
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa
File: bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa (raw, json)
Hash identifier: dA5Xs9OaYltmhz2EMn4KYloMExHcLcFeGmNNYe43OVY=
Subject key identifier: 0E:BE:96:9E:80:F4:99:12:05:B7:C8:A9:05:DD:F7:A5:77:78:B1:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE580585C9A4302CEE2B9E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 67.176.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:05:85:c9:a4:30:2c:ee:2b:9e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=a74de262-5999-488c-bcd2-7c3cfd8ad7c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:3f:1a:80:60:f0:59:d1:b1:e3:82:29:52:c2:
68:61:c6:91:ca:26:bf:f6:00:e4:a0:c6:d4:bb:b8:
58:11:d4:73:77:b6:b7:fb:ae:d2:a9:a7:10:1d:8c:
d3:1e:46:0b:ab:ba:2e:04:b2:2d:42:df:90:7f:ac:
4a:6e:59:6a:25:f6:2f:c9:0a:18:1b:9f:9b:60:55:
55:aa:db:f4:f4:63:f6:2f:ba:f8:b0:5d:8d:57:20:
2a:7c:f6:cc:af:0f:cc:04:3d:64:1d:ff:43:15:54:
5b:52:fe:0d:39:38:1f:9b:c0:0d:b2:12:f6:29:bd:
12:97:27:6f:99:d5:10:78:8e:89:c2:63:6e:bc:55:
d4:72:89:5b:fe:de:6a:d0:98:a6:cc:d6:5b:fe:5a:
ca:94:7d:ff:b7:da:80:39:94:80:65:49:e9:56:63:
3d:bb:99:e1:b0:a5:20:ff:89:0e:9b:d3:a1:28:60:
12:36:c2:27:40:76:39:a2:00:8d:83:b8:35:9c:99:
29:e4:af:ac:33:73:23:c1:4a:3c:5e:e0:9a:b2:f9:
59:e1:33:80:a2:1e:71:2b:9b:27:2c:f1:ef:34:ca:
fc:a8:4b:d8:14:44:32:4c:e0:0c:6d:8b:bf:25:e8:
ca:e7:24:c0:28:22:05:60:3d:8b:e6:a1:fa:2e:7f:
9e:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:BE:96:9E:80:F4:99:12:05:B7:C8:A9:05:DD:F7:A5:77:78:B1:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bb524fc7-f5ba-3f17-8399-05195d1f6bbd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.176.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:30:40:ea:cd:ad:31:02:26:1d:27:54:8a:ea:75:a2:63:4f:
01:98:96:84:d9:13:12:39:71:33:62:c4:e2:52:1a:91:e0:f8:
46:ba:96:2f:90:07:2e:11:26:46:1e:c2:6a:7d:51:d0:36:64:
b1:e9:db:cc:76:61:66:ce:0a:ac:77:ea:8a:22:75:58:81:30:
bb:42:37:7c:d5:ee:ae:83:65:25:6f:6b:a8:26:29:bc:3c:54:
82:8b:d4:3a:b3:07:27:07:5d:d2:90:7c:8a:de:89:58:f1:e7:
21:e8:80:bc:c5:b2:ad:5a:11:cf:10:71:7a:d6:13:b3:54:2e:
a3:49:73:7a:9b:4f:b4:ba:7b:1c:1c:cc:46:08:c2:95:e5:3d:
74:67:4f:d4:dd:3f:ab:c8:c2:fa:6b:b5:d2:98:34:e6:76:ee:
8e:31:ea:54:aa:7f:02:d4:fe:22:73:02:6d:b5:7e:85:56:39:
e8:50:88:80:90:bb:29:0f:c7:a8:f4:59:21:2e:0f:38:a1:a5:
91:a7:83:0a:ae:6c:9e:b3:95:c4:73:85:b1:59:44:69:bb:cd:
48:d8:85:bd:fd:f8:37:b1:9d:46:0c:54:e6:21:3d:01:62:e1:
43:e1:77:fc:f4:7b:3c:f4:7a:c8:0d:21:1b:7e:08:a9:5d:19:
6a:a0:ca:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:19:57 2026 by rpki-client