
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
File: a41a09c6-4c03-3685-a8a0-213adac37033.roa (raw, json)
Hash identifier: IwKHZGfGeEPwAnWtPI/v1s1JjGrbpm5h61dp19qtlRQ=
Subject key identifier: 77:B2:BA:07:E2:D0:93:77:D0:E8:EC:D9:25:FC:05:98:29:7F:6A:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58FD7D475DDAE4F8ECC080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 76.102.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:fd:7d:47:5d:da:e4:f8:ec:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=290c81d5-4928-44d6-90fe-2ba4582c40dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:d8:6c:40:b4:29:9c:9f:5b:8c:6a:c9:54:4a:
8a:9c:cd:de:98:70:83:53:d7:5c:30:20:24:5c:ac:
de:b3:ad:c5:b0:3b:0b:25:83:c7:f4:9c:37:e2:45:
71:a5:92:92:5e:fd:c7:ae:13:2e:67:bb:97:ee:22:
d5:be:0f:a2:bc:dc:58:49:1f:c7:75:ac:b9:6f:33:
46:57:f0:e3:a6:1f:a1:b0:28:b6:a9:ee:6c:db:8e:
fe:90:80:14:94:9e:d1:0b:91:b3:a6:78:41:2a:47:
ce:60:cd:75:20:01:d0:ba:b7:b6:4f:1e:bc:ea:5f:
5e:c4:7d:07:93:5f:6f:e6:34:24:12:1a:2d:b6:f8:
9a:57:e8:3f:c5:d0:ff:75:3e:14:71:ef:6e:35:29:
32:99:35:95:9a:7f:54:00:a7:1d:64:96:0f:6d:89:
0a:87:2a:b3:b7:4e:6f:8e:eb:3d:33:db:61:2c:d2:
f0:37:90:d3:27:90:66:4f:a8:97:00:c4:1d:57:35:
74:93:e5:7b:43:ca:61:47:30:4b:ea:b7:7b:3b:e6:
79:04:ba:0c:b2:86:15:9f:b2:70:c0:cd:fe:38:cb:
05:f6:70:a1:db:c7:55:1d:08:0e:54:14:6d:97:61:
af:11:41:15:c7:03:56:e7:63:c2:d8:af:86:98:9e:
63:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:B2:BA:07:E2:D0:93:77:D0:E8:EC:D9:25:FC:05:98:29:7F:6A:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.102.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6b:b5:c3:b8:8e:59:b1:78:5a:fb:4d:68:85:fb:ee:ed:5f:68:
8c:15:1d:4c:72:60:bd:2d:c1:30:01:46:9d:58:52:b4:0e:d9:
f1:44:d8:ea:9f:61:1e:9f:25:2e:97:85:4b:b3:8a:ab:f9:ed:
e4:48:82:b5:ab:6e:f8:d6:ed:f9:52:bb:9d:63:96:bd:15:0c:
07:e6:24:2c:98:8f:e1:d6:7c:3c:b0:70:8b:65:d8:30:70:0e:
ce:fb:8a:11:83:1d:12:2c:88:74:1f:44:ff:54:5a:6c:cc:c9:
b0:0e:df:7b:90:bb:48:a7:2b:47:b7:68:e3:08:38:08:bb:9d:
82:cb:7d:bf:da:5d:04:c0:99:db:97:a3:3e:80:77:5f:e5:a0:
38:ae:6c:29:51:3d:ad:1f:fe:13:51:32:87:d9:de:ad:44:99:
40:f7:89:f8:91:6d:f1:7a:e5:a3:d5:7c:89:55:99:39:67:b2:
0e:bc:d4:f0:24:e8:61:dc:24:02:36:e8:83:33:16:a7:4c:d5:
cd:2b:6d:0f:18:ab:36:d7:c9:da:b1:44:59:cd:2f:02:2b:35:
ea:84:de:9f:99:14:e5:72:63:dd:8c:95:a9:9c:be:17:32:ed:
3e:26:aa:df:f3:ca:23:c2:81:47:d8:5e:0d:a6:45:b9:40:53:
28:c9:cf:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:51:25 2026 by rpki-client