
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2725d6a-6857-3613-941c-03c0a0ded740.roa
File: b2725d6a-6857-3613-941c-03c0a0ded740.roa (raw, json)
Hash identifier: 1Rc9BOKINEWsDBi4/O7YPcVbYLYhIUcXdIyzok2EzfU=
Subject key identifier: C5:DB:83:39:34:DA:8D:6E:67:B1:96:84:5D:2A:4E:5F:F6:21:6F:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E8BE7187FD6E4DF8B5980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2725d6a-6857-3613-941c-03c0a0ded740.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33660
IP address blocks: 76.149.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:8b:e7:18:7f:d6:e4:df:8b:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=dd20765e-39f3-4a67-8f53-be69889f25ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8e:60:31:74:e0:43:5c:9f:80:2e:e8:e7:4f:
28:a9:ad:42:42:de:c8:d6:62:af:4f:44:79:81:f5:
22:fe:fb:05:8f:45:d5:1a:f3:28:fc:a5:7b:cc:24:
71:55:30:85:9d:5d:b1:0f:e1:f9:76:a6:b1:cb:4d:
44:3e:2f:0b:0c:f0:97:94:3a:bc:59:2c:79:4e:99:
d0:cf:71:8f:35:af:2f:75:af:cd:b7:7c:cf:5d:5e:
9c:e0:79:93:98:68:83:78:46:40:35:91:94:63:e8:
06:e3:2c:aa:82:72:98:58:9d:c8:51:3a:3e:a1:c2:
14:12:34:ec:21:45:4f:9a:5a:2e:7c:2c:20:09:88:
1e:72:e2:20:b1:b1:b0:df:ee:90:e6:1b:b7:5a:ad:
70:02:e0:ba:ec:d1:49:f4:00:14:7a:a7:cc:3e:b5:
21:26:47:38:0e:4b:dc:ab:05:75:62:1b:ba:c2:33:
5b:35:2b:ca:71:de:2f:82:2c:dc:77:e2:98:13:5a:
a4:e8:40:68:96:3c:4b:7a:ef:01:3b:78:3f:63:97:
c3:bb:f7:3f:01:c1:26:8c:3a:e8:ce:5f:9f:e8:3f:
9c:d4:f3:11:11:82:14:d2:e0:b6:b3:a4:13:32:4e:
66:5b:0a:68:ee:84:47:8e:20:2d:4c:f4:5a:9a:e7:
2f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DB:83:39:34:DA:8D:6E:67:B1:96:84:5D:2A:4E:5F:F6:21:6F:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b2725d6a-6857-3613-941c-03c0a0ded740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.149.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:fe:f4:d3:00:7f:c2:e1:00:c9:9a:61:a0:c5:f3:9e:bb:5d:
fb:0e:13:c5:e2:d4:ee:ad:5f:b9:40:fb:97:75:68:fa:75:73:
fa:76:c5:29:51:57:8d:cf:0b:d2:1d:9e:cc:54:57:e6:d5:0e:
d6:33:b7:23:88:44:cf:bc:d6:f4:30:29:a7:33:68:2e:1c:92:
c2:2a:ea:b5:cf:d9:1b:28:6f:c0:d0:12:b8:fd:4d:ad:ee:e1:
69:d2:d3:d2:bb:13:19:44:ca:48:e9:88:8c:7d:aa:a4:78:90:
e6:5b:34:c4:fa:46:88:2a:97:fe:e7:fa:7b:6f:f9:bf:53:f3:
fd:07:95:b1:2a:7e:f9:00:78:dc:9e:9c:69:2f:20:dc:ac:29:
c9:b6:73:f3:9d:42:2a:a0:83:a1:5e:ef:7e:64:e7:57:54:62:
be:cb:8a:ea:b9:dd:ef:8c:ec:b3:42:44:c0:9c:75:c2:ef:cc:
86:ff:24:07:c1:1f:15:6f:f2:69:8d:86:db:25:70:ca:9d:00:
70:86:81:9e:6c:e4:fd:11:80:e5:c4:81:a6:3c:c5:ed:82:e8:
0d:1e:c6:2a:44:f1:00:ba:85:09:bc:1f:0c:86:49:81:1f:d2:
fd:7f:89:de:99:13:73:2b:7e:a2:8d:f1:2d:cc:cb:7d:41:5c:
6a:8a:cf:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:58:49 2026 by rpki-client