35b5-9ea2-9ab6628e112f.roa
File: 35869f11-402f-35b5-9ea2-9ab6628e112f.roa (raw, json)
Hash identifier: ewlVqqZtByZIp52nCs3AdwqDaVBI9CTk7pD7ND28+1w=
Subject key identifier: C3:43:79:CC:51:FA:74:F9:D1:0B:0D:55:42:18:74:3C:8C:C3:0B:E5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5CBCD8695FC5288D4A4D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35869f11-402f-35b5-9ea2-9ab6628e112f.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 76.150.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:bc:d8:69:5f:c5:28:8d:4a:4d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=3dd2fbf7-6f7f-4280-8f00-d5470ac8d571
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:8b:30:42:19:7f:04:51:fb:d1:79:da:5c:
67:0f:4b:df:68:0e:fe:21:51:02:ae:86:96:ef:c7:
69:d2:ab:4b:d7:a4:7b:35:ed:8b:7c:d5:ee:53:d0:
65:cb:f0:aa:23:5b:e3:95:8a:08:56:b8:06:43:72:
0c:34:7f:e5:c6:2c:7f:de:32:64:6e:0e:be:6b:bc:
68:71:96:33:3a:b6:12:b2:aa:a5:06:86:fb:ef:0d:
02:b2:35:f0:83:a1:55:b4:5f:31:74:ee:ac:6f:32:
98:81:88:ad:b7:70:61:45:2b:ef:44:39:07:38:15:
ea:b5:50:0b:aa:14:cd:f2:21:19:f9:91:a4:ab:bf:
07:da:46:12:05:b3:42:85:92:0e:de:c9:d0:ea:46:
d2:bb:47:d8:0d:ab:49:29:41:c3:1b:c0:9c:bd:f9:
e7:74:10:d1:f3:ce:f8:f7:3d:3e:7f:84:19:2e:78:
56:61:51:74:ba:b3:c8:78:fd:b6:b8:f5:09:9e:fd:
1f:3d:b1:32:97:ea:04:7e:0f:e7:e3:dd:b0:82:36:
56:2e:fe:a6:0c:33:50:92:59:0e:ac:2a:cf:f7:d6:
c2:c2:72:cb:7e:3b:97:e4:40:a9:d7:01:06:8c:89:
e1:4c:24:ad:83:c5:19:ff:5c:2b:bc:51:84:70:13:
9d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:43:79:CC:51:FA:74:F9:D1:0B:0D:55:42:18:74:3C:8C:C3:0B:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35869f11-402f-35b5-9ea2-9ab6628e112f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:cf:40:96:0d:25:e1:cd:56:c1:e9:3c:5e:15:b1:f1:df:78:
ec:05:8f:fc:58:f5:e6:9a:8f:04:ac:29:50:f8:05:bb:3e:4e:
66:10:7c:90:2c:f8:d9:51:88:9f:ad:d1:b1:18:6a:15:cf:ec:
e5:30:e2:79:19:49:69:19:17:89:89:6c:97:5a:a0:89:98:7c:
d9:0b:b2:82:d4:7d:fa:10:e1:18:de:f0:eb:2c:bf:22:a5:fc:
f6:24:78:e2:db:9d:f6:1e:c3:06:ed:1a:91:5a:36:a5:34:21:
83:c2:be:0c:92:88:e4:25:1f:1e:53:3e:be:6f:fe:89:38:f8:
47:2d:df:e8:be:44:56:49:32:c6:81:5e:5a:f2:c4:34:93:78:
54:c1:42:64:61:ff:27:ff:c1:d5:ff:0e:60:c1:75:a0:45:6f:
45:7d:82:03:e9:d6:ea:e0:7c:a4:7a:2d:b5:27:f9:63:3a:6c:
10:3f:48:1f:15:66:46:80:ea:00:92:b1:3c:7c:ff:ab:b0:72:
a4:3e:30:28:b4:62:53:e3:fa:82:5e:ae:4e:97:2e:b5:2b:de:
62:b0:12:d2:fa:6e:7e:91:2e:1a:01:13:5a:be:4b:8e:09:98:
b6:55:19:a3:bf:6b:13:fc:5b:8b:65:26:5e:06:b1:59:40:72:
e5:81:b8:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:54:29 2026 by rpki-client