
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa
File: 043f76f6-e87a-3227-a9de-4322d167104f.roa (raw, json)
Hash identifier: gMHkFJQP6VbX+yl8INcdkuV+MorpB631VNkI2IukkIw=
Subject key identifier: 2C:42:FB:1B:77:B4:00:4C:F0:AB:53:38:78:E9:5F:35:5D:9E:E3:DD
Certificate issuer: /CN=8b973e20-42b5-497e-831b-66d353f928d7
Certificate serial: 010D0C9F4328584CF157755CBBE8C514BAEDCDA0
Authority key identifier: 0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa
Signing time: Sun 22 Feb 2026 02:00:32 +0000
ROA not before: Sun 22 Feb 2026 02:00:32 +0000
ROA not after: Sat 23 May 2026 01:00:32 +0000
asID: 6341
IP address blocks: 156.76.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f1:57:75:5c:bb:e8:c5:14:ba:ed:cd:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b973e20-42b5-497e-831b-66d353f928d7
Validity
Not Before: Feb 22 02:00:32 2026 GMT
Not After : May 23 01:00:32 2026 GMT
Subject: CN=36e76d95-554e-4ec8-9919-62d5f72d57b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:43:24:f3:18:b4:43:39:20:64:f2:69:cc:d1:
a3:81:d8:ca:fa:6f:f4:e4:5e:76:d3:54:08:d0:19:
1e:25:3a:ee:59:9b:88:12:62:22:4f:0b:b8:46:1a:
0e:87:a5:7b:bc:64:11:5a:4b:b6:01:28:2b:f8:53:
69:ea:03:42:06:80:d0:10:86:5f:cf:9f:c9:8d:4a:
16:d0:2b:a9:44:d3:c2:8e:ae:66:77:b4:0f:86:df:
c3:2d:76:15:07:8f:19:a2:70:f1:55:6a:db:91:3d:
c3:77:a5:e2:7c:c5:9a:0c:4b:2a:c6:2d:25:bc:d4:
b4:cb:79:94:6f:ed:98:a2:c2:01:73:4f:7b:79:00:
10:bd:f8:f8:52:b5:9f:ce:6b:19:27:d2:65:5a:3e:
c8:eb:e4:e0:2d:f4:52:53:6f:26:1f:f5:36:fd:d5:
47:d3:31:ba:71:91:f4:7a:d8:20:a9:e7:27:fc:72:
1f:f2:98:a9:32:8f:bf:d2:c4:0a:c5:1b:1f:ef:de:
c4:19:3a:39:bd:ed:7f:cd:2f:ed:00:eb:26:4d:cd:
c3:73:dd:0b:0d:60:65:b3:54:9a:e8:33:5f:b7:e6:
6b:1d:5c:73:6b:31:be:6f:7f:df:09:15:25:2e:08:
8b:e2:97:77:cb:6d:5e:47:59:b3:5c:95:f9:af:f3:
00:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:42:FB:1B:77:B4:00:4C:F0:AB:53:38:78:E9:5F:35:5D:9E:E3:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/043f76f6-e87a-3227-a9de-4322d167104f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7/8b973e20-42b5-497e-831b-66d353f928d7.crl
X509v3 Authority Key Identifier:
keyid:0C:A2:EB:93:3F:8C:DC:D9:88:91:5A:BD:94:65:16:32:77:02:19:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/8b973e20-42b5-497e-831b-66d353f928d7.cer
sbgp-ipAddrBlock: critical
IPv4:
156.76.224.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:f3:78:45:8b:dc:ff:ba:65:e1:9f:16:58:4f:da:cc:8d:3e:
1f:15:ea:48:8f:6a:dd:06:b3:88:5f:5a:7e:fd:cd:da:c1:35:
81:e9:0d:54:db:14:43:83:04:13:0a:38:f6:83:c6:ec:10:10:
9a:9f:95:c7:18:d5:f9:e5:95:c5:b4:07:71:34:ad:2c:6b:b5:
e7:a8:96:3e:bc:90:4c:e4:42:15:4f:20:88:c1:29:31:3f:5c:
37:37:1f:d9:6c:b9:35:d5:db:23:92:af:cb:33:0e:a7:6e:3a:
69:68:11:e7:37:29:ab:4e:1e:6f:44:66:91:d6:e5:b7:e4:72:
24:ae:f2:26:37:24:a7:df:d3:62:28:9a:4b:b9:f5:ac:c8:9e:
6f:58:9d:a2:03:1c:22:32:5d:ae:56:61:cd:85:3b:5a:8b:20:
8f:39:d7:5e:de:ad:fc:76:49:9e:14:4c:d9:ee:c3:72:87:80:
82:7e:35:96:51:b3:bc:b0:7e:f4:66:1e:95:49:de:19:f4:85:
0d:ce:47:78:58:11:c2:46:c5:48:87:f6:b8:6b:d8:75:33:c5:
95:a2:04:13:7d:65:93:26:24:17:44:cf:f5:ab:2f:04:ec:ed:
49:02:92:e3:0b:4d:29:11:0c:be:54:04:78:e2:77:e2:06:25:
eb:41:c2:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 17:07:01 2026 by rpki-client