
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/873854a8-e7d6-30b1-83e0-72f80ffa20bd.roa
File: 873854a8-e7d6-30b1-83e0-72f80ffa20bd.roa (raw, json)
Hash identifier: N8stHgdCpzmgSJsTDCZfjH+yf4JXgbUlkklM1HlHPr4=
Subject key identifier: B0:2A:58:DF:8B:A3:09:5F:0A:F3:4A:1F:3A:75:87:86:5E:3B:C1:C9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC22CEEAFB5C531D56B990
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/873854a8-e7d6-30b1-83e0-72f80ffa20bd.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 76.127.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:22:ce:ea:fb:5c:53:1d:56:b9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ba63fe79-3ba0-4615-a2d6-851ef99fb04a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e1:e1:b2:98:34:a9:38:94:7f:9a:aa:4b:a0:
5a:35:25:4b:f7:21:59:3a:eb:3b:b6:4a:30:8b:83:
cf:39:5a:26:f6:95:0a:c1:15:5b:85:5a:84:1d:31:
7e:47:86:06:92:38:33:cc:85:40:7a:62:64:32:2b:
59:ff:9f:f5:e7:74:2f:f2:23:af:dc:29:d3:a0:66:
87:22:74:b9:25:a5:bc:c9:80:91:10:1d:f5:0e:36:
d7:df:1c:1b:c3:f0:42:a3:cf:64:27:eb:fa:bf:4d:
bf:ae:90:0f:a9:43:ab:80:1b:b9:d5:33:1b:3b:85:
3a:7a:fc:bc:30:d8:47:b5:58:95:43:6f:6d:07:0e:
63:1c:fe:f7:56:fe:3a:db:41:7c:75:f4:82:7f:07:
ca:64:ec:ac:0a:a5:00:ea:d1:13:d8:82:42:86:1a:
1d:73:61:4d:45:28:f6:ae:b3:a8:4b:3a:f2:51:98:
f1:3b:ac:4f:2f:1f:59:0c:f5:a0:d2:d0:ce:a9:a6:
6c:f1:1c:86:14:e1:1c:83:06:61:a2:66:48:0d:ab:
30:d8:25:87:95:b7:4d:aa:f8:d1:1f:35:8c:c7:13:
83:bc:90:f9:b5:17:4f:51:c5:d6:5e:7d:c1:3d:d0:
82:70:df:5d:76:ad:39:39:80:74:84:a0:41:40:e5:
87:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:2A:58:DF:8B:A3:09:5F:0A:F3:4A:1F:3A:75:87:86:5E:3B:C1:C9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/873854a8-e7d6-30b1-83e0-72f80ffa20bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.127.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:f7:1d:6a:08:71:57:8c:a9:0e:64:bd:53:05:c3:32:4f:f3:
20:5e:23:bb:dc:2c:30:84:20:ea:3b:6c:f4:b2:73:56:15:48:
46:b7:7d:f9:2d:1c:2d:ef:f4:9c:ae:15:a8:53:f2:ac:e0:7d:
9d:c5:9d:56:1f:f0:c7:e8:1e:50:62:2e:3c:26:de:d0:d1:7b:
cc:78:91:a3:88:59:5a:48:67:d1:cf:06:c7:13:51:b5:c1:d0:
b0:9c:c9:f2:61:74:2c:00:f5:68:f6:c7:31:34:32:de:6b:b4:
77:c7:9c:8c:da:7b:c3:49:d8:3b:e4:14:1e:c8:83:56:d4:ce:
22:72:7a:e5:d3:7d:06:47:ec:11:be:5e:5e:e6:86:46:3c:ef:
88:7d:53:03:89:80:b2:b9:8d:ad:a8:16:99:e6:14:69:80:9e:
89:cd:1b:0d:7a:07:73:f5:ff:86:ce:0d:ae:89:a5:77:41:c1:
51:b6:c2:7c:82:1e:2f:8c:af:cc:ea:a2:6a:9a:04:80:b6:45:
66:3a:f5:e5:fe:d7:04:06:a2:32:d5:7b:81:49:1a:e0:17:d6:
f0:78:ed:58:4a:c6:55:a0:5a:6f:1e:c1:3b:63:3d:80:c8:eb:
37:96:aa:d5:52:c8:d4:1b:5f:d5:4c:41:45:6a:a5:80:fa:b4:
d1:ce:22:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:07:14 2026 by rpki-client