
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28899a2a-58c3-32e8-92e2-ee64e38315b7.roa
File: 28899a2a-58c3-32e8-92e2-ee64e38315b7.roa (raw, json)
Hash identifier: e5Ng7u37Sh4HoOyb7Aq3riblrfWxa2EhZACtkjk6dqI=
Subject key identifier: 61:23:30:7B:E1:FE:12:6B:E7:A4:C8:3E:70:C1:9D:DE:E7:92:1D:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF5D3B08AB92917223BBAB0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28899a2a-58c3-32e8-92e2-ee64e38315b7.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33659
IP address blocks: 76.117.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:d3:b0:8a:b9:29:17:22:3b:ba:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=d3d13720-36f7-414c-b1ae-8f7bd4018a22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:e0:5a:d3:84:1e:b2:9a:04:8d:69:ec:b1:b2:
b3:0d:02:c8:fe:38:e5:3d:34:e7:ae:37:a3:e8:8d:
b0:9d:f9:c8:d7:1e:ad:d7:38:24:e0:46:c3:ff:89:
61:70:20:fe:ae:1e:07:74:c6:bc:e9:ab:79:2e:67:
c0:2f:f8:bf:dd:2e:d2:36:c2:f1:f8:b7:98:ec:be:
b9:f4:eb:78:51:72:a9:d1:12:e3:fd:89:06:85:b3:
60:d0:0f:c9:11:a4:54:3e:70:a0:33:00:41:93:32:
51:72:db:35:8d:6f:87:3d:53:95:e3:92:1d:f1:62:
6d:5f:a1:e0:62:91:b5:68:fd:19:c1:76:f3:fc:5a:
70:ae:98:6e:66:a4:7b:78:52:82:b2:13:a7:c4:1b:
9e:79:9c:68:77:ae:26:ba:87:0b:23:fe:98:89:38:
8d:ae:8f:55:29:0b:fb:59:70:6e:3e:e2:31:0a:d1:
64:77:f5:40:55:97:84:70:e0:7e:50:76:65:a0:aa:
6a:57:97:21:38:02:08:d9:9f:c5:c5:b7:c5:f8:fa:
d8:54:a1:ba:9e:f0:e5:bb:cb:48:3d:59:34:34:bc:
fe:e7:a2:9d:bc:9b:c4:a2:a3:57:18:65:0c:7a:1d:
a7:6e:4c:4c:15:33:d1:5a:bb:a1:52:a4:2f:00:5f:
d4:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:23:30:7B:E1:FE:12:6B:E7:A4:C8:3E:70:C1:9D:DE:E7:92:1D:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28899a2a-58c3-32e8-92e2-ee64e38315b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.117.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:2e:a7:9e:4d:84:dd:4b:95:91:73:b6:a8:49:2b:cd:be:45:
db:36:2f:64:b0:56:04:3a:d0:92:2a:e9:90:13:d1:53:5b:fc:
4b:20:14:6d:ac:0d:21:16:7b:ae:88:76:11:09:9e:06:7d:7d:
ef:d0:1d:20:48:26:55:05:1a:2c:86:56:20:3c:8a:94:df:50:
ff:69:eb:c7:d1:96:86:a5:08:ec:19:1d:cf:46:0c:0d:4c:68:
98:07:5a:42:4b:e6:bd:56:f0:49:ac:2e:eb:ad:c7:f6:5e:4e:
87:c8:7a:7f:1d:30:65:56:63:c3:bc:8b:fe:ce:6f:94:cf:43:
37:b3:32:81:67:e8:c7:d1:aa:cd:2f:40:4f:82:d7:f2:1a:c3:
ae:4f:8d:f8:12:48:81:c6:65:18:68:4f:6a:fc:3b:f7:5d:d2:
4d:8d:60:e2:64:3d:8c:da:67:4f:93:66:4b:f9:18:bf:1d:4f:
26:0b:02:8b:e6:50:38:a0:75:79:c4:cd:0b:38:49:a1:41:92:
f9:1e:09:0a:5d:61:c4:7e:5f:f5:87:63:8e:28:42:f6:0c:06:
fc:a4:c2:f4:31:e6:32:08:10:95:4c:80:97:1a:73:e4:e3:56:
44:15:42:be:a7:2f:cc:07:c6:39:1e:7d:12:61:fe:7e:16:85:
97:1c:51:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:20:08 2026 by rpki-client