
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bc7b8d9-70bf-3553-9d60-e387474f3ca5.roa
File: 9bc7b8d9-70bf-3553-9d60-e387474f3ca5.roa (raw, json)
Hash identifier: dexYBQ6K+cLq5DA82xe10MVA3f4Nygrb7W+heNmhL+o=
Subject key identifier: 16:EF:50:F2:47:17:5E:95:75:08:F9:62:C3:97:6F:BF:91:50:6C:9C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B1D8B84CF7F8AFF386060
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bc7b8d9-70bf-3553-9d60-e387474f3ca5.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 76.98.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:1d:8b:84:cf:7f:8a:ff:38:60:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=58b1c4f4-dfec-4ede-b516-6840eee0585d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:7c:45:59:ab:8d:f4:af:9b:9b:64:e2:70:a1:
bc:f8:9e:99:53:37:60:7d:aa:d4:69:e6:10:8e:61:
4d:92:33:86:53:e1:91:ef:94:ef:6a:0a:4f:27:ab:
d9:4f:bc:02:82:4c:f6:ad:aa:f9:fd:45:07:8c:3b:
d1:4c:fd:53:f6:e2:9b:b3:d6:c0:ca:d6:d4:57:c6:
19:9c:d5:4d:c5:ad:8b:92:ea:03:c3:2a:20:5f:3b:
68:5c:f8:12:11:0d:84:2d:cd:84:b8:96:d5:d9:24:
2b:3f:2e:71:42:ea:c3:dc:ff:03:1e:1a:3c:e3:02:
01:d2:c9:01:46:2e:29:e8:3f:c9:9a:11:2b:f4:e6:
5f:07:ca:3f:78:73:4d:dc:82:2b:88:04:66:75:17:
ea:e4:f7:e8:7d:2a:d9:63:42:70:5f:4e:83:e8:68:
18:7d:b1:e0:1c:2e:48:f9:d5:67:a9:a0:a3:2d:37:
be:0b:93:09:20:d3:40:18:66:cb:87:a1:b3:6e:a2:
5c:c0:da:39:f8:6b:a5:8d:4d:2a:de:d0:66:f3:30:
9d:2e:ad:0f:8e:5f:e9:d0:8a:5e:f4:16:77:b5:61:
33:31:dc:5c:a8:f6:cc:92:4d:5b:12:05:c3:c5:89:
7b:81:72:9f:66:ca:65:da:2e:48:c8:f1:01:e0:df:
00:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:50:F2:47:17:5E:95:75:08:F9:62:C3:97:6F:BF:91:50:6C:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9bc7b8d9-70bf-3553-9d60-e387474f3ca5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.98.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:18:e5:95:15:e9:a0:85:6c:f8:57:a3:8c:15:db:79:34:a0:
31:4a:1f:b3:56:31:9b:fa:4b:7e:1a:70:9a:bf:6e:b9:dc:4b:
ce:05:ca:b2:7e:24:96:e5:37:d4:93:35:b5:35:16:8e:e5:f6:
90:09:bd:73:b3:87:cf:c7:aa:89:76:42:4a:9f:33:24:50:3d:
d3:c4:02:23:36:87:66:38:c4:a6:70:3f:c0:92:10:3b:a8:52:
72:2d:66:82:02:dc:bc:ce:c3:7e:42:ff:26:8d:e5:c0:12:cd:
0a:c0:96:5d:88:c1:f9:01:c4:51:2d:94:8d:c1:7f:db:6d:52:
1c:5b:83:06:fb:bb:09:c8:6c:1c:99:b0:c7:a2:81:8f:e8:90:
ce:25:f2:29:c8:e2:05:21:1e:86:2c:3f:5d:42:89:b2:03:0f:
aa:60:4d:39:4f:e9:cd:83:95:db:89:06:64:0f:ca:2c:21:2a:
66:8c:fe:e2:58:f4:d8:b2:95:dc:2c:2d:40:e4:65:97:90:77:
3b:8f:b9:1e:db:2e:69:dc:15:fa:3f:02:67:13:70:68:b4:c1:
4a:7f:3d:3a:ef:19:94:d9:aa:3c:32:fd:f6:56:ea:cc:c0:fb:
52:f0:05:68:9b:7b:ab:56:e1:a3:ea:c3:8b:f9:7a:34:fc:10:
c4:ea:74:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:51 2026 by rpki-client