
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4416e7ce-fc92-3e42-95c2-ce3732232a19.roa
File: 4416e7ce-fc92-3e42-95c2-ce3732232a19.roa (raw, json)
Hash identifier: GvlJSAX+i/PaoHPf2rCVtTW6GUIe9uQ4Z+4mP9EEdXk=
Subject key identifier: 08:E9:61:BC:31:13:81:16:88:9B:02:8D:CE:84:8B:81:0F:DD:4C:56
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE588846623718A8BDA82500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4416e7ce-fc92-3e42-95c2-ce3732232a19.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 76.157.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:88:46:62:37:18:a8:bd:a8:25:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=679030d9-54c5-45c6-9bb6-14b4ce43a81a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:33:ee:e4:81:25:d1:7b:4b:cf:2e:dc:ad:82:
93:f2:b1:9b:a7:88:2c:0d:f4:b8:b2:7c:4f:fc:0f:
a8:05:43:3d:27:35:fe:3d:1e:62:63:f6:1b:9c:7c:
05:d6:66:7e:83:69:dd:f8:b7:94:3f:d1:2b:e5:d0:
31:f0:02:3a:e8:2e:50:ff:d6:5f:20:9c:04:5b:9c:
94:8f:d5:93:9d:05:a0:22:ca:65:24:fb:3e:f9:a9:
60:b8:e7:e0:ba:00:c4:ed:6c:30:e3:9f:f4:b2:a6:
3c:81:bc:c1:e4:ba:a4:87:7a:2a:1a:b7:5c:c8:f9:
86:85:c2:0c:f6:f8:ad:88:58:6d:ce:c6:15:94:18:
02:ce:2d:aa:e9:7c:7c:fe:8c:44:cd:7a:90:20:61:
60:d8:b5:a4:9e:3a:76:6e:29:1f:a9:a9:90:57:29:
9b:a4:8a:68:3e:7f:e6:df:77:d9:6f:6c:77:02:fe:
65:75:cb:5d:91:9b:9f:6b:d4:9d:99:8f:31:46:8d:
60:06:25:6f:6b:7e:91:5d:12:ba:ae:35:bb:c1:b5:
66:1a:24:95:23:94:0f:af:5b:c8:ea:f0:f7:28:9f:
e5:ec:be:70:dc:cf:c4:0d:76:f2:b3:cc:b0:ae:92:
3a:a2:70:34:0d:03:e5:7a:6e:7b:c7:e9:0e:f2:c2:
5d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:E9:61:BC:31:13:81:16:88:9B:02:8D:CE:84:8B:81:0F:DD:4C:56
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4416e7ce-fc92-3e42-95c2-ce3732232a19.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.157.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:35:1d:ba:b1:2f:bd:19:9a:4b:f0:cd:3c:f2:45:01:c9:54:
67:84:90:ca:7f:51:99:a8:28:ea:85:f4:2b:7b:4a:59:e5:54:
62:a1:bb:42:b7:4e:4b:27:79:f5:27:ba:14:94:1e:94:c8:6b:
e7:27:b7:e7:c6:e9:a6:bb:91:e5:4a:76:02:a5:0c:ee:df:cf:
02:ec:1c:4f:53:65:de:1d:07:e1:60:2f:b3:da:9d:47:70:d5:
4e:8f:f5:fd:35:79:f9:00:7d:e9:9d:bb:55:be:3b:ca:c5:5e:
ff:ce:bf:f6:a0:32:48:11:04:3f:ef:68:79:64:03:48:96:7c:
7f:6f:1c:6f:97:b3:d7:d3:00:e4:b2:09:94:ba:9a:a1:4e:0c:
66:7c:76:4b:9e:fa:46:c0:54:18:1d:0c:e4:c7:3c:c5:68:85:
38:1d:ff:c9:70:82:28:02:09:55:d0:ef:27:e0:17:d3:6c:9e:
3b:af:2c:71:a3:97:f0:c3:ed:e8:d3:23:2c:e2:50:0d:35:24:
39:48:f2:7a:cb:aa:50:a7:53:02:a4:b2:98:6b:6a:47:b5:65:
4b:70:9f:5d:90:76:37:56:86:57:60:d1:0c:96:4e:f7:42:8f:
0b:56:1e:55:81:9a:09:b9:e2:e3:b8:91:3d:bb:96:b2:41:27:
0b:a6:12:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:09:28 2026 by rpki-client