
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576fa5df-0947-3800-b805-03c03bb1dd25.roa
File: 576fa5df-0947-3800-b805-03c03bb1dd25.roa (raw, json)
Hash identifier: 85Q+WoRMFi511atrbNSeJdUqhYE5376+uSPaoygCkdE=
Subject key identifier: 2F:40:26:30:18:0D:C5:AF:18:90:9F:E8:24:FB:4E:04:3C:F7:9C:CF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B95AA8CA705F121A6913CA940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576fa5df-0947-3800-b805-03c03bb1dd25.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 33668
IP address blocks: 76.20.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:aa:8c:a7:05:f1:21:a6:91:3c:a9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=bbb666e0-fa1b-40ce-8149-97f41332eb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:03:0a:ef:17:03:11:3a:84:8c:c4:56:90:44:
94:34:2a:24:2b:bd:1e:8a:bd:42:d3:9a:0b:24:bc:
ac:be:dd:39:d2:d9:34:e7:c8:67:57:06:de:67:a1:
9e:63:ff:86:d4:ac:d2:9b:d0:9c:90:16:54:bb:7b:
b6:b3:54:dd:7e:f9:f5:55:0b:d9:8b:49:6f:d3:c1:
06:7a:b3:1e:1b:bb:bc:d2:09:2c:b5:43:ce:33:6c:
79:42:e9:dd:c8:38:26:ec:a3:b7:24:a0:84:aa:a2:
c0:eb:8a:2c:ad:57:4e:ae:38:e5:22:be:04:0b:2a:
52:ad:16:43:23:7b:49:55:86:73:b4:9d:37:bf:4c:
db:cc:a6:1d:af:61:14:1c:d6:4c:52:d5:b1:1b:82:
45:c4:27:8f:3c:9b:a7:4b:6b:b1:b3:b3:6c:ec:bb:
93:88:9a:5c:44:30:4f:95:e5:a9:01:19:d9:f9:aa:
6e:b1:ad:98:6c:b2:a3:21:c6:02:47:d4:13:fe:1b:
8e:5c:d9:4e:47:01:ef:f2:fb:3a:df:4b:f2:28:17:
3b:bd:2b:2b:d1:7d:3a:ae:12:b6:22:26:c2:92:17:
7b:75:92:c8:ce:80:6b:e5:c9:47:94:c6:28:0f:c8:
47:9c:02:16:3d:63:33:18:26:ea:f7:3e:47:5a:4c:
59:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:40:26:30:18:0D:C5:AF:18:90:9F:E8:24:FB:4E:04:3C:F7:9C:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/576fa5df-0947-3800-b805-03c03bb1dd25.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.20.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:52:7c:24:17:a1:97:73:45:54:55:46:44:68:eb:52:a7:28:
15:e4:c2:15:0e:e0:68:34:72:26:a4:b3:2c:63:2a:67:18:5b:
a7:57:86:5e:5a:10:75:45:3a:91:2a:f1:fc:2c:ff:92:b9:6d:
f1:4e:ea:63:53:3f:cd:94:b2:62:f5:da:1b:f6:95:03:bc:d8:
62:b5:5f:bc:a3:54:e2:53:1d:9f:5c:2b:5d:da:b0:3c:dc:06:
3a:74:f0:65:c7:e7:a6:62:15:6b:54:fc:a0:59:98:8d:3a:40:
a2:1b:a8:6d:9f:d2:5d:d0:fa:57:c2:69:66:9f:52:b8:ce:f6:
19:5f:2c:19:b8:a4:0d:ae:bc:a0:0d:04:25:0e:91:96:7f:79:
7a:f1:9b:4e:60:cc:41:15:41:73:43:0e:7a:d5:46:65:5e:2f:
1e:e0:12:64:f2:ad:08:23:03:0c:08:d7:67:0a:c3:70:c2:da:
a1:7c:f1:c9:0f:74:1a:3f:97:42:1a:4a:22:7b:59:ba:20:61:
cc:1a:59:ee:6d:51:c6:53:c6:e9:4c:a2:0f:c0:07:7f:0e:29:
bf:a2:d0:74:84:70:a2:d6:d8:07:9c:1a:0e:aa:b8:80:27:75:
62:a3:06:d5:80:3d:f1:82:1c:6f:b9:12:59:03:de:ff:33:f3:
b3:c9:a9:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 00:06:29 2025 by rpki-client