
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa
File: 1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa (raw, json)
Hash identifier: 1AfqmpRCGz/79qPCS4X4VXTLKqJmN2BjpNdmPb0J48U=
Subject key identifier: 99:94:F5:5F:0C:60:5B:91:64:53:46:98:DA:F4:29:C2:F3:5C:8A:B9
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584EFE1232A374E1A09C81BD0980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa
Signing time: Sat 29 Aug 2026 01:00:12 +0000
ROA not before: Sat 29 Aug 2026 01:00:12 +0000
ROA not after: Fri 27 Nov 2026 02:00:12 +0000
asID: 5650
IP address blocks: 75.153.76.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:fe:12:32:a3:74:e1:a0:9c:81:bd:09:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Aug 29 01:00:12 2026 GMT
Not After : Nov 27 02:00:12 2026 GMT
Subject: CN=fd6d85bc-a343-4f64-ab9e-56c9fc650c4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a5:7d:7c:d2:41:25:af:16:6a:cb:f3:39:ec:
d3:d0:e4:80:bd:6a:fd:36:b9:ab:5a:6d:78:82:99:
a8:31:b9:c2:f0:8d:9b:3b:10:c3:23:36:fa:c7:79:
7a:37:03:86:c1:53:eb:34:b2:61:64:91:ae:71:a1:
46:d8:62:da:21:d7:30:28:97:ac:c8:7e:b6:ae:54:
1b:9e:43:71:2f:5a:90:d8:68:b5:06:be:94:54:99:
86:64:ba:f1:e8:3c:03:b8:c8:6b:0a:8c:89:f3:6b:
fc:57:3f:67:03:f2:06:67:97:90:db:2b:e8:44:d8:
d2:ac:d3:47:e4:c7:fe:0b:78:36:12:8a:f9:38:a0:
f7:06:22:54:f0:c5:6e:26:4a:5f:1e:02:a5:04:52:
28:74:7c:96:c0:ac:93:4d:72:c5:b1:97:4b:16:19:
10:5d:d9:c1:ab:67:7b:2f:dd:e4:1b:27:54:db:3a:
c2:6a:49:23:64:68:cd:83:50:b1:c2:b6:9b:eb:3d:
43:ed:c1:47:2e:05:22:15:30:66:ea:69:c4:cc:ed:
5e:86:ce:6b:b9:80:72:de:cd:b3:88:20:0e:25:f5:
e4:e9:e1:28:fc:e7:05:79:84:02:6d:26:ea:1c:1e:
b5:02:9e:07:a7:7a:82:5c:1d:b6:93:07:76:24:4a:
86:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:94:F5:5F:0C:60:5B:91:64:53:46:98:DA:F4:29:C2:F3:5C:8A:B9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/1f2b0a6e-ccee-30e8-85ca-20a4b126da7e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
75.153.76.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:f3:8f:64:3e:12:f8:a7:f1:79:60:f6:b5:cd:63:32:e6:ee:
c4:ae:55:d6:4d:61:98:86:1c:92:79:2d:6c:5f:6e:74:cf:ad:
27:2e:88:c8:75:9f:06:0a:0f:ca:00:a0:52:19:cb:8c:67:0e:
b9:06:03:ce:1b:d5:7b:e2:0b:57:a9:77:02:e9:27:27:91:e3:
1c:f7:3c:23:af:f6:8a:2b:be:81:a4:90:c3:80:7a:91:52:00:
8e:c3:fc:fc:26:8e:53:1c:69:77:44:70:c8:6e:8c:cf:84:88:
3d:95:65:aa:2c:e4:65:2c:7b:14:59:0e:ed:26:8c:0d:bf:37:
7e:71:dc:f3:95:1b:96:c0:23:43:33:b3:0a:f6:2f:c0:77:b2:
99:65:1f:94:12:30:b1:24:ba:f3:ed:b1:c8:38:2a:2b:28:13:
b3:ef:f9:30:b2:e3:c0:d5:30:ab:f7:24:45:2f:95:01:c3:73:
83:1c:17:14:2d:0f:7d:d7:43:c4:57:7b:b1:48:e4:99:52:f5:
00:d4:b2:f4:d0:b9:76:64:9e:b4:16:ca:ea:69:f3:d4:f5:0f:
f4:65:97:c5:93:0e:42:c8:66:08:5c:1f:83:eb:b5:3b:b8:61:
0e:b2:16:e5:6a:f1:51:b9:83:59:1e:f8:14:2f:34:2a:bc:12:
37:89:9a:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:51:39 2026 by rpki-client