
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcb5674-089a-373e-a685-cd5a2019cf27.roa
File: 1dcb5674-089a-373e-a685-cd5a2019cf27.roa (raw, json)
Hash identifier: gdtRFeimUpm9xwKz6XkkfVzvdArA8sW7zELUuBtWfZI=
Subject key identifier: E8:7F:7A:EB:86:5A:09:77:61:4C:65:03:BE:8E:E8:86:A0:AF:30:D0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119D306D33FAE7EC5B606100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcb5674-089a-373e-a685-cd5a2019cf27.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33660
IP address blocks: 76.149.230.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:30:6d:33:fa:e7:ec:5b:60:61:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=a86ae08b-1f64-4168-8a88-d63c02564b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:be:0e:77:20:76:50:f5:17:6e:6d:07:a4:d0:
4e:74:42:ef:de:40:81:d7:3e:5e:34:df:24:87:d5:
b5:eb:64:bd:1c:28:1a:d7:59:da:9b:1f:ed:44:95:
62:a9:c7:71:c3:6d:01:56:f5:db:f6:65:78:46:f8:
ea:9d:42:51:03:e8:bc:83:de:32:4a:bb:34:aa:3b:
7a:81:a9:df:00:fc:df:5d:88:63:84:bb:83:69:04:
60:75:a6:8f:85:92:16:92:6b:6a:f9:fe:f3:87:8e:
ac:57:24:04:ed:71:7b:04:3f:cb:63:b1:bb:c5:0e:
cc:16:ab:ca:25:8b:a3:86:a3:60:6b:12:38:cd:14:
e4:33:ac:61:38:da:cb:48:b7:5a:b0:c8:f2:c9:c4:
64:e4:90:d7:d9:2a:99:4b:eb:11:f1:5f:f3:e3:74:
75:13:5a:45:d8:5b:86:69:9c:07:73:e8:3c:a3:91:
f0:df:35:bd:fa:14:3d:24:71:67:8e:d4:02:40:eb:
bf:60:b9:2a:43:a8:db:7e:e9:0e:79:1c:4f:8f:27:
72:35:e9:48:19:46:23:90:4d:dd:c6:7d:91:49:06:
3b:fa:4a:fb:98:5b:b2:61:d0:b5:fc:6b:b5:d9:e5:
fe:56:43:98:59:e4:a2:01:64:13:91:c1:be:52:6c:
fe:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:7F:7A:EB:86:5A:09:77:61:4C:65:03:BE:8E:E8:86:A0:AF:30:D0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1dcb5674-089a-373e-a685-cd5a2019cf27.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.149.230.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:b7:a4:b7:65:ed:7e:e0:e0:77:79:d8:5a:bc:72:e5:ce:43:
8c:92:93:a9:3a:5b:c4:71:6b:8a:57:9b:e6:ce:5f:d5:66:41:
69:18:8d:fe:b8:84:b2:8a:9d:b8:42:27:f5:6d:c5:38:b6:d2:
6e:3b:69:e9:6c:fd:a0:72:2f:75:96:2a:10:41:d3:9e:bf:65:
e5:e4:df:51:4e:d6:10:55:94:b8:2a:86:cd:be:7e:93:86:ac:
78:ec:1f:22:45:f1:ec:57:fb:09:c2:c1:89:58:72:08:09:fe:
1d:3e:f0:71:ec:de:28:bb:00:83:3f:8b:29:1b:b6:4a:f3:5a:
84:74:be:57:04:2f:46:bd:bd:f8:09:04:b4:a5:0a:48:e9:e3:
47:a7:3d:ff:2d:53:91:e1:e1:d2:6c:76:44:f8:cc:c4:1b:16:
cc:f9:e2:97:11:0f:96:f8:8d:ec:dd:e1:4e:17:6f:8b:e5:5b:
28:48:9d:e0:5f:4f:a8:90:e8:1f:65:01:53:53:a1:03:51:51:
2b:a7:32:41:12:6a:e8:3a:43:d8:c3:1c:01:0f:4b:43:f3:7d:
6e:e4:40:b1:28:e4:27:49:92:65:a7:a8:2d:65:80:5d:c6:2a:
72:20:ad:8e:90:e6:b7:2f:47:f0:90:39:86:08:a7:95:a7:67:
cb:68:78:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:28:44 2026 by rpki-client