
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e12ae43-44b7-39d9-ace0-d46255696345.roa
File: 8e12ae43-44b7-39d9-ace0-d46255696345.roa (raw, json)
Hash identifier: izJ0bBZkWperqSKzNScIwBXRuD3RH/CvdYKqMh9nfYs=
Subject key identifier: 7A:59:9E:D3:96:E2:98:48:B5:C9:6B:20:C9:8D:DF:46:35:09:AF:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119D3083F1E97B2180B0D3C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e12ae43-44b7-39d9-ace0-d46255696345.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33660
IP address blocks: 76.149.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:30:83:f1:e9:7b:21:80:b0:d3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=01014f95-4b15-4a7b-a69b-271da747d622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a8:41:7f:4c:6b:de:bd:74:84:b8:0e:51:16:
2c:b8:b4:5e:58:c9:a4:cd:0b:08:ea:3b:72:52:f8:
1e:03:43:20:1c:64:63:1f:8b:40:a1:a4:4a:e9:d4:
dd:d2:af:9e:62:a6:26:01:37:78:ee:57:8f:8f:f2:
66:94:2f:3d:02:2e:c5:1b:2c:79:54:a6:43:46:6f:
48:cf:89:e7:db:88:54:70:55:26:66:0c:fa:aa:b7:
c0:44:cf:d3:5d:98:b5:67:80:06:3a:96:b3:07:bd:
27:bf:c7:c0:1f:0a:ec:10:0a:9e:6e:2f:25:39:3a:
0e:b4:90:6b:58:61:ee:8b:9f:43:67:7c:6b:81:8c:
50:c7:0b:43:be:1a:bd:6a:05:31:0b:d4:bf:69:00:
67:5c:fc:9a:85:13:70:bd:38:3d:56:05:cf:60:72:
d9:96:26:0b:a8:2d:14:39:e1:2a:f6:bc:b1:0b:3a:
fd:5d:98:57:85:af:b0:34:23:c8:21:83:8f:a8:08:
82:09:62:c1:b6:cc:fc:55:6b:60:0b:b9:d2:bd:9a:
a5:90:03:7a:ea:40:c4:8c:b4:51:f2:ec:c9:1a:40:
9d:4c:bd:f5:0a:f8:db:78:33:1c:a9:fe:2c:0f:af:
ff:06:69:75:b2:8d:0a:7a:f2:ae:d1:e7:58:01:21:
5f:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:59:9E:D3:96:E2:98:48:B5:C9:6B:20:C9:8D:DF:46:35:09:AF:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8e12ae43-44b7-39d9-ace0-d46255696345.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.149.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b3:38:c6:05:35:b2:f8:12:a8:71:68:e7:37:5d:9b:17:7f:d5:
71:dd:cf:99:69:0d:f9:c3:d0:8d:22:02:92:4e:0a:12:5e:1e:
61:ec:2b:7b:d1:e8:47:ce:77:59:92:89:67:69:82:d7:a1:cb:
7b:53:fb:07:fc:70:bb:23:73:88:7d:7e:5d:7c:b0:e8:90:41:
7d:81:cd:69:8a:f5:2f:a4:26:ed:9b:80:4d:2e:ea:3f:41:50:
d2:21:27:7d:06:cb:ce:aa:e7:ce:ab:25:09:b6:0b:97:36:79:
ad:d1:4e:20:44:ee:c4:27:7d:d5:90:40:e3:f0:97:d7:ea:54:
f9:78:85:73:a7:ab:30:5a:30:f4:b7:bf:a2:4e:82:72:4c:1d:
eb:39:f5:16:cb:dc:18:12:26:df:98:83:b4:09:52:a7:11:16:
3a:76:e5:2c:6f:ad:d8:5d:88:f3:4c:94:c1:fd:74:ab:2b:f3:
42:3d:5d:1a:46:ea:c2:d1:95:18:36:b9:10:a0:5a:39:19:bf:
ef:a0:1a:37:cc:7d:36:a9:a8:1b:3f:1c:23:0b:9d:b0:57:b8:
7c:74:8b:53:df:e8:05:16:27:cb:7e:6f:5b:28:5e:35:f2:c8:
d2:6a:30:44:2a:19:e0:54:8d:6a:51:bc:19:03:fb:97:39:7f:
e2:ff:4a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 01:31:56 2026 by rpki-client