
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b1073e2-8b7d-34a3-b05f-3e6159dee3e9.roa
File: 5b1073e2-8b7d-34a3-b05f-3e6159dee3e9.roa (raw, json)
Hash identifier: veNSsNmEKnqCEDKn8Zm3lci4i9CX7sCm84NhBP+Hit4=
Subject key identifier: 30:1C:35:60:0B:5B:78:D8:7B:E7:48:43:86:67:BE:C4:BE:3D:CF:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB65733123DE4453881C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b1073e2-8b7d-34a3-b05f-3e6159dee3e9.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 76.143.36.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:65:73:31:23:de:44:53:88:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=5aa5cad2-4260-44bd-aac3-aeeefa3a5133
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2f:ab:45:a1:93:0b:70:49:cc:8d:37:c7:ea:
6e:3a:10:17:f6:e1:39:b6:da:08:9a:53:52:bb:a5:
cf:55:ca:bf:1a:54:73:b8:26:84:6d:75:55:93:10:
ad:48:02:99:3d:66:a3:6b:a9:86:85:2d:2e:5d:65:
80:58:93:c4:4c:d8:ac:7b:79:27:d0:e0:ff:48:2c:
98:64:f0:26:fa:a2:78:f6:a1:68:cd:49:f3:1a:e1:
29:2b:65:0d:e4:09:c5:eb:3d:c1:85:bd:f3:9b:dd:
a5:61:6e:f1:be:35:17:7a:a5:c1:34:26:f1:2d:c7:
19:a6:28:f6:06:98:67:b3:3e:f5:c0:97:32:26:e8:
b2:dd:49:13:8f:84:f8:7f:08:cf:2e:64:65:a5:41:
22:39:97:49:23:fd:09:a5:ae:4e:38:da:04:c0:30:
10:d0:63:c1:5b:bd:11:8a:ed:fd:31:6e:e5:36:85:
bb:72:70:94:18:c2:24:77:6e:5e:65:fd:46:2c:b9:
22:64:fb:8a:45:86:09:43:05:c1:4f:ed:91:7d:6a:
f8:3a:9d:cf:b4:9f:e2:2c:5f:48:5e:cb:2f:3f:b6:
5d:c7:af:2b:e4:98:1d:a6:8a:fd:37:69:22:87:4e:
5b:d0:08:a3:11:97:c6:f2:7d:dd:12:da:70:1b:3b:
7b:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:1C:35:60:0B:5B:78:D8:7B:E7:48:43:86:67:BE:C4:BE:3D:CF:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b1073e2-8b7d-34a3-b05f-3e6159dee3e9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.143.36.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:92:38:52:d7:c4:a8:ae:38:48:e0:5c:b2:72:a9:d8:3c:63:
8a:c0:74:25:66:27:a8:e5:b0:89:d5:a9:2f:93:5f:e8:99:ff:
c2:6b:fc:fa:c4:0a:98:a4:7f:84:21:ec:2a:2e:73:6a:99:fb:
7b:55:a8:6f:5c:ea:33:6e:84:4a:f6:4d:57:17:28:9a:35:70:
4b:24:5b:79:9c:1a:c1:70:86:70:fa:11:40:4d:53:33:4d:78:
60:1b:c1:81:b6:a1:06:61:4e:0a:26:2c:34:c8:ce:40:a4:88:
fd:d3:cf:18:0a:c5:e0:8b:2e:ce:4f:81:17:d0:a1:e1:6a:21:
5c:c0:4f:08:f5:00:32:dd:83:6d:e2:31:e0:c6:48:80:d3:0f:
86:c5:cb:c1:c3:ad:b8:75:05:fe:d7:00:4d:ba:4c:ca:62:67:
61:f0:17:70:2f:5f:d5:c7:80:dc:d5:cf:51:b9:58:f1:61:49:
0a:38:e7:c7:df:6e:36:99:5d:be:1e:a6:e8:20:7e:2d:c5:98:
53:df:e8:81:cf:10:72:e1:81:b5:23:0a:b5:ac:6b:fa:33:25:
ed:c4:de:cd:77:43:15:c2:bc:9d:ec:82:8f:bc:73:d5:d5:b7:
e6:11:4f:d6:1e:83:70:66:8c:48:54:01:e0:ff:cb:f9:85:f9:
e0:ce:5b:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:20:15 2026 by rpki-client