
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb9e2908-8402-3630-a710-d507646ce7b0.roa
File: cb9e2908-8402-3630-a710-d507646ce7b0.roa (raw, json)
Hash identifier: 2tG1PuLbmah4G9iYSRGc/eou9nYwN8NRoxumiJQQMac=
Subject key identifier: 07:C0:08:42:BB:8A:AE:66:CB:57:83:34:4C:6F:09:39:12:14:81:2E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5887670AFB8F3597725F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb9e2908-8402-3630-a710-d507646ce7b0.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 76.150.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:87:67:0a:fb:8f:35:97:72:5f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=518a2269-30ca-4c25-be41-b22d133c0f69
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:40:e2:3d:8d:52:a3:0f:31:db:3e:04:b0:1c:
4b:13:d3:58:5e:df:b9:f6:48:d3:7d:48:1b:82:29:
b8:69:64:b0:3c:70:fb:e8:38:3f:6a:81:40:fa:f3:
0a:78:4b:dc:77:d9:29:71:43:df:d9:0f:a5:c1:55:
33:80:d2:d6:96:72:c5:57:f1:4e:17:25:84:7b:a1:
55:46:40:4e:cf:29:8c:dc:58:8f:16:64:d2:9d:b1:
7d:f9:d0:9a:f1:8f:a2:36:90:43:8c:df:47:34:20:
b7:8d:a2:bc:fd:ca:4e:64:c0:c5:08:7e:83:af:be:
07:00:2c:a2:52:14:0e:90:d2:8f:f1:67:3a:03:f8:
db:be:f4:ec:50:76:d3:1d:6c:c0:c2:25:dd:2d:c8:
dd:02:88:6c:61:18:53:91:44:56:f5:8a:0f:f8:3c:
5c:6c:4e:f0:a7:c3:16:ea:bc:d0:44:c4:26:3c:fc:
01:c9:96:f9:23:de:bc:01:92:fd:50:e0:dd:e2:64:
e5:3a:4e:fb:12:c4:c3:20:d0:bb:8c:b8:b6:b4:eb:
85:e2:31:d4:e0:d3:0a:69:6c:b1:1d:ae:a1:2e:52:
31:d8:1f:67:40:ce:ac:d1:c4:8c:c1:72:ba:f2:17:
66:00:23:79:29:e6:94:55:36:4b:74:3f:52:20:48:
4b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:C0:08:42:BB:8A:AE:66:CB:57:83:34:4C:6F:09:39:12:14:81:2E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb9e2908-8402-3630-a710-d507646ce7b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:d3:a7:17:6b:e3:54:ac:77:e8:a3:f3:ad:58:8b:2f:16:25:
a7:a3:8f:03:fe:96:76:ef:a1:fd:7b:28:27:fa:88:9d:18:b7:
4d:1a:22:8c:8d:ee:61:46:a7:9c:b1:f8:5c:a2:00:fb:a6:5e:
35:0c:d2:3d:89:e1:44:56:9c:e9:cd:33:a2:fd:28:33:45:31:
82:7a:8e:46:4f:50:48:e3:ec:d8:ca:04:72:bd:cd:94:8f:31:
e7:3c:27:e7:15:af:64:06:94:01:db:5d:45:44:c3:2e:8e:68:
33:2d:f9:fc:6a:5a:d1:d4:36:9e:49:17:71:1e:88:14:66:4f:
0c:29:25:c7:d7:a8:71:b5:08:f9:af:be:51:10:87:4a:23:3e:
2b:e7:f9:94:b8:70:74:e3:6b:61:ad:0e:db:ff:d1:cb:ea:9d:
ed:a0:3c:44:97:43:d5:81:42:ba:bc:43:f2:a6:48:86:9a:ab:
b8:cb:dc:97:2e:49:b0:2f:ad:ab:0e:86:88:fc:47:ee:41:79:
fe:3f:02:76:da:a8:7d:13:f4:b6:35:c1:42:a8:7e:8c:48:67:
d1:55:f3:0c:e4:1f:fa:fa:24:04:8a:78:86:dd:8e:8c:a9:f0:
08:4d:c2:03:df:6d:16:4f:62:f2:81:cf:90:59:e0:e1:ad:be:
38:71:00:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:39:25 2026 by rpki-client