
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cf88d45-46e7-38d5-bcff-530e8b196a21.roa
File: 5cf88d45-46e7-38d5-bcff-530e8b196a21.roa (raw, json)
Hash identifier: rjcu0RZwCOHbsxJpVzcvN3B4/liEAFlgz8+9iq05nv4=
Subject key identifier: 6C:11:6E:4C:D6:EE:6C:30:70:10:29:06:6C:EF:53:08:55:92:C2:91
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4FB7FB5B69662F32BA12A4
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cf88d45-46e7-38d5-bcff-530e8b196a21.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 76.20.164.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:b7:fb:5b:69:66:2f:32:ba:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=0df647ca-60fc-40d5-b40b-2c5d198c2d59
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:9a:f3:b5:1d:d6:7c:83:57:06:52:64:34:cd:
e5:ea:0b:3d:8c:cf:5a:21:67:02:a3:8a:ac:f2:59:
e2:b9:30:09:05:c3:44:22:70:48:0f:ba:8c:59:24:
91:31:9a:44:1c:62:12:6b:54:81:b8:5b:46:bd:3e:
00:8a:4e:10:a6:8f:f7:9a:09:e6:42:ff:7a:bf:2a:
94:37:bf:80:9f:49:31:67:11:7e:77:a6:18:6d:a9:
ba:10:3c:d0:33:e5:35:72:fe:9b:88:0a:f1:ef:f6:
09:4c:7b:35:7d:d6:aa:2e:52:a7:b4:02:ce:0d:4a:
91:fb:3a:07:44:33:6a:5e:ad:f7:5d:c7:e7:4a:77:
6c:a5:2c:c3:29:e6:a5:7b:88:63:af:f3:b8:c1:b3:
c3:a3:6f:04:fc:7a:df:7e:de:26:3d:60:fd:70:f7:
00:8a:89:62:53:fe:2c:43:6b:d2:07:68:d9:dc:9b:
ea:99:ea:3c:1f:7f:50:66:1e:e6:d3:e5:6c:4c:e4:
1e:8f:f4:a9:b3:f7:63:9d:ab:77:e6:b6:0a:b3:aa:
74:60:7f:aa:05:22:66:87:a8:5d:28:b6:48:4c:10:
58:6b:71:52:33:51:1f:46:d8:1a:ec:54:66:f4:c3:
59:b2:9f:e2:4c:97:f7:40:4c:d8:83:43:2c:fb:81:
71:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:11:6E:4C:D6:EE:6C:30:70:10:29:06:6C:EF:53:08:55:92:C2:91
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5cf88d45-46e7-38d5-bcff-530e8b196a21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.20.164.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:6b:97:46:48:0b:e4:b8:96:e8:eb:37:01:b3:43:c5:b3:eb:
cf:a4:51:61:4e:4a:da:f5:04:65:ec:49:1f:b1:c3:3f:8f:28:
a7:a6:3b:04:02:0a:f9:66:a8:ad:51:d8:93:e6:e3:7e:ff:57:
5b:df:a5:a7:c5:d7:21:c8:9e:8a:cd:76:d8:10:83:6a:8e:c1:
da:fd:6c:73:57:83:55:39:93:8e:95:3a:92:d0:5a:6b:d0:af:
81:30:1d:4e:18:9a:50:96:ee:0f:c7:1e:1b:91:58:7c:45:41:
8e:f2:ae:c3:e3:a8:ca:34:b0:f1:df:21:9b:64:df:ab:37:ef:
f0:61:49:ec:b8:54:6e:b1:3c:c4:0c:4e:49:7a:0a:59:5e:19:
bc:53:e5:48:cc:17:cc:97:3d:2a:4e:5d:79:07:78:e5:d8:74:
36:54:d5:cc:a4:e7:d5:23:ec:85:23:71:30:05:92:d0:70:c0:
6d:0a:fb:83:a4:64:03:24:5e:d4:a1:62:be:3c:10:04:10:87:
91:2a:d7:d7:28:4e:7a:d1:4c:7f:7a:04:7d:7d:81:88:fb:f3:
14:00:53:9c:e3:84:28:e8:60:64:28:64:f2:af:61:8a:ec:64:
7d:73:01:e0:9a:73:eb:0c:a4:d1:a6:0b:12:92:6c:29:e3:9d:
a6:c5:52:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:12:33 2026 by rpki-client