
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76a1ca74-e0ac-323a-af68-3309fb58ce0d.roa
File: 76a1ca74-e0ac-323a-af68-3309fb58ce0d.roa (raw, json)
Hash identifier: ES/KoPWggJbdi8Ku4IeXUTkTqsuGjp65sxBDVA1xXAg=
Subject key identifier: FA:40:62:86:87:61:75:92:A0:63:AA:BE:96:55:D8:49:53:F5:45:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D5243B68567DA1E2EF4DF3F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76a1ca74-e0ac-323a-af68-3309fb58ce0d.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 22258
IP address blocks: 76.107.120.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:b6:85:67:da:1e:2e:f4:df:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=9e16fac3-b52b-405d-8af9-382cf06a6c10
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:5a:a8:14:5d:e4:a8:ae:2f:1b:82:75:4e:d5:
e9:b3:75:07:77:28:ab:13:7a:74:6c:33:26:75:e0:
22:0e:6c:92:d4:5d:21:71:2d:96:0d:79:67:85:5e:
4a:be:ad:05:58:ef:bd:29:ea:3e:b4:53:1e:1a:3c:
ff:78:ea:32:f2:b9:81:94:0d:29:e9:bd:3a:c1:dc:
12:d0:09:2b:33:92:34:68:62:67:e4:ca:0b:dd:c0:
af:5a:a3:bf:3b:60:1c:a4:42:14:83:5d:57:63:e0:
15:3f:21:2e:2c:aa:ee:d1:b1:44:ef:06:8a:18:24:
f3:e7:41:7d:23:6e:30:93:f0:66:ee:ed:4e:77:a6:
48:09:3a:3c:a5:60:f7:5a:b1:fd:e3:73:4e:18:c2:
81:8e:12:9c:41:3a:aa:4b:00:82:bc:71:53:f2:f1:
68:47:cb:76:dc:66:75:f3:56:a2:71:62:5a:fc:7b:
12:0f:29:c9:b3:02:5f:02:20:f5:52:2a:e9:8c:2b:
09:a8:3d:60:58:9b:2a:2e:a9:1e:88:fe:9c:6d:a8:
73:0a:54:35:45:ec:d7:ee:47:39:4a:6a:14:20:34:
d9:49:c6:62:06:37:bf:6e:89:0f:ad:c3:be:d8:2d:
de:38:8a:4f:f3:ab:b3:37:7f:cb:0a:32:85:c8:be:
86:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:40:62:86:87:61:75:92:A0:63:AA:BE:96:55:D8:49:53:F5:45:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/76a1ca74-e0ac-323a-af68-3309fb58ce0d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.107.120.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:a5:77:04:e1:f5:03:f5:d4:83:32:b3:a5:8a:b3:40:64:c3:
8f:d5:76:3f:1e:88:ef:04:78:c2:6c:ae:c0:ef:76:22:ee:41:
5e:14:03:3b:8f:b2:2f:ba:88:87:af:08:4f:94:27:87:c1:3c:
b6:42:e3:94:ed:74:93:5a:94:e4:41:6f:ae:bb:c9:a0:7f:4f:
6d:15:48:a5:6c:79:63:a9:15:17:73:f7:6f:86:17:40:10:93:
f7:40:1f:b2:8a:69:af:28:38:18:22:16:d1:1c:2c:b8:7e:7e:
4f:33:d0:6f:f6:4b:f5:f8:19:03:f2:5b:50:9d:32:25:52:31:
3e:9c:65:67:dc:f4:52:c7:fc:08:05:55:3d:92:42:e3:d3:ca:
e0:e7:ff:86:cf:33:48:8c:28:76:c2:10:25:1c:45:1d:68:8f:
9a:15:55:32:95:5e:a8:bc:e2:1e:fb:ad:58:4c:15:e6:d6:be:
da:fa:2b:1c:f3:f1:9c:60:c7:f6:ae:5c:49:e9:f9:24:c0:d3:
f2:f3:00:5e:d3:3c:19:ff:19:63:17:f4:d8:ee:f3:0b:09:c4:
e1:91:41:0f:9e:43:b4:c9:64:d8:6b:8f:d7:d4:af:d8:92:3f:
d7:e9:63:c9:8b:76:f7:1a:7b:ff:1c:de:be:c8:f3:d3:dc:6a:
18:b2:7c:34
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1SQ7aFZ9oeLvTfPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMyODE5MTMxOVoXDTI2MDYyNjE5MTMxOVowLzEtMCsGA1UEAxMk
OWUxNmZhYzMtYjUyYi00MDVkLThhZjktMzgyY2YwNmE2YzEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhlqoFF3kqK4vG4J1TtXps3UHdyirE3p0bDMm
deAiDmyS1F0hcS2WDXlnhV5Kvq0FWO+9Keo+tFMeGjz/eOoy8rmBlA0p6b06wdwS
0AkrM5I0aGJn5MoL3cCvWqO/O2AcpEIUg11XY+AVPyEuLKru0bFE7waKGCTz50F9
I24wk/Bm7u1Od6ZICTo8pWD3WrH943NOGMKBjhKcQTqqSwCCvHFT8vFoR8t23GZ1
81aicWJa/HsSDynJswJfAiD1UirpjCsJqD1gWJsqLqkeiP6cbahzClQ1RezX7kc5
SmoUIDTZScZiBje/bokPrcO+2C3eOIpP86uzN3/LCjKFyL6GVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPpAYoaHYXWSoGOqvpZV2ElT9UX+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNzZhMWNhNzQtZTBhYy0z
MjNhLWFmNjgtMzMwOWZiNThjZTBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTGt4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWldwTh9QP11IMys6WKs0Bkw4/Vdj8eiO8EeMJsrsDvdiLuQV4UAzuP
si+6iIevCE+UJ4fBPLZC45TtdJNalORBb667yaB/T20VSKVseWOpFRdz92+GF0AQ
k/dAH7KKaa8oOBgiFtEcLLh+fk8z0G/2S/X4GQPyW1CdMiVSMT6cZWfc9FLH/AgF
VT2SQuPTyuDn/4bPM0iMKHbCECUcRR1oj5oVVTKVXqi84h77rVhMFebWvtr6Kxzz
8Zxgx/auXEnp+STA0/LzAF7TPBn/GWMX9Nju8wsJxOGRQQ+eQ7TJZNhrj9fUr9iS
P9fpY8mLdvcae/8c3r7I89PcahiyfDQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 12:56:27 2026 by rpki-client