
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/152623f0-09d0-3485-89e4-5b651d49e620.roa
File: 152623f0-09d0-3485-89e4-5b651d49e620.roa (raw, json)
Hash identifier: Dy7z9jEDWZlmopSCUl9Jab7VCDlKKKuof0nLwIFZi34=
Subject key identifier: CD:C6:A1:B0:4C:B3:4C:01:FC:37:9E:93:1A:F8:8E:1E:7E:7E:46:36
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE8BB1892374FF42CE84160
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/152623f0-09d0-3485-89e4-5b651d49e620.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 13367
IP address blocks: 107.4.136.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:bb:18:92:37:4f:f4:2c:e8:41:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=5fa43f48-3841-4d2d-b650-f2c757789251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:a8:19:9d:2c:c7:a0:5a:7f:a8:0e:03:ba:83:
ab:42:89:ce:a6:09:08:81:5e:84:61:20:c6:e4:ac:
5c:d0:14:59:7e:05:9d:a4:c3:6c:21:bd:70:eb:68:
92:76:8c:21:71:6b:d5:66:34:7b:44:13:82:fb:ef:
fa:e9:43:9e:b7:eb:43:55:0d:b0:0f:8e:d1:9d:38:
c2:a2:02:4e:5a:23:75:27:6e:9f:3d:d2:68:5e:1f:
28:de:ea:dc:2e:51:6d:a0:ac:70:45:a9:f3:45:af:
b6:6c:04:69:9d:50:25:f4:db:63:82:ac:49:b0:f5:
ca:28:7d:c4:99:30:2e:21:73:0e:67:06:5f:92:2f:
c1:b7:8a:a0:1f:b4:90:eb:ce:58:3a:95:e4:0b:90:
a6:63:53:3b:42:0e:1f:d5:37:6f:ae:ec:44:4b:4f:
d0:73:d0:13:55:7f:f9:17:9d:d0:8b:97:68:61:1b:
50:b4:d1:1a:22:04:da:61:0c:37:0d:4d:fa:f9:a3:
07:fa:7e:f6:7b:86:b1:ae:6f:e4:86:2a:3b:71:1c:
b2:52:cd:bb:1d:be:cd:ea:d0:88:09:36:6d:23:04:
c8:0f:da:c5:26:c7:0a:b5:5b:d7:72:63:c4:2e:33:
d2:3a:8c:d5:35:14:e0:f4:b6:03:83:98:19:7d:a8:
4e:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C6:A1:B0:4C:B3:4C:01:FC:37:9E:93:1A:F8:8E:1E:7E:7E:46:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/152623f0-09d0-3485-89e4-5b651d49e620.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.4.136.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
56:e0:32:9b:af:b1:64:83:dd:74:ad:42:1a:df:2b:17:64:6a:
76:bc:49:e8:7c:eb:fa:eb:70:e8:80:05:20:f4:b3:48:06:a8:
67:41:a0:e9:45:19:b6:96:28:bc:a6:21:59:f1:d4:33:4e:d7:
01:6e:30:be:eb:d4:30:33:2a:c5:02:44:94:a5:94:3a:4d:ad:
e6:0f:48:c4:68:32:80:31:fb:2b:b4:2b:a4:30:a7:c0:9b:56:
31:ab:10:77:a2:19:a2:00:9a:e4:32:3c:af:28:01:30:c2:a8:
85:aa:97:35:dc:e7:5e:3c:59:45:38:a1:0e:39:69:ba:51:27:
2f:3b:71:f8:4b:6d:73:ff:40:4a:e8:ff:3e:37:e6:bc:93:44:
72:de:7f:66:fe:02:99:00:80:52:d5:98:3d:2c:ff:50:ce:a2:
0c:ae:e1:bb:4e:67:34:73:31:68:75:7e:43:36:17:3f:d5:5e:
9d:1b:c6:d0:40:fc:49:05:bf:2c:01:e3:6b:c8:82:84:40:ac:
50:58:82:79:cb:00:cf:40:27:90:bf:c3:47:41:14:b0:51:91:
8e:5d:6c:0e:a4:0d:82:4a:4b:23:01:83:ec:97:1d:e9:ca:87:
79:dc:1c:3f:3b:5e:d5:68:fa:23:77:57:34:86:96:07:71:8c:
0c:d8:39:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:02:44 2026 by rpki-client