
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85881bb6-a860-3687-a21f-a44695172a5e.roa
File: 85881bb6-a860-3687-a21f-a44695172a5e.roa (raw, json)
Hash identifier: Dk93WlvrBdJhMc0wPzdytV3UlSOn6kTktErW7U7HPlw=
Subject key identifier: 91:BE:93:2D:0F:F7:60:C9:EE:C9:96:30:B0:1A:61:55:A9:88:A9:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC2267EBB0E3D95631B3A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85881bb6-a860-3687-a21f-a44695172a5e.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 76.127.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:22:67:eb:b0:e3:d9:56:31:b3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=e07b25be-c3d0-4a1f-a6b3-248365cb185e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8e:eb:ba:09:c2:4c:d7:23:a5:15:21:3a:2b:
f3:83:fa:33:fb:71:4f:5a:5b:2c:5a:4f:52:1d:4a:
ec:ae:ba:21:65:bd:53:8a:ef:61:36:2e:6a:7b:2b:
f3:6a:a7:2b:e1:55:4d:a8:c3:0e:7e:22:8e:49:91:
74:83:60:d4:68:25:fb:a4:9b:32:5b:d2:19:39:1e:
aa:f1:82:54:81:07:b0:5d:d4:f0:d4:29:18:9a:b9:
6a:47:08:db:ca:1f:8e:5c:5d:ab:04:73:f2:cd:1c:
5e:20:20:d5:85:96:e1:3b:2d:3d:2c:03:a3:fb:1b:
2a:59:7c:15:e7:11:24:2e:b7:df:17:d9:08:ce:f2:
3a:51:24:6f:42:d8:14:ac:83:ea:57:83:86:2a:19:
c7:af:92:5e:da:a3:25:9a:73:87:33:a1:ec:12:7b:
fb:90:ae:52:80:8b:94:99:93:16:3a:f3:d3:22:e6:
dc:01:5f:ec:d9:44:6f:23:d9:ec:22:f6:9f:ba:87:
1b:b3:97:14:e4:40:c9:3f:2d:d4:24:17:a5:94:d0:
b4:5a:4d:7e:a3:61:61:90:93:fb:63:9b:7b:a8:19:
7f:dc:a8:4f:44:8c:38:5f:46:cc:2f:4a:85:a6:67:
5d:61:b0:f6:1f:c4:bc:98:83:a3:4e:97:d9:a7:a5:
15:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:BE:93:2D:0F:F7:60:C9:EE:C9:96:30:B0:1A:61:55:A9:88:A9:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85881bb6-a860-3687-a21f-a44695172a5e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.127.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:b8:09:af:a9:e8:3b:75:f6:28:0e:ed:e9:8c:27:82:e7:1c:
66:85:65:4e:5f:d3:35:1d:2f:00:24:87:08:c7:f2:a9:d8:e7:
0f:15:8d:68:a0:67:36:85:68:b5:e7:8f:07:ac:93:dd:c9:84:
1c:80:ef:20:73:c5:f3:67:02:41:37:4f:60:79:0b:af:35:50:
97:2b:2f:4c:e7:0c:57:d9:58:02:9a:a7:ae:52:92:ae:10:fa:
fb:35:00:28:e3:e9:6e:b6:fb:7f:fd:8f:75:bf:c4:e8:c1:ab:
c7:1c:5c:16:cd:27:ec:32:5d:85:d0:a6:3f:01:fa:13:5d:a9:
f9:81:b6:63:86:87:c4:6c:aa:70:58:8e:b1:23:4a:31:3e:11:
1b:47:48:3d:68:68:3b:40:54:92:c7:60:3e:8b:5d:6f:ca:6c:
d7:9b:61:5a:08:16:45:17:f9:23:3a:44:58:2d:8d:08:ec:c4:
11:85:52:67:c7:37:b1:27:3e:e7:34:17:a9:c3:a0:57:ac:c7:
7b:a7:b4:4f:bf:bf:be:70:6b:d3:77:4c:51:04:1e:df:63:98:
9e:64:d9:cb:f7:60:af:54:de:6d:b6:87:69:43:2c:08:34:9b:
c4:85:c7:93:3b:16:ce:52:2c:84:cc:a4:9b:61:f9:c2:bf:3f:
86:52:39:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvCJn67Dj2VYxs6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
ZTA3YjI1YmUtYzNkMC00YTFmLWE2YjMtMjQ4MzY1Y2IxODVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY7rugnCTNcjpRUhOivzg/oz+3FPWlssWk9S
HUrsrrohZb1Tiu9hNi5qeyvzaqcr4VVNqMMOfiKOSZF0g2DUaCX7pJsyW9IZOR6q
8YJUgQewXdTw1CkYmrlqRwjbyh+OXF2rBHPyzRxeICDVhZbhOy09LAOj+xsqWXwV
5xEkLrffF9kIzvI6USRvQtgUrIPqV4OGKhnHr5Je2qMlmnOHM6HsEnv7kK5SgIuU
mZMWOvPTIubcAV/s2URvI9nsIvafuocbs5cU5EDJPy3UJBellNC0Wk1+o2FhkJP7
Y5t7qBl/3KhPRIw4X0bML0qFpmddYbD2H8S8mIOjTpfZp6UVuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJG+ky0P92DJ7smWMLAaYVWpiKncMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU4ODFiYjYtYTg2MC0z
Njg3LWEyMWYtYTQ0Njk1MTcyYTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTH+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIu4Ca+p6Dt19igO7emMJ4LnHGaFZU5f0zUdLwAkhwjH8qnY5w8VjWig
ZzaFaLXnjwesk93JhByA7yBzxfNnAkE3T2B5C681UJcrL0znDFfZWAKap65Skq4Q
+vs1ACjj6W62+3/9j3W/xOjBq8ccXBbNJ+wyXYXQpj8B+hNdqfmBtmOGh8RsqnBY
jrEjSjE+ERtHSD1oaDtAVJLHYD6LXW/KbNebYVoIFkUX+SM6RFgtjQjsxBGFUmfH
N7EnPuc0F6nDoFesx3untE+/v75wa9N3TFEEHt9jmJ5k2cv3YK9U3m22h2lDLAg0
m8SFx5M7Fs5SLITMpJth+cK/P4ZSORg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:25:08 2026 by rpki-client