
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43ecc358-62e1-3480-b562-ac515c719efd.roa
File: 43ecc358-62e1-3480-b562-ac515c719efd.roa (raw, json)
Hash identifier: 3m/82YnIyrS+ifGlNby9igL1E+Xf2bjeDbCNot6sND4=
Subject key identifier: 1F:A8:FF:04:08:61:C0:3F:DE:C0:EB:6F:6B:20:B5:80:C4:DF:3F:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE59066B4EA620DE05708D24
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43ecc358-62e1-3480-b562-ac515c719efd.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 76.133.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:59:06:6b:4e:a6:20:de:05:70:8d:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=956580fc-9280-47e3-8393-3f25dc480413
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:a5:0c:3c:63:c2:80:c6:91:1b:8f:63:5d:7b:
24:47:c0:58:3c:2d:cd:5e:77:9e:63:40:5b:ea:ad:
a7:9b:b1:04:92:85:2c:e1:75:1b:3a:fe:d4:ec:c8:
0f:a3:57:4f:65:15:7f:46:f8:9d:e4:95:14:21:73:
40:3f:ed:8b:bf:4b:03:11:1f:5b:20:4e:8c:ca:d2:
68:fb:be:6e:28:ce:0e:03:a1:4c:4a:11:91:01:83:
66:44:06:ca:42:32:cc:27:2c:53:07:96:ed:7b:c9:
df:09:24:91:bd:84:a4:c2:1e:89:5b:0b:28:0b:fa:
0f:83:1f:23:18:cc:50:a3:c8:5f:32:a3:fc:da:cf:
0f:66:d8:b8:0f:6a:60:ec:15:ec:d0:10:65:e8:ea:
df:ac:00:61:02:f7:e1:3a:04:87:fd:93:7e:99:98:
31:32:1c:ef:b7:61:57:da:58:6b:4e:fa:f2:46:91:
7b:c7:9b:e9:e3:60:d2:fc:be:f3:f1:6d:65:8f:96:
35:0e:cc:74:0a:00:75:9c:69:3f:c9:f4:fb:cb:bb:
0b:f0:6b:ad:bf:dc:5a:28:06:f7:e6:6e:cf:81:43:
41:e8:d7:10:15:d1:21:50:aa:1e:69:14:36:b4:ac:
9a:2f:22:e8:60:82:cf:9c:80:69:1c:d3:77:0a:ea:
97:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A8:FF:04:08:61:C0:3F:DE:C0:EB:6F:6B:20:B5:80:C4:DF:3F:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43ecc358-62e1-3480-b562-ac515c719efd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.133.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:29:89:e0:3f:93:81:81:e2:4b:5f:04:f4:f9:37:11:9c:da:
17:88:ae:18:3f:98:b2:8b:59:06:4a:fb:5e:92:cc:41:73:ee:
df:06:0e:ab:9c:a3:f6:4a:19:6a:93:3f:72:92:80:55:9c:cd:
1a:d4:67:d8:f2:2c:00:6c:19:75:46:56:5d:39:89:b6:c3:e4:
c3:c0:6f:c6:52:68:8e:ac:b1:24:b3:dc:55:ce:c9:22:a1:be:
46:c3:62:27:73:bf:4b:06:f2:53:c1:41:0c:40:b0:31:00:01:
bb:35:11:82:30:e6:4f:f1:89:af:71:7d:ae:37:73:6f:b3:d1:
41:98:2e:ba:84:12:5b:c2:50:9a:23:18:e7:f5:43:f2:79:5e:
6e:5d:2c:28:1d:58:84:87:95:61:7f:e2:8e:dd:cf:14:a4:39:
12:43:5a:8c:8b:f1:c4:1d:58:7c:40:b9:77:5d:a5:98:ff:6c:
4f:19:1d:39:d7:cf:24:cd:15:9c:e5:6c:1a:b0:61:75:21:91:
81:4a:08:e3:3c:f0:fc:a4:a7:c3:72:16:0e:56:dd:59:ca:02:
75:5a:cb:df:61:8e:3f:23:99:20:36:1c:c8:b0:40:71:09:fa:
49:ba:0c:ee:4d:f1:c7:86:8c:a8:08:0f:32:45:67:c0:b9:86:
c4:e6:bb:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:24:57 2026 by rpki-client