
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84f4f1fc-7308-3aad-a9aa-115782f3fdab.roa
File: 84f4f1fc-7308-3aad-a9aa-115782f3fdab.roa (raw, json)
Hash identifier: 68qb5nMDHB2JoXyGtZ7wSNbQVJy8Wfa1bTnryZXd0Yw=
Subject key identifier: BF:BD:0F:E2:06:90:F7:F9:89:91:43:74:63:75:0D:F7:4A:E5:2D:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119FA8D3E265B168FEF00500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84f4f1fc-7308-3aad-a9aa-115782f3fdab.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 76.150.174.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9f:a8:d3:e2:65:b1:68:fe:f0:05:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=606c4f38-aaed-4a59-94e0-4768295c7577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:a7:48:05:65:d0:6c:a0:8a:39:7b:3c:71:7c:
7c:e5:6c:11:e5:af:17:9b:0a:8d:89:70:2b:17:e0:
b8:6f:c8:13:78:7f:3e:f8:c9:db:8d:dd:b7:db:73:
2b:5d:b6:52:6f:eb:54:57:37:8a:2a:95:b1:b4:99:
98:8b:1d:40:26:42:b4:38:31:b2:60:f1:f5:82:82:
d0:5f:28:b4:ed:38:01:a5:ee:ad:ca:5a:35:31:b1:
2e:18:b5:16:ed:c8:20:9d:80:1e:0f:5d:1f:52:80:
97:98:a7:96:81:22:d8:12:9b:86:9f:36:21:c0:ad:
4e:fa:87:ef:c4:7c:98:ce:d8:3a:cb:84:4c:13:d9:
c8:2e:8f:fa:c7:54:14:54:bf:46:6a:9c:ee:3e:e9:
48:1c:9c:d5:5a:cc:3c:d8:b4:f8:7e:5c:75:3b:bf:
a3:4c:70:ef:9a:f5:45:90:b4:0a:02:4b:17:ea:12:
0e:7d:ec:61:3c:a3:16:25:3f:47:7a:f4:4d:5f:d4:
94:ac:5e:e8:1c:33:1e:06:2c:59:b6:97:04:89:e5:
ee:cb:20:7f:c9:0f:b6:50:29:5f:47:ca:67:0e:61:
e7:fb:59:4d:43:c7:75:17:be:47:e4:20:a8:94:0d:
d3:ea:83:e3:f7:76:33:61:3d:37:03:9c:6e:72:eb:
2d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:BD:0F:E2:06:90:F7:F9:89:91:43:74:63:75:0D:F7:4A:E5:2D:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/84f4f1fc-7308-3aad-a9aa-115782f3fdab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.150.174.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:d0:67:c8:5e:8d:fc:da:52:07:1a:45:b2:95:b8:0a:ff:ec:
ed:55:5d:d6:03:e8:36:b1:31:b2:dd:44:63:3b:11:8e:78:6f:
2b:24:48:b4:a8:e7:8d:ee:b3:01:08:fd:d5:82:b5:73:38:a9:
c2:8a:48:c6:ce:a8:f0:b4:05:df:01:26:cc:9c:af:fd:6b:66:
a0:6d:77:f3:60:ed:40:d3:bc:42:7a:c5:12:aa:9f:44:17:63:
bd:be:db:0c:c1:bd:86:27:bc:aa:51:70:ed:dd:d2:d3:a8:94:
12:ab:55:24:4f:fb:b9:da:b1:66:6a:50:64:34:4f:87:b9:4e:
42:9e:80:be:ca:d6:1e:15:a2:91:49:d2:5e:04:9c:4e:e2:e9:
4e:27:fb:5d:be:67:a2:c1:e9:6f:bc:ee:f3:9f:aa:14:33:3a:
58:a0:a6:82:e8:7d:41:5f:28:fe:e0:29:20:d6:0d:51:e6:bb:
e4:42:37:b8:90:4c:f8:f2:97:a3:46:ea:b7:a7:ce:4e:e7:d3:
31:df:49:91:97:df:d4:f0:0a:d5:88:d8:30:df:7a:81:e6:54:
0a:8b:bf:30:96:e0:83:a2:11:be:c5:a9:cc:58:1c:ff:ab:4a:
8c:a2:a1:f7:8b:6c:cc:50:75:cd:a0:f7:bc:8e:7f:18:65:7f:
b4:78:f5:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 12:39:45 2026 by rpki-client