
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be79347d-a9f8-32f9-9e67-14b4ad8a3b2c.roa
File: be79347d-a9f8-32f9-9e67-14b4ad8a3b2c.roa (raw, json)
Hash identifier: 2PhOsQnbamqLvwpfs1AG+XUH5xnkxWI4QCu7gFk405A=
Subject key identifier: C6:4A:CC:33:F2:B2:92:3C:AA:DE:B7:DC:96:AE:BA:A7:53:B7:00:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E697DF51C260211FC5600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be79347d-a9f8-32f9-9e67-14b4ad8a3b2c.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 76.133.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:69:7d:f5:1c:26:02:11:fc:56:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=78363f72-e922-4545-9b6f-778be3560559
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cd:8d:1c:ce:a2:f1:4c:88:43:32:37:cb:94:
05:27:7d:e9:76:89:51:bf:bf:dc:0d:60:52:17:ce:
2b:eb:d2:0b:06:b4:cf:29:b1:f6:37:19:f1:fe:2d:
3c:ff:72:17:17:6c:07:73:87:96:31:2e:8e:97:5a:
67:11:4f:66:40:53:91:09:83:40:af:ff:07:46:5f:
a0:b9:86:8c:57:36:05:59:a7:a0:fa:4f:66:8c:ed:
dd:aa:f2:c6:de:95:4c:cb:07:b2:72:61:de:47:25:
8f:6a:e2:4a:4a:c5:ca:9a:23:82:2a:ae:c3:14:a6:
2e:4f:bf:45:0b:24:48:3b:b5:8a:a5:a1:c4:29:c9:
ac:fb:1a:78:ba:c0:e6:8d:f9:0b:74:af:24:54:7e:
d5:01:02:4b:4a:46:44:a6:ab:2e:c8:3c:e3:b8:ea:
1a:c4:4e:e1:54:5b:b2:33:24:23:e9:68:f9:df:1e:
0b:cf:51:e4:46:03:e1:4b:f7:ed:f4:0a:47:79:89:
82:6f:4f:a0:02:1c:9b:3e:93:4a:7b:31:59:52:e0:
2a:f8:65:0a:7f:ae:72:57:26:94:31:74:2c:f6:7a:
bc:9a:84:67:21:a5:fa:c7:07:4e:45:29:09:81:72:
99:c1:41:f7:81:54:43:5d:71:20:ea:15:bf:80:37:
a2:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:4A:CC:33:F2:B2:92:3C:AA:DE:B7:DC:96:AE:BA:A7:53:B7:00:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/be79347d-a9f8-32f9-9e67-14b4ad8a3b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.133.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:39:8b:69:36:5d:41:f1:3a:3e:04:28:e0:4f:cf:78:c2:d1:
14:22:78:19:71:f7:4f:49:1f:0f:80:06:0e:68:23:ff:06:3c:
a8:9b:16:15:a6:c2:66:d2:e4:39:60:03:af:88:6d:ba:fc:ec:
75:63:4c:f5:01:eb:18:fd:90:59:ae:6c:df:75:8b:1f:ef:49:
6c:0b:b1:d0:c0:c8:b9:e8:a7:38:b0:cd:94:b1:eb:5d:9b:2c:
23:92:d7:a1:e0:56:b8:d9:19:17:62:d0:2f:32:c6:d6:6a:c7:
25:90:78:c8:9a:76:73:fe:49:bb:52:2e:b0:43:0c:c7:da:b5:
a3:8f:a4:37:59:81:03:ed:58:ee:80:04:f5:16:58:83:fc:27:
42:96:41:cf:58:2b:5e:0d:ad:96:9e:e5:a7:0b:26:21:1a:ee:
c2:fe:0f:e6:33:98:e4:99:53:86:b9:a4:dd:8e:cb:c2:92:2a:
e2:85:df:79:2f:28:48:48:93:43:5e:a6:96:e2:99:4e:83:d2:
34:2b:26:03:90:20:ff:52:66:ab:07:57:69:98:af:ce:0a:94:
9a:43:c6:e0:44:13:44:9a:32:3f:ef:92:bb:ff:b2:36:d5:66:
64:93:52:36:dd:9d:39:bb:03:f1:ad:a3:d8:e9:ea:b1:14:98:
89:72:c3:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 08:08:31 2026 by rpki-client