
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa
File: 95e32c24-9724-3044-bbbe-40ccb8806632.roa (raw, json)
Hash identifier: CWqD6j35tdTmMv0jCez4SW8t7otx8KwYAAa8MfV079c=
Subject key identifier: AA:3F:0C:23:35:48:CB:80:55:74:DC:46:59:F8:B0:8F:FB:2E:A2:18
Certificate issuer: /CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Certificate serial: 010D0C9F4328584DB1DACFE436DFECF1B1FBDD00
Authority key identifier: DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 12083
IP address blocks: 23.28.128.0/17 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:cf:e4:36:df:ec:f1:b1:fb:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b76e0d15-9976-4466-b6ff-2d067b7ef5fe
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=1eb0c8c9-cc86-427a-b2df-c701a28ce393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:cc:aa:f6:15:3e:29:36:e5:ba:d6:d5:68:86:
40:41:ba:b1:83:58:ba:99:e4:a1:b7:59:52:84:aa:
9d:0d:e0:60:43:73:07:7d:5d:83:62:72:7b:98:dc:
69:c9:17:d3:f6:be:d4:02:ff:57:79:6b:68:16:28:
71:1e:15:85:28:05:58:96:7d:ab:84:0e:9d:56:23:
d5:d8:64:cc:b4:15:95:5a:13:2c:a6:7c:c3:29:fb:
e8:59:33:6f:f5:81:00:a5:fd:68:f8:0e:93:6f:90:
8f:36:ad:3b:97:9d:14:fc:88:7c:53:ac:3b:99:dd:
01:53:35:69:b5:eb:ce:17:83:74:7b:dc:53:f6:91:
db:77:47:19:b4:db:c7:41:27:99:98:e9:93:3f:79:
40:40:37:18:27:b7:37:78:e5:e8:18:fe:6a:22:58:
f0:35:88:bc:f0:3b:e4:23:22:0f:e9:38:f9:30:a8:
70:44:0d:79:1f:73:1f:3a:c7:08:74:48:0d:16:d7:
f1:03:ee:39:0f:e2:18:c2:33:d8:05:c1:43:b2:da:
41:f5:e4:df:7d:03:70:49:56:e7:c4:71:8c:41:89:
63:18:b6:75:50:de:d3:35:7d:c1:2a:4e:4c:01:51:
0a:44:63:44:3c:48:d1:9a:38:fc:10:2d:c2:84:30:
2a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:3F:0C:23:35:48:CB:80:55:74:DC:46:59:F8:B0:8F:FB:2E:A2:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/95e32c24-9724-3044-bbbe-40ccb8806632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.crl
X509v3 Authority Key Identifier:
keyid:DE:78:2E:6A:FA:D3:05:00:58:EE:E8:80:F5:16:D9:68:51:F3:90:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b76e0d15-9976-4466-b6ff-2d067b7ef5fe.cer
sbgp-ipAddrBlock: critical
IPv4:
23.28.128.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:bf:b4:ae:de:44:58:fd:e0:db:5b:a3:0b:fe:d8:6a:01:2c:
19:16:c8:66:5f:71:d6:4a:ba:af:1b:64:72:0e:20:c9:01:b4:
38:89:cc:02:90:7f:d8:c9:bc:64:3b:6c:ae:fc:c0:5a:43:dd:
c3:56:a4:a2:5b:a7:07:be:90:94:94:ac:c6:fc:44:c0:18:7f:
36:8e:01:57:d2:91:3c:79:dd:a7:d8:28:10:f3:f3:37:8f:33:
35:f5:6e:46:08:17:dd:5b:d7:9a:82:7d:64:74:18:b7:7a:58:
82:52:8a:3c:80:0d:28:07:57:68:34:0d:b8:2e:45:e4:04:71:
fc:f6:ad:5a:7a:8b:14:03:92:17:f4:9c:0b:34:bd:f6:ed:33:
6f:3c:e2:1d:1f:3c:a3:ec:dd:08:a3:93:2d:da:77:94:12:f4:
7c:48:c9:df:e6:0c:23:64:01:56:b3:7c:77:c3:8b:13:0d:e4:
61:eb:82:e6:ae:92:f3:a2:39:92:88:11:93:f5:02:8a:9e:8b:
4e:9e:ad:63:c6:27:84:fe:a5:10:bd:d8:3e:23:f9:ac:39:b4:
e0:3e:99:35:0b:53:6c:90:5c:d8:21:21:23:63:b9:76:57:6c:
72:dc:70:fb:2c:6c:ad:32:59:99:f3:2b:63:49:27:77:04:27:
6e:b3:6d:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 05:45:54 2026 by rpki-client