
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa
File: dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa (raw, json)
Hash identifier: 1diHhXE+q07v2tK6MkTixaLhMa3HGW0qASvP4iTGpBw=
Subject key identifier: E8:B4:77:08:9F:67:1D:E3:9D:30:9F:AE:9F:C7:BC:71:EE:BC:43:11
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F014996A8E67B3BF69170
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33490
IP address blocks: 76.144.248.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:01:49:96:a8:e6:7b:3b:f6:91:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=0a36d9b4-fb5e-479e-875f-6114a8575055
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:10:30:a3:59:49:35:f3:bb:57:02:e4:64:8f:
18:de:b6:fd:88:01:e9:23:b6:c4:b4:28:8f:e5:5b:
e1:75:a6:b7:41:0f:31:30:4f:d4:59:07:77:eb:6a:
85:a1:f5:0a:8c:a3:f4:3c:1b:f3:af:9e:08:a5:08:
41:5c:a2:5a:99:2d:bf:c8:0a:93:e4:ef:21:08:ef:
a1:91:60:d5:63:de:bb:67:54:2e:cd:1b:5c:c6:34:
74:aa:e9:4d:a4:38:37:f6:94:0a:1a:5e:b2:a7:a1:
5d:18:2b:55:b9:23:a8:c3:44:a5:b2:2f:3a:bd:03:
95:d3:ac:ae:35:4f:a9:a5:a1:68:1a:7b:9f:f8:d5:
62:a3:39:e0:10:d5:b3:db:16:db:62:37:da:08:fd:
da:f7:33:85:c6:5e:8b:ab:d9:3e:6f:a9:2d:73:e8:
13:c3:15:82:56:b9:71:72:a4:00:14:f6:e3:6a:84:
4c:88:7f:b6:59:2b:15:f6:be:1a:30:d4:6a:83:52:
06:19:0e:ca:9b:8e:54:0a:68:42:82:a0:37:9a:38:
40:32:a4:a7:5a:de:e2:03:71:c4:b5:4a:85:db:b8:
7f:b3:9a:8e:4f:82:51:1d:07:83:11:c1:4c:5b:03:
af:5c:39:3e:45:80:a0:c2:bd:90:7b:36:3d:c3:64:
b3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:B4:77:08:9F:67:1D:E3:9D:30:9F:AE:9F:C7:BC:71:EE:BC:43:11
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dd5fd8ff-2c4f-3af9-a858-b4df6b49caa7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.144.248.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
26:38:e5:55:a0:ec:9f:fa:a3:d5:97:df:52:4a:c4:d7:37:af:
77:dd:71:b9:88:f2:6a:7c:b0:cc:10:7d:1b:fe:81:3c:27:eb:
95:3e:4e:be:64:71:7f:79:21:b3:a4:df:46:a1:a5:01:8c:8b:
ad:e1:c6:28:36:35:c6:b2:4e:a0:5c:07:2a:f1:1d:c0:b8:b4:
9f:83:f4:ef:d2:98:37:75:54:c0:98:ce:fb:8b:e5:04:40:00:
3e:f4:db:fa:a1:b8:49:fa:36:53:70:29:fb:c8:ee:b5:1d:1e:
65:fd:b6:17:53:c2:41:34:fc:87:b2:8d:9b:d5:c8:4d:8f:4b:
be:7f:ae:e4:73:0c:99:50:b0:b2:f0:ad:0d:24:df:57:b3:9c:
81:ae:9f:c4:72:5a:07:36:65:10:fe:be:66:e5:e4:6f:2b:d2:
76:d9:75:e6:05:78:ba:9e:cb:f5:17:54:d0:27:59:ba:b8:f6:
f8:10:aa:21:46:25:6d:e3:11:4c:dd:03:0b:fa:94:45:9f:24:
79:a5:c7:de:74:31:10:62:c6:49:78:d2:98:70:b8:67:6a:39:
62:6e:a9:9d:77:3d:d3:10:28:bb:5b:be:9a:b3:13:f2:99:78:
60:b0:fd:de:75:c3:a9:05:39:a4:9c:df:8b:19:e3:ad:c3:c8:
eb:f4:72:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 11:57:45 2026 by rpki-client