
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2745afd7-1adb-326f-bef2-67eb68843939.roa
File: 2745afd7-1adb-326f-bef2-67eb68843939.roa (raw, json)
Hash identifier: ktrJf9C9B4syMgjwk1i/Ew5oNVK/1eFNB93rpYttxc8=
Subject key identifier: 80:8C:5F:EE:2F:01:49:20:58:12:1B:7A:DB:68:85:6B:FD:72:E6:A0
Certificate issuer: /CN=76b8b138-986a-4190-a7a3-3625b5f70769
Certificate serial: 010D0C9F4328584BAF65A939F21F2879AF6C1D00
Authority key identifier: 39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2745afd7-1adb-326f-bef2-67eb68843939.roa
Signing time: Wed 29 Oct 2025 18:19:00 +0000
ROA not before: Wed 29 Oct 2025 18:19:00 +0000
ROA not after: Tue 27 Jan 2026 19:19:00 +0000
asID: 21981
IP address blocks: 76.72.128.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:af:65:a9:39:f2:1f:28:79:af:6c:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b8b138-986a-4190-a7a3-3625b5f70769
Validity
Not Before: Oct 29 18:19:00 2025 GMT
Not After : Jan 27 19:19:00 2026 GMT
Subject: CN=5217f3b3-1cfb-4f30-8872-b9551bf8707b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:69:59:e4:04:b6:9d:76:a9:bb:91:fb:ea:
f1:17:3b:67:dd:82:7f:c6:28:41:69:00:d4:14:04:
a3:35:10:29:86:97:f7:7c:15:3b:2c:54:6b:eb:26:
16:1a:18:6a:cc:40:3f:29:a7:bb:e0:c9:d2:97:5c:
30:09:84:45:a2:44:dc:37:02:04:ee:63:c6:83:0f:
13:83:45:8c:89:a2:d6:16:24:bc:d5:cb:aa:b9:87:
48:2b:2f:d6:c0:11:50:b5:d6:b4:54:59:b3:41:34:
11:21:28:6c:54:a4:3c:71:fc:82:3d:2e:40:dd:3c:
2e:89:24:07:bb:0b:fc:9d:b7:04:c2:f4:ae:7d:bf:
7b:8c:c9:36:93:d5:4f:53:9c:ac:e1:a2:b6:24:ac:
0c:ce:bd:5e:83:b7:b7:58:27:16:9a:5f:7f:ec:33:
27:67:10:6a:06:49:5a:c0:4c:f8:0c:44:43:8f:5b:
0e:e3:86:cc:68:9c:f4:e4:41:d7:d9:f4:e6:7f:ed:
da:2c:19:7a:72:43:20:9f:6d:00:af:f8:e5:1d:9b:
56:1e:aa:35:dc:52:d6:78:52:9f:cd:0a:13:86:ff:
15:fe:70:dc:ba:8d:c0:1d:81:87:9a:87:b9:50:41:
35:71:f7:4b:37:ba:40:3c:e7:fb:96:2c:da:b4:3d:
bc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8C:5F:EE:2F:01:49:20:58:12:1B:7A:DB:68:85:6B:FD:72:E6:A0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/2745afd7-1adb-326f-bef2-67eb68843939.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769/76b8b138-986a-4190-a7a3-3625b5f70769.crl
X509v3 Authority Key Identifier:
keyid:39:17:76:D8:65:7E:6C:93:E1:FA:B4:24:CB:8D:EB:76:76:33:84:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/76b8b138-986a-4190-a7a3-3625b5f70769.cer
sbgp-ipAddrBlock: critical
IPv4:
76.72.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:fb:2e:ce:35:28:1d:cf:9a:ea:b0:ca:1f:97:29:84:30:30:
ca:17:15:c7:71:31:04:5e:eb:6d:40:63:0e:76:21:21:5c:92:
56:cc:da:fc:22:b7:a9:c9:15:93:15:87:04:8b:26:74:81:08:
f9:20:02:a3:8e:22:ca:06:f6:d7:cd:c5:b3:9b:76:9b:55:ff:
4c:96:c9:af:38:f8:3e:c4:dd:ac:90:30:36:90:c3:b3:67:9b:
66:48:06:2f:8d:13:a2:fa:1d:af:a3:51:91:6c:34:58:9d:21:
d2:54:7d:65:7c:42:67:19:91:94:3c:c4:fe:09:34:05:60:86:
71:f7:23:2c:bb:df:8e:16:10:76:00:67:16:2d:1d:44:e7:0d:
95:60:d3:97:11:f1:43:26:1c:89:df:13:6d:10:8a:a3:fe:c4:
da:7f:c8:3c:8e:6d:b4:e6:c8:96:cc:af:73:51:e6:d7:20:41:
4f:5b:02:6c:44:75:a4:37:9b:24:2e:d9:7e:96:7b:c5:ec:c5:
da:49:33:f8:17:9d:21:84:31:a2:ea:f8:f2:82:fb:26:14:53:
a9:14:5c:47:c1:2e:8a:1d:fc:fa:4e:e4:a6:3e:f3:ae:16:e4:
85:b5:f2:97:d0:73:b8:09:3d:ed:3c:6f:3e:1e:4b:b0:15:05:
8d:5e:56:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 13:39:59 2025 by rpki-client