
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbc28572-23ca-3a32-a143-421d6a321db0.roa
File: fbc28572-23ca-3a32-a143-421d6a321db0.roa (raw, json)
Hash identifier: 001NhSA9oa6PV6Fv2e9gEIybJ1jyOVxaYbRvqJvbIbI=
Subject key identifier: D5:EA:60:8B:54:76:80:80:BC:5C:59:6C:63:4D:72:1A:82:64:ED:12
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC628388860DA9EDF73A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbc28572-23ca-3a32-a143-421d6a321db0.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 76.139.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:62:83:88:86:0d:a9:ed:f7:3a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ec8df798-fe51-4d78-b51c-5077aa5b2e79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cc:9b:86:c4:32:e4:f2:7c:08:cb:51:2f:d6:
7f:3d:06:2b:a5:05:72:b6:6a:55:7c:55:5d:11:21:
08:7d:a8:0e:4e:a8:50:45:d6:a5:0d:c2:ad:db:ed:
4f:84:49:28:88:fe:8f:a3:b5:2f:06:49:f0:78:51:
c9:f1:b0:2d:e5:1f:5e:18:41:83:ee:39:b7:f1:61:
85:e6:c7:29:aa:17:a9:4e:16:6b:3e:17:e5:56:c6:
d0:67:b8:18:1e:f5:4b:27:25:9c:e7:fc:a7:2a:ab:
4b:04:15:d0:fe:1d:ee:f7:58:6c:d6:67:00:f4:e0:
04:5a:50:6f:6e:52:80:5e:53:91:3e:1a:2d:d2:e6:
bd:4d:d6:86:93:56:a1:fe:d3:8f:d5:74:b5:10:d2:
1c:bd:6f:aa:f4:46:20:dd:56:51:b1:14:4e:f7:4b:
30:f3:4f:0a:fa:ac:4f:ff:46:a7:3f:dc:81:22:94:
4e:61:62:c6:f0:bc:c5:6c:9f:ad:bd:b8:6c:34:c7:
03:e3:89:cd:15:21:2a:30:49:aa:40:ee:3d:75:da:
68:ad:c3:14:3e:a9:38:af:99:84:91:f1:98:91:26:
cc:33:81:41:03:72:b8:ab:09:bc:63:04:17:ce:81:
4f:c4:d5:c7:c2:32:d2:58:d5:82:71:c8:56:1e:25:
55:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:EA:60:8B:54:76:80:80:BC:5C:59:6C:63:4D:72:1A:82:64:ED:12
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fbc28572-23ca-3a32-a143-421d6a321db0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.139.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:28:fb:8c:26:8d:c5:1b:ae:9a:bc:d2:e9:6d:8d:b9:62:5a:
60:dc:1e:15:ec:52:ae:3a:f4:34:98:8c:6d:04:59:20:a7:35:
fe:f9:70:0b:21:fa:4c:49:34:bf:7d:8a:36:b1:ac:7a:b6:6c:
de:49:df:57:65:bd:41:d6:9f:df:11:f9:af:59:f5:24:fd:22:
f2:9a:6d:7a:4a:70:07:8c:df:ff:c1:42:2d:d1:e8:fd:24:4e:
7e:3e:9e:2e:fc:a3:bd:1a:a9:1f:07:30:89:44:00:01:9c:dd:
89:62:8f:ec:9b:e4:1b:be:b9:9a:a8:b0:b2:ca:de:1d:dd:b9:
84:90:9e:89:0f:71:bf:60:d1:c9:01:bf:9f:a1:b6:19:c7:c3:
53:66:9b:3e:e1:8d:21:a2:15:ec:45:a5:de:69:0d:d8:66:44:
00:64:3f:d9:47:08:4d:37:64:c5:73:21:7d:c5:6f:53:b8:fd:
85:c4:f2:65:70:01:28:1a:d9:fd:0a:10:0d:dc:9e:37:4f:20:
c9:2e:3a:43:34:24:30:a3:aa:42:f2:cb:1d:34:71:5a:6e:e5:
fd:9b:cb:d2:a1:0d:82:ed:53:9e:da:bf:5d:6b:00:6a:14:34:
ad:74:ed:93:eb:ce:37:0d:a1:33:11:2d:bb:3b:2a:1f:ad:0f:
5a:1f:79:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:16:22 2026 by rpki-client