
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/023aaec4-4135-3c50-adb3-90a9c64e9fad.roa
File: 023aaec4-4135-3c50-adb3-90a9c64e9fad.roa (raw, json)
Hash identifier: uBYJECfUKsBnmok3hHwEYcyX58QLL0WilU0wDoOnQuA=
Subject key identifier: 1A:33:66:64:BC:98:63:93:60:09:42:A0:C0:EE:51:87:80:30:20:2C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E8BA69A0B1260E24A0F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/023aaec4-4135-3c50-adb3-90a9c64e9fad.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33660
IP address blocks: 76.149.128.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:8b:a6:9a:0b:12:60:e2:4a:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=bf2e1589-d67e-4aee-8489-033fd6671beb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e0:65:a2:3b:c8:cd:5b:86:08:10:d6:1c:6c:
cb:52:58:d3:34:e6:57:12:16:e2:88:8f:6d:04:45:
66:36:49:75:79:e2:d4:c7:9c:3d:cb:bb:64:cc:40:
02:ec:66:2d:c6:ba:b8:e4:e8:d5:6f:e0:d7:a0:6b:
83:27:66:7e:82:80:8e:73:61:2a:91:43:e8:88:50:
c1:69:ba:04:37:10:99:bc:da:a5:52:e1:06:7d:91:
c5:23:d5:0f:d3:74:6f:1f:35:ad:0d:e6:40:2d:ee:
d0:3e:ba:ab:e1:47:0a:04:33:df:49:87:7a:45:d7:
c0:6f:0a:93:05:af:f2:dc:03:4b:52:a4:6f:4b:0a:
17:0b:5d:21:4d:5c:9c:e5:f2:12:b7:80:29:f4:60:
aa:89:9e:75:ad:6c:79:9b:d2:d6:2b:2d:73:8a:1e:
ea:bc:ed:ca:49:d4:75:d5:a2:4e:9c:c9:c6:a0:59:
b0:5e:70:32:87:e6:3f:02:a9:5b:07:96:e9:20:1e:
94:bd:da:51:35:c1:a2:d0:b5:42:01:ff:7d:c1:59:
53:ff:17:82:66:36:02:59:9b:7f:b2:ad:9c:92:0b:
5a:70:5a:a6:05:53:9c:10:c0:95:15:e0:77:d8:73:
87:17:0f:b1:b3:e5:50:4d:0a:72:c6:9c:36:d8:63:
0f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:33:66:64:BC:98:63:93:60:09:42:A0:C0:EE:51:87:80:30:20:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/023aaec4-4135-3c50-adb3-90a9c64e9fad.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.149.128.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:c3:9e:45:76:00:38:cd:72:32:88:e3:96:be:ed:4c:7f:b9:
9d:b3:14:1b:8f:6a:21:a4:ac:36:0f:75:20:4b:09:53:59:fb:
11:0c:85:10:fe:b4:ab:9c:3c:45:db:a2:cc:a3:4b:f6:aa:df:
49:dd:93:67:3a:ed:c3:bf:fc:07:ff:79:1c:8a:20:0b:f5:e4:
38:ed:bb:54:a8:42:a2:3e:36:e0:ff:02:e4:5d:0b:ba:a2:de:
fd:91:90:ad:71:a2:59:b3:28:d5:48:95:22:e5:d4:de:af:df:
32:1e:e1:09:ba:ba:dc:ea:a7:a0:81:4d:4d:b1:a8:41:71:7d:
40:ae:ce:dd:3d:13:2a:8a:35:e7:8f:04:11:47:1c:77:bd:da:
82:7e:29:65:f5:9d:c4:33:ad:86:54:5a:78:db:8e:fa:73:49:
34:54:c1:88:3d:a2:ed:a4:56:c0:39:48:3f:db:a1:8e:3c:f5:
b6:c2:69:1e:18:89:21:af:42:7b:a4:dc:7f:4b:46:5c:4c:cd:
8d:be:68:98:10:04:eb:9e:3b:ed:c9:d8:3d:58:fe:03:ff:d9:
85:12:50:9a:14:8a:79:69:54:d1:c2:3e:ac:b9:07:08:bf:37:
a2:e8:50:e7:7e:e4:c1:22:f6:38:4e:90:7b:43:29:0e:f1:1b:
76:49:a6:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnoummgsSYOJKDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
YmYyZTE1ODktZDY3ZS00YWVlLTg0ODktMDMzZmQ2NjcxYmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeBlojvIzVuGCBDWHGzLUljTNOZXEhbiiI9t
BEVmNkl1eeLUx5w9y7tkzEAC7GYtxrq45OjVb+DXoGuDJ2Z+goCOc2EqkUPoiFDB
aboENxCZvNqlUuEGfZHFI9UP03RvHzWtDeZALe7QPrqr4UcKBDPfSYd6RdfAbwqT
Ba/y3ANLUqRvSwoXC10hTVyc5fISt4Ap9GCqiZ51rWx5m9LWKy1zih7qvO3KSdR1
1aJOnMnGoFmwXnAyh+Y/AqlbB5bpIB6UvdpRNcGi0LVCAf99wVlT/xeCZjYCWZt/
sq2ckgtacFqmBVOcEMCVFeB32HOHFw+xs+VQTQpyxpw22GMPywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBozZmS8mGOTYAlCoMDuUYeAMCAsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDIzYWFlYzQtNDEzNS0z
YzUwLWFkYjMtOTBhOWM2NGU5ZmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTJWAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzDnkV2ADjNcjKI45a+7Ux/uZ2zFBuPaiGkrDYPdSBLCVNZ+xEMhRD+
tKucPEXbosyjS/aq30ndk2c67cO//Af/eRyKIAv15Djtu1SoQqI+NuD/AuRdC7qi
3v2RkK1xolmzKNVIlSLl1N6v3zIe4Qm6utzqp6CBTU2xqEFxfUCuzt09EyqKNeeP
BBFHHHe92oJ+KWX1ncQzrYZUWnjbjvpzSTRUwYg9ou2kVsA5SD/boY489bbCaR4Y
iSGvQnuk3H9LRlxMzY2+aJgQBOueO+3J2D1Y/gP/2YUSUJoUinlpVNHCPqy5Bwi/
N6LoUOd+5MEi9jhOkHtDKQ7xG3ZJprA=
-----END CERTIFICATE-----
Generated at Wed Sep 23 01:49:13 2026 by rpki-client