
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa
File: 0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa (raw, json)
Hash identifier: KdOzDR8LOhZmEGXJXZNnXcroDN5aFTsqc3LOv4rdKdA=
Subject key identifier: F2:91:81:05:83:3F:D2:03:96:46:A8:FD:1A:00:FB:9C:F6:06:4B:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED43218DBABF2275B1299E9A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa
Signing time: Fri 14 Aug 2026 01:00:13 +0000
ROA not before: Fri 14 Aug 2026 01:00:13 +0000
ROA not after: Thu 12 Nov 2026 02:00:13 +0000
asID: 22258
IP address blocks: 76.107.206.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d4:32:18:db:ab:f2:27:5b:12:99:e9:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 14 01:00:13 2026 GMT
Not After : Nov 12 02:00:13 2026 GMT
Subject: CN=2c2d545a-b979-46fd-a883-f323677614dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:a2:8a:6f:79:16:f8:83:be:56:c4:66:2d:71:
52:0b:55:f3:88:3b:92:2e:1e:78:4b:e7:52:7b:01:
21:dd:60:5d:81:0e:76:96:fd:eb:70:53:ea:d7:5b:
f0:fa:a3:19:9a:96:d8:cf:55:d5:25:ed:69:7d:9a:
a8:c3:66:33:8d:f7:4c:50:b9:70:6c:56:28:b3:c1:
91:00:2f:36:39:2a:84:fc:69:94:74:f7:f1:11:7e:
91:a1:58:0e:69:99:81:ba:7f:8e:5d:7c:70:c1:7a:
ec:f4:07:ea:11:cc:b0:ad:ad:de:f6:32:ec:03:02:
9e:aa:a3:7e:03:c7:d3:b2:18:3e:41:a2:e9:79:ba:
b5:a5:b6:65:48:0a:7a:47:36:ff:4c:67:fd:ce:23:
1f:ce:55:05:00:10:bf:b2:df:51:ee:ec:0b:f8:3b:
f3:cc:99:2f:d6:df:ce:2d:23:51:4c:4c:31:eb:9b:
38:cb:24:33:20:18:2e:cb:e0:fc:47:5d:1d:d6:fa:
04:85:52:83:95:e6:65:4d:0c:44:e9:0d:0e:2e:f9:
9f:08:16:60:29:d9:26:4d:b3:6c:a7:1f:20:a5:0f:
05:c6:f4:40:c5:ab:12:ec:84:3e:fd:12:8d:34:cf:
3e:d9:86:33:9f:bf:62:38:8e:2b:70:47:ba:ca:c5:
f1:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:91:81:05:83:3F:D2:03:96:46:A8:FD:1A:00:FB:9C:F6:06:4B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0499c3d6-6a62-3883-a3a4-3aed6c4c2918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.107.206.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2d:41:0c:4f:a7:26:8f:63:a6:31:40:6c:75:08:46:43:08:11:
67:37:aa:82:78:02:d1:d4:f8:ab:27:94:19:43:1f:94:e0:07:
8c:d8:f4:4a:ee:96:ab:c7:b4:cf:74:d8:77:7d:04:14:a2:28:
0b:b1:9b:70:c6:25:a8:33:32:42:de:f9:b0:c5:ca:6f:b2:8c:
77:53:27:d1:39:d7:65:3b:0a:b7:66:db:31:7a:8b:79:f3:7c:
3c:ed:6f:d1:f8:17:e9:49:00:59:7a:b4:d0:c5:f4:b2:26:ce:
dc:2b:65:09:07:eb:11:c2:9d:1a:63:18:39:3b:71:ca:b3:05:
c5:d5:37:63:7b:9b:2f:9d:f5:7b:2f:f4:16:b3:9b:48:c4:a4:
48:ab:b2:f0:b2:43:70:5c:e1:c4:e1:d4:10:39:0d:5c:33:6b:
fb:e4:bd:ba:36:0b:a3:4e:53:a8:b4:e8:2d:07:7d:a4:49:e6:
98:51:2a:e8:a0:3d:6f:16:b9:b6:d0:b7:c7:b4:80:01:df:f9:
04:8e:95:63:08:8d:1f:9a:a4:9a:5d:f3:3e:7c:4e:1e:53:eb:
f9:ce:56:d8:12:c9:8e:ad:c5:3a:fd:b4:3b:89:7d:c0:62:ce:
4a:28:82:21:5c:63:67:c2:45:24:f3:a3:be:7e:66:53:39:b4:
e6:81:14:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:43:17 2026 by rpki-client