
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa
File: f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa (raw, json)
Hash identifier: pnuA67FRL395j4wsTIhEqor49ahZKicruzhbyGQFYk4=
Subject key identifier: A2:9A:A0:6A:B2:85:B8:A2:BE:76:34:F0:8B:2D:97:0E:F1:23:A8:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4DCCEA240E2555637A0800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33490
IP address blocks: 76.144.2.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4d:cc:ea:24:0e:25:55:63:7a:08:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=f36e58a0-b6a2-48a4-8229-98f05132c804
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:58:7b:26:4b:28:17:d3:0d:97:1b:18:76:04:
6b:9f:a2:a1:e8:8f:2b:89:08:46:69:fb:4a:91:8b:
d1:9d:84:06:2e:e4:87:5c:2c:81:20:9f:8c:8a:8a:
64:cd:21:a3:15:c7:52:aa:70:34:5a:fb:20:9e:85:
97:cf:5b:5c:23:46:d2:bb:dc:ce:69:b5:f9:31:24:
8d:a9:3b:cd:e3:99:89:24:86:54:8f:0f:5c:e0:11:
87:37:0e:00:d7:ea:8c:45:33:2d:af:6c:2c:5e:ad:
4b:cf:9d:b1:46:d9:18:ec:ea:1c:77:c6:b9:29:de:
c2:c0:cc:f2:19:2a:82:59:e7:f1:73:52:06:0d:c0:
77:a7:cc:f3:50:72:7b:e1:1c:71:4d:55:0d:39:5a:
c9:0a:bb:f3:65:0f:af:62:83:1d:60:f3:78:15:54:
d7:9c:b4:e6:2f:5a:bb:7b:3a:f2:07:39:fc:eb:3b:
a0:e4:24:7e:6f:c4:60:2c:d3:da:b0:7d:c9:d6:91:
fa:95:7f:ef:05:15:bb:40:d3:82:a9:e9:10:1d:77:
b1:2e:6b:e8:e9:b3:e4:0f:26:6f:70:23:dc:39:56:
55:49:29:56:52:19:1d:6a:19:7c:5e:9d:9e:88:48:
24:c7:bd:39:55:9c:54:4b:e5:79:43:5b:b5:60:dd:
b2:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:9A:A0:6A:B2:85:B8:A2:BE:76:34:F0:8B:2D:97:0E:F1:23:A8:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f3e3c00b-ce9b-3b2e-a5de-25bbf8bf2918.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.144.2.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:2c:93:a6:b1:9f:cc:82:9e:02:e6:73:aa:3d:61:4a:3a:13:
39:d0:d3:c5:22:4c:d9:75:03:a8:15:77:ce:7a:a3:6d:fd:68:
b1:fb:c5:be:9e:e7:70:b4:58:22:11:82:75:d1:09:2f:78:f6:
21:eb:45:78:59:81:9b:62:62:d9:fd:58:0d:0d:b9:44:36:2c:
cc:c5:80:95:d6:95:52:be:50:6a:a5:59:6a:af:08:1f:89:67:
79:40:0b:7e:88:7e:9c:a4:0b:a6:75:1d:fe:9c:0c:f3:cc:16:
08:9a:cb:61:cd:d6:05:1d:27:15:05:66:da:e2:f9:4c:0b:75:
92:60:8e:d6:87:23:ee:df:07:69:e7:37:eb:b3:fb:02:f5:31:
75:f8:be:66:e3:87:b3:84:27:de:d5:2f:df:d5:33:99:16:76:
8a:68:8d:64:23:f8:c8:8c:76:05:1c:86:31:45:3b:cf:0a:e7:
23:79:61:11:f4:98:0d:ad:22:1f:b9:fb:7d:b7:51:eb:cc:35:
cd:3d:7b:05:c2:ef:9f:bc:9b:3b:0c:a3:25:1a:55:74:70:b7:
5a:60:75:1a:08:0f:af:68:ff:98:29:87:44:33:a3:81:59:b5:
37:72:5a:20:d2:82:0b:46:37:37:84:94:b3:95:47:8c:7e:6d:
28:cd:e5:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:09:47 2026 by rpki-client