
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbb315df-7771-3740-9793-f737a81435a6.roa
File: bbb315df-7771-3740-9793-f737a81435a6.roa (raw, json)
Hash identifier: c7lPGeLLW8oAmRg5hnP2S9roTl+R82l4vAAjWOqD64Q=
Subject key identifier: AE:0B:EC:17:A0:91:F5:AE:3A:57:B4:A9:D7:A3:C6:AC:53:7C:4A:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5CCBA7DF09C01BC96B3D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbb315df-7771-3740-9793-f737a81435a6.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 76.16.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:cb:a7:df:09:c0:1b:c9:6b:3d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=582fe920-68dd-46d4-9a75-21eebd611b30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:01:ec:eb:72:b0:8d:71:96:06:68:c5:26:
55:77:3a:3a:71:29:13:8a:24:66:a7:8c:ac:59:23:
bb:df:70:95:14:7e:70:ba:87:49:b9:6c:42:16:f7:
40:4a:27:38:3e:8b:4a:e2:74:0c:1c:9a:71:98:d8:
73:d0:35:f0:db:91:88:ca:a8:52:dc:a9:40:a7:09:
d7:f5:d5:df:21:67:af:80:83:57:93:34:c4:1e:d8:
c4:27:ae:b4:03:d4:cc:22:7c:41:35:69:71:52:d1:
64:09:4e:b6:68:1a:9e:21:57:98:f2:00:81:41:a8:
94:63:80:a2:1d:75:87:39:1f:c5:a7:7a:ad:5f:d7:
f6:6a:70:bb:32:f3:01:a7:a6:68:aa:41:45:a9:cf:
b1:22:55:93:28:38:56:ec:13:3e:6f:79:a7:ad:01:
ef:3d:0e:c4:67:d0:69:33:bb:3f:f2:23:b8:f2:42:
b3:e1:02:5b:fb:35:66:c1:dd:50:1e:d5:b1:6d:38:
0b:7b:4c:d2:1a:7b:22:d1:14:26:98:8a:bf:1f:32:
3b:7e:ec:e4:1f:fa:99:03:4a:34:4a:7b:e8:64:6a:
a3:fa:11:96:e7:89:a8:01:91:47:c4:0c:ac:3d:10:
1a:98:2b:40:80:16:68:4e:35:34:7e:80:b2:db:cc:
74:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:0B:EC:17:A0:91:F5:AE:3A:57:B4:A9:D7:A3:C6:AC:53:7C:4A:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bbb315df-7771-3740-9793-f737a81435a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.16.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
86:d6:64:76:f2:9d:5f:2c:d8:15:5a:f9:f5:45:63:3a:7d:3e:
d9:29:29:16:73:2f:7c:76:a1:45:15:d2:52:6e:b8:1a:0a:24:
0b:27:6d:09:ae:d0:09:43:d6:f2:36:e4:f4:bb:12:eb:11:4b:
a4:7c:5d:d5:f2:cd:63:ec:3c:11:03:ab:79:df:28:94:40:dc:
3d:03:30:b6:ae:98:a3:2a:ea:aa:98:7c:a9:0a:f1:02:e1:ca:
dd:8c:59:ee:2c:97:ed:83:aa:93:c6:db:3d:29:04:54:64:04:
27:2b:d2:f0:da:59:c8:d2:67:09:3c:cb:dd:b4:0f:5f:38:ab:
bc:b2:67:01:ab:38:20:7a:6e:10:14:44:41:84:8d:7f:74:95:
71:e9:23:e6:65:91:57:63:dd:91:ab:30:b0:76:23:60:69:5f:
79:db:d0:cb:bf:55:ab:97:35:d3:ed:da:20:b2:af:1e:29:75:
45:ea:cb:e7:07:d0:0f:5e:55:ac:52:0a:8a:2b:d4:f9:6d:83:
7d:9d:fe:13:13:fc:46:9f:75:8c:29:84:4d:5d:b9:87:d3:d7:
20:ba:f1:82:1d:c0:13:64:86:57:b9:25:c4:1f:20:b6:4e:be:
f5:7a:c6:9e:2e:52:bb:d7:7b:79:d4:bd:cd:f3:7b:44:2f:69:
f4:f8:6c:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:08:49 2026 by rpki-client