
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca677939-3a0f-3f66-b16b-045481849ec9.roa
File: ca677939-3a0f-3f66-b16b-045481849ec9.roa (raw, json)
Hash identifier: Nld/K+Mg27t++rjkAvY2YzxlXUKIZxMeiBjbFvCq53E=
Subject key identifier: 82:58:F0:61:1B:68:A6:A9:9D:63:55:4D:D4:28:16:DE:AA:1C:AC:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5CC8591144293A3A6245B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca677939-3a0f-3f66-b16b-045481849ec9.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 76.157.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:c8:59:11:44:29:3a:3a:62:45:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=702a3121-a00c-4cd3-a3f4-32ad7cb14123
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:cd:ad:3a:63:1f:61:0b:58:60:49:59:31:ec:
c2:48:a3:02:4d:a1:f8:90:04:31:c3:ff:82:49:0d:
f6:b0:b4:2f:2f:3b:cb:26:bc:34:fe:1c:ff:ae:cc:
4e:ce:eb:c6:76:49:a3:ad:0d:c8:a0:71:69:97:f3:
1b:88:51:c9:29:9a:56:d2:92:9d:bc:60:ec:8e:13:
80:c6:61:33:18:bd:e8:8d:e7:cb:ef:c1:8a:08:70:
0c:78:ee:a5:23:f5:5f:4b:93:30:bd:d2:c1:c9:cf:
24:29:85:89:0d:69:a8:b6:06:e0:3f:2e:3e:a8:00:
e1:42:72:6c:f5:b0:ae:40:1c:ec:80:64:dd:73:bc:
d4:58:3c:15:e4:8d:a0:37:9a:57:97:05:30:5d:ee:
13:4a:3d:3f:3b:c2:ed:a2:23:eb:ed:b1:b7:47:52:
ec:1f:be:8d:53:6f:cf:66:04:60:76:91:46:cd:2d:
49:93:ee:22:57:b7:01:2c:ad:fb:9a:7b:e0:54:81:
f8:a2:92:b9:52:cb:15:c0:2b:2e:6a:53:5f:62:db:
fb:9c:1b:c5:d4:a9:e1:61:6e:02:6e:46:5e:02:ce:
bd:39:11:bd:7c:3d:f5:e5:5c:ab:77:9d:b3:17:44:
98:2f:0f:0b:cb:e4:de:40:ef:60:61:b1:85:b4:c5:
c8:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:58:F0:61:1B:68:A6:A9:9D:63:55:4D:D4:28:16:DE:AA:1C:AC:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca677939-3a0f-3f66-b16b-045481849ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.157.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:17:9f:7f:8b:4e:dd:eb:df:92:d5:31:65:f8:d3:07:e5:63:
0b:93:51:a3:d6:5b:1b:81:6b:45:3b:8f:67:4e:e0:7e:e1:58:
33:29:5a:4a:79:57:a3:d7:35:1c:7c:2c:be:74:06:66:58:5d:
82:09:1c:72:09:ae:2f:f0:46:e0:25:6d:ba:0b:e8:b2:43:d3:
e7:55:f4:23:2f:be:a8:14:a0:f4:e8:bb:27:5b:c0:9e:2c:f6:
2a:15:2a:49:17:ad:08:f5:42:f5:cf:26:69:e4:db:b7:1a:11:
50:6a:97:81:3d:9e:6f:99:4f:c8:22:b6:14:fb:26:3b:da:cf:
bd:96:b9:c6:31:03:95:02:3c:12:80:78:e5:d5:01:6d:1f:17:
7f:10:bc:a4:d0:2a:1e:d6:f2:91:b2:3b:f7:1a:97:99:f2:b5:
85:af:87:56:ef:21:99:5c:ac:ec:95:cd:9b:09:c7:9e:27:bb:
57:90:1e:4d:1b:3d:a4:d6:9e:58:1e:00:b3:1b:69:ee:fc:58:
08:34:5d:a5:4e:b6:b4:f2:ee:b1:d6:e4:7c:fd:11:eb:9a:f7:
88:12:6a:c2:3b:ab:88:df:ac:56:25:59:a7:1d:34:4e:2a:4f:
1f:3b:9e:36:86:24:9e:67:34:bf:6c:23:d1:c1:b0:cd:29:09:
a0:bc:c7:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:09:15 2026 by rpki-client