
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c838e1d1-cfce-38c3-8ff7-7a86f71a6377.roa
File: c838e1d1-cfce-38c3-8ff7-7a86f71a6377.roa (raw, json)
Hash identifier: NMl/RnCtbCfBpC526QID4Jb5JZ1w9zoN5SwY47lx9a8=
Subject key identifier: 3A:57:CE:40:FF:23:92:AC:65:3D:DE:21:11:25:6F:3E:C1:6B:D2:F5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE95B68E5572AFAC1C53180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c838e1d1-cfce-38c3-8ff7-7a86f71a6377.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 22909
IP address blocks: 76.22.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:5b:68:e5:57:2a:fa:c1:c5:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=b7ade22d-870a-49e6-aedb-e2a59da7f07a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bb:d3:e0:02:6e:48:f9:c0:96:26:1f:94:ea:
c4:4e:b1:7d:d9:25:08:0c:e5:8b:06:b1:af:ef:51:
2e:7b:96:5a:d8:54:00:8c:26:bd:c0:e9:58:64:49:
ee:b5:28:0a:5b:2d:2d:45:76:b1:59:ab:61:4f:93:
61:53:3a:12:a2:68:3f:21:83:d0:b8:90:b4:9c:19:
02:93:83:08:07:c9:f0:56:a9:4f:01:7b:91:38:a8:
f5:12:be:92:48:1d:cd:37:88:37:c3:8f:d9:82:71:
45:de:7d:f5:54:0d:d1:32:d0:63:a8:07:84:b5:6d:
cb:ba:1d:04:51:48:e4:fc:59:10:ee:93:14:a6:36:
f3:95:35:94:b7:ba:c8:29:7e:c5:bf:be:8c:ca:14:
76:a2:a9:19:15:16:d7:f1:77:9a:88:f4:d2:9c:9a:
e9:9b:0f:e8:8b:40:13:34:75:6a:36:15:da:d0:2f:
3e:77:e6:17:9f:0f:c8:6a:9b:d2:ae:f4:e1:3e:84:
08:2b:bc:ff:ac:7b:1b:be:bc:bb:ce:ea:4e:82:27:
88:57:de:df:69:1c:d8:a5:3d:25:40:d9:c4:fa:9c:
cc:be:9e:fe:19:d9:12:94:6d:b7:ca:22:08:ae:e1:
02:c1:60:f1:25:ce:7e:ca:88:eb:d1:6e:df:dd:51:
57:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:57:CE:40:FF:23:92:AC:65:3D:DE:21:11:25:6F:3E:C1:6B:D2:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c838e1d1-cfce-38c3-8ff7-7a86f71a6377.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.22.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:3e:e4:fc:c2:36:22:8d:0b:dc:41:61:01:b4:ed:97:a7:6a:
aa:e4:f3:2f:a3:7a:75:31:e6:17:63:09:f4:8c:0c:64:af:d6:
97:f0:63:8f:d1:22:60:bb:3c:fa:61:27:a8:76:70:9c:5e:2b:
f2:79:43:43:9b:e4:07:fe:a7:f5:9e:8e:fa:55:d1:75:c0:59:
ed:43:40:0b:71:22:01:2e:9c:e6:0e:ea:18:2e:96:49:c2:9d:
1c:aa:d5:bd:b6:c8:5e:8f:7b:4b:ee:d7:fe:b0:d1:d1:b1:61:
22:89:fd:9c:5f:03:47:95:e4:a1:e4:9b:1a:4b:99:4f:07:c3:
69:bf:a3:d7:c6:67:ad:47:cc:2e:02:a3:94:ec:72:89:cd:0b:
2c:4d:ea:3f:37:39:30:73:42:09:0e:9a:ea:73:55:b8:52:44:
d2:da:64:c3:0f:bb:f4:20:f7:ca:4c:b8:7c:a7:53:80:81:af:
7b:28:a5:e1:7a:ae:9a:50:24:8e:86:80:00:16:92:3e:ef:28:
6c:38:85:b9:92:cb:ea:29:8e:a5:40:37:b5:94:dd:e1:ff:2e:
41:86:51:8d:d4:f9:23:8d:16:d0:50:d0:20:6e:fa:ef:0c:cd:
b4:a2:c9:c3:c2:20:eb:95:5c:ab:1e:67:e5:23:b3:d0:55:d2:
ec:37:1c:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96Vto5Vcq+sHFMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
YjdhZGUyMmQtODcwYS00OWU2LWFlZGItZTJhNTlkYTdmMDdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorvT4AJuSPnAliYflOrETrF92SUIDOWLBrGv
71Eue5Za2FQAjCa9wOlYZEnutSgKWy0tRXaxWathT5NhUzoSomg/IYPQuJC0nBkC
k4MIB8nwVqlPAXuROKj1Er6SSB3NN4g3w4/ZgnFF3n31VA3RMtBjqAeEtW3Luh0E
UUjk/FkQ7pMUpjbzlTWUt7rIKX7Fv76MyhR2oqkZFRbX8XeaiPTSnJrpmw/oi0AT
NHVqNhXa0C8+d+YXnw/IapvSrvThPoQIK7z/rHsbvry7zupOgieIV97faRzYpT0l
QNnE+pzMvp7+GdkSlG23yiIIruECwWDxJc5+yojr0W7f3VFXLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDpXzkD/I5KsZT3eIRElbz7Ba9L1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYzgzOGUxZDEtY2ZjZS0z
OGMzLThmZjctN2E4NmY3MWE2Mzc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTBaeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACs+5PzCNiKNC9xBYQG07Zenaqrk8y+jenUx5hdjCfSMDGSv1pfwY4/R
ImC7PPphJ6h2cJxeK/J5Q0Ob5Af+p/WejvpV0XXAWe1DQAtxIgEunOYO6hgulknC
nRyq1b22yF6Pe0vu1/6w0dGxYSKJ/ZxfA0eV5KHkmxpLmU8Hw2m/o9fGZ61HzC4C
o5TsconNCyxN6j83OTBzQgkOmupzVbhSRNLaZMMPu/Qg98pMuHynU4CBr3sopeF6
rppQJI6GgAAWkj7vKGw4hbmSy+opjqVAN7WU3eH/LkGGUY3U+SONFtBQ0CBu+u8M
zbSiycPCIOuVXKseZ+Ujs9BV0uw3HJs=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:31:22 2026 by rpki-client