
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
File: a41a09c6-4c03-3685-a8a0-213adac37033.roa (raw, json)
Hash identifier: dY8Lzcw4o9myBijIXzSA7BTFFsQYh3mW6Vg9749/FQk=
Subject key identifier: 9A:7A:76:05:8F:80:13:5A:C2:08:8F:13:07:F4:3B:1F:69:69:38:A2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E6185FF9AD8E62B497330
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 76.102.236.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:61:85:ff:9a:d8:e6:2b:49:73:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=6263228b-312a-4de0-b637-6dbd477a426b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:e7:b1:3f:5e:af:af:f4:b2:29:4e:84:de:84:
4e:1d:53:bc:cd:f1:83:ac:fa:2d:0b:8c:5f:02:6a:
e6:fb:44:f0:8e:c1:b0:75:d6:86:0e:54:56:4c:a0:
31:17:a8:82:ad:bf:b9:a4:e0:98:90:74:85:80:0a:
84:2e:e4:38:0a:d4:48:45:1d:2a:27:8b:14:11:5d:
f5:00:45:6b:87:17:8b:2d:ff:9e:de:51:1f:e8:bf:
e5:f6:8c:d6:27:7b:fc:a9:44:ab:ba:e2:37:49:e5:
26:53:96:38:6d:c1:17:d5:ce:35:15:3c:15:f1:ab:
cd:4e:ed:67:4e:28:ad:c1:7e:cd:1c:c2:2e:16:f5:
b3:a5:2a:ae:97:63:ed:65:17:37:01:ea:1c:13:a2:
c3:74:b7:b7:b4:b1:69:97:bf:95:2f:ba:00:3b:31:
4f:c2:a4:e0:0b:c5:2d:16:34:e7:96:fa:c0:3d:46:
b9:1d:6c:bc:50:b1:7e:1a:19:5e:b6:9f:72:f3:13:
f4:e0:76:7b:08:e9:c8:13:74:1f:2c:32:11:78:bb:
24:d3:ac:c1:50:c2:08:45:2b:41:c0:05:6b:84:f6:
d0:4b:05:0b:e2:fe:a2:71:00:7e:50:dd:f8:f3:d9:
39:a9:95:f6:52:73:8d:99:84:b2:fb:50:85:f1:76:
a5:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:7A:76:05:8F:80:13:5A:C2:08:8F:13:07:F4:3B:1F:69:69:38:A2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a41a09c6-4c03-3685-a8a0-213adac37033.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.102.236.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:3d:3d:97:96:36:2e:9f:16:79:22:e3:fd:90:b0:68:b6:b6:
6d:43:a2:c6:2f:27:8b:23:9b:c4:f6:b7:a7:66:b0:e7:6d:13:
6c:18:59:13:b6:8b:7d:55:09:76:d5:ba:0c:ed:3e:f8:18:9e:
49:cd:7d:83:98:a4:02:46:73:a9:98:b0:fa:a8:de:f4:2c:58:
64:c3:3f:f5:0d:e2:f4:0e:69:9b:47:e7:3e:ac:8f:fb:cb:2b:
52:bf:ba:fa:8e:0b:5b:df:1e:f5:dc:5e:00:72:bf:9e:86:0b:
0e:54:34:d6:e8:2a:ca:29:b9:51:b4:18:fb:ea:b7:5d:28:3f:
26:ee:46:8c:91:ce:64:15:c0:43:a4:c5:c7:bb:c7:69:b3:28:
ae:ad:59:19:5c:7d:77:69:ee:56:2c:41:f7:78:33:ab:89:d4:
01:dc:b8:9d:df:3c:14:1c:bf:1e:ec:d0:6f:8f:52:44:ab:0f:
dd:b5:8f:e8:e4:68:5f:03:01:ff:3c:70:1b:83:8d:d9:9c:43:
78:e2:1a:f8:83:c8:78:f9:30:ba:81:7a:4c:8e:13:4e:fd:cb:
39:59:5e:cf:bb:63:5f:18:6f:27:ee:42:64:c0:e8:c2:41:91:
d0:2d:52:7b:b0:c6:cb:45:32:f3:6f:f9:83:57:0f:ec:82:96:
5f:58:81:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:28:08 2026 by rpki-client