
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef7b180-2cbd-36b1-8e4b-fdfed8c86b0e.roa
File: cef7b180-2cbd-36b1-8e4b-fdfed8c86b0e.roa (raw, json)
Hash identifier: iXymJq510hONfuUJp0Jn05eYGutgm5Oe2qAPeMRmKls=
Subject key identifier: 90:76:DF:B8:F5:E4:08:D4:BB:49:86:6A:9E:AE:04:D6:C5:36:58:3A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119EBBD9DC0B345324A0DD20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef7b180-2cbd-36b1-8e4b-fdfed8c86b0e.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 76.117.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:bb:d9:dc:0b:34:53:24:a0:dd:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=d5221b64-8656-42df-b807-50d7154e95fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b0:19:3a:c7:7c:04:2a:47:57:bc:89:ee:b2:
12:e9:fe:6b:7e:83:db:66:bd:e7:b3:45:12:82:2e:
d2:0e:f0:ac:92:b1:97:44:f0:87:d0:89:f0:1d:16:
ab:03:4d:14:9e:d4:3c:0a:c9:a1:5e:ae:66:af:b4:
9b:82:1a:a4:81:e6:26:32:94:9e:39:33:b1:26:34:
92:e0:15:29:4c:2e:d6:8f:62:2e:7e:2a:8c:40:a9:
6e:00:d6:38:79:2a:94:24:a8:de:bb:16:4f:76:5a:
8f:ca:c7:c6:9e:c6:1d:98:33:e2:e7:dc:1c:a7:cd:
16:39:bb:26:5f:20:87:c6:44:72:13:a5:f9:34:10:
bd:33:d6:39:9e:43:0e:9a:43:bb:04:04:d7:25:ac:
d6:af:3b:75:38:67:45:97:7a:88:9a:34:7c:49:0a:
f4:29:65:25:5d:54:bc:b1:44:24:f4:39:f4:ba:49:
c8:5f:fc:24:ef:08:0d:f5:69:16:c6:4f:f9:6b:2b:
7d:18:da:41:b6:ee:dd:46:84:39:0d:04:ec:28:21:
ca:83:e4:0d:25:99:30:96:2f:6d:78:7f:cc:60:b5:
47:4f:41:ef:aa:d7:9f:5b:f3:5d:f9:d2:44:20:2b:
95:83:87:d8:18:a3:d2:87:07:5f:c9:b3:75:29:4e:
d2:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:76:DF:B8:F5:E4:08:D4:BB:49:86:6A:9E:AE:04:D6:C5:36:58:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cef7b180-2cbd-36b1-8e4b-fdfed8c86b0e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.117.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:12:11:7a:94:b8:39:ed:98:bc:99:13:67:0e:94:0b:df:a1:
a1:95:8f:ff:13:9d:56:f6:65:c8:41:db:de:3e:fa:50:9b:54:
5f:dd:df:39:0c:47:f4:76:2a:5f:7e:b7:4a:f7:8c:64:27:21:
6c:8a:c3:8b:0d:76:d1:1a:36:b1:df:54:04:c3:22:9c:75:71:
83:53:38:b6:c6:99:45:ed:27:35:b7:17:75:76:b7:62:99:a6:
d1:32:1f:c8:64:2e:ab:a1:55:02:9c:e5:2c:7c:75:98:f3:cb:
ac:3e:5b:e1:6c:b3:f0:bc:87:3c:0a:a6:9d:07:9b:a1:b7:f4:
2c:f5:55:b4:98:c1:0d:f3:99:f9:4c:2b:1e:61:ca:79:9e:e9:
70:95:b2:6d:d1:c1:2f:58:b8:d2:fb:33:97:bc:de:68:64:7a:
86:90:10:84:1c:a1:47:f0:34:b3:73:d7:79:25:1e:d5:ff:f8:
68:8c:16:97:e2:6f:01:e9:3d:fa:d7:40:b1:8d:a8:f0:c3:ae:
eb:f3:2a:ff:ef:5f:56:ea:2a:33:4c:de:84:79:d4:bb:c4:83:
69:18:c4:de:e9:27:74:13:d1:cb:f5:87:65:54:a9:80:e3:7b:
90:f7:a2:46:3b:cb:4a:13:76:99:6a:25:d0:f6:30:ab:9a:6b:
82:0b:37:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnrvZ3As0UySg3SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZDUyMjFiNjQtODY1Ni00MmRmLWI4MDctNTBkNzE1NGU5NWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq7AZOsd8BCpHV7yJ7rIS6f5rfoPbZr3ns0US
gi7SDvCskrGXRPCH0InwHRarA00UntQ8CsmhXq5mr7SbghqkgeYmMpSeOTOxJjSS
4BUpTC7Wj2IufiqMQKluANY4eSqUJKjeuxZPdlqPysfGnsYdmDPi59wcp80WObsm
XyCHxkRyE6X5NBC9M9Y5nkMOmkO7BATXJazWrzt1OGdFl3qImjR8SQr0KWUlXVS8
sUQk9Dn0uknIX/wk7wgN9WkWxk/5ayt9GNpBtu7dRoQ5DQTsKCHKg+QNJZkwli9t
eH/MYLVHT0HvqtefW/Nd+dJEICuVg4fYGKPShwdfybN1KU7SuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJB237j15AjUu0mGap6uBNbFNlg6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2VmN2IxODAtMmNiZC0z
NmIxLThlNGItZmRmZWQ4Yzg2YjBlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDTHUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMASEXqUuDntmLyZE2cOlAvfoaGVj/8TnVb2ZchB294++lCbVF/d3zkM
R/R2Kl9+t0r3jGQnIWyKw4sNdtEaNrHfVATDIpx1cYNTOLbGmUXtJzW3F3V2t2KZ
ptEyH8hkLquhVQKc5Sx8dZjzy6w+W+Fss/C8hzwKpp0Hm6G39Cz1VbSYwQ3zmflM
Kx5hynme6XCVsm3RwS9YuNL7M5e83mhkeoaQEIQcoUfwNLNz13klHtX/+GiMFpfi
bwHpPfrXQLGNqPDDruvzKv/vX1bqKjNM3oR51LvEg2kYxN7pJ3QT0cv1h2VUqYDj
e5D3okY7y0oTdplqJdD2MKuaa4ILN9M=
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:13:12 2026 by rpki-client