
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98691db6-0a3c-3e00-8cf3-da73298a868c.roa
File: 98691db6-0a3c-3e00-8cf3-da73298a868c.roa (raw, json)
Hash identifier: RgH82lZ93IsygkxBXPoXGwsnyJImXPywF7NZzK80pOU=
Subject key identifier: 44:53:D0:72:A9:69:0F:73:87:58:5D:67:7A:46:A2:CC:5B:2E:36:D0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58875C347E747BD94D9700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98691db6-0a3c-3e00-8cf3-da73298a868c.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 76.150.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:87:5c:34:7e:74:7b:d9:4d:97:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=12c9289c-6a36-47ed-8866-ac7ca32e1053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c6:9a:0b:3e:80:67:be:e5:5d:82:91:99:2f:
29:ca:4c:57:75:a9:88:1d:63:88:4d:8c:2d:4a:31:
bc:27:62:36:eb:21:c3:a4:35:b8:9b:cf:d2:9f:9d:
1f:b1:4e:7c:66:ee:31:42:25:60:06:28:68:d4:03:
91:27:bb:f0:83:c0:1c:fb:0f:af:e0:81:15:ed:e0:
f1:c4:23:2f:8b:38:e2:aa:71:58:ee:bb:be:8a:d0:
91:c8:f3:36:1b:e6:41:aa:a6:15:9b:10:5f:6e:4b:
6a:b1:65:fb:83:3f:d0:e5:96:0f:83:d3:49:b4:16:
b2:e8:46:8d:ab:07:1d:96:51:0f:ab:81:08:7d:1c:
58:42:2e:f5:b4:d7:02:14:4a:bd:7e:bd:a4:45:cb:
a6:f3:e2:a3:5f:a2:91:3d:4e:23:7b:35:23:3e:0f:
70:06:95:d2:79:48:73:a9:64:a0:ef:6e:00:30:e8:
56:24:10:d8:83:2f:90:e9:f0:3a:28:2e:20:56:3a:
01:26:07:dc:5f:49:34:ba:19:d1:64:56:47:02:73:
b7:f7:65:5f:8d:7e:9c:ea:f7:f5:50:7c:0e:75:5a:
8e:0e:28:8b:d0:58:36:71:fc:f6:cf:ee:a7:69:23:
01:b1:63:1b:7a:0a:6d:24:e7:32:63:c2:9d:00:c5:
37:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:53:D0:72:A9:69:0F:73:87:58:5D:67:7A:46:A2:CC:5B:2E:36:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/98691db6-0a3c-3e00-8cf3-da73298a868c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:5d:88:75:bc:b3:3a:94:89:90:b1:ce:8b:75:37:af:4b:51:
f5:f0:92:3d:d7:0e:ca:8c:91:c0:02:11:fc:6c:e9:7c:9f:4a:
af:ae:88:ad:d6:0d:de:04:01:c0:e3:6c:84:9c:2e:59:cb:16:
72:ce:67:55:95:a1:cd:e2:c4:d2:3d:94:ce:81:3a:a7:a8:e8:
1e:ee:3e:15:70:c5:aa:ef:ee:55:e2:d7:b8:d3:fc:43:a2:ec:
ba:a2:3a:0f:1f:d6:fc:0c:8e:7a:35:fd:fe:e6:a7:21:28:a2:
66:0e:86:38:74:76:72:1a:15:e4:38:e0:ba:b2:1a:e8:85:3d:
0b:58:47:42:f2:c9:2b:af:87:06:4b:a5:42:89:88:de:e0:04:
ac:c3:5a:17:a0:00:c7:7b:2b:9b:ba:3c:b6:76:53:81:b7:73:
9a:9b:7e:a2:5e:94:d9:51:6f:c7:77:f4:db:17:8a:f7:38:25:
42:c3:00:04:8c:39:76:fd:f4:03:5d:51:f4:f8:69:b0:5d:8c:
c2:d7:53:a4:93:e8:8e:ea:18:58:88:b0:f6:ef:89:b6:e2:da:
d9:56:03:14:61:23:e9:5d:e8:92:89:a1:db:e3:19:36:f4:22:
35:03:bc:83:1e:5a:02:6b:43:9b:01:3a:47:9c:91:62:ba:86:
c6:4b:b2:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:13:40 2026 by rpki-client