
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d67c5990-f273-3422-ae4b-798d097cb7a5.roa
File: d67c5990-f273-3422-ae4b-798d097cb7a5.roa (raw, json)
Hash identifier: XTMdxg5gSSHL3FwN/E3vdxycFFSSxIiKM0u0KIXcg1k=
Subject key identifier: F5:F5:84:2D:37:9B:02:21:99:AD:72:A4:E3:92:DE:D2:23:FA:81:1A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5CCC69ECC28AE5027D5840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d67c5990-f273-3422-ae4b-798d097cb7a5.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 76.16.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:cc:69:ec:c2:8a:e5:02:7d:58:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c86d1ef7-9921-4edf-9591-815ee21343a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:0c:34:a9:46:bb:28:16:aa:5f:8a:e3:b5:1d:
7e:81:31:29:e5:3a:91:d2:0f:22:ac:01:2b:ac:8b:
ee:6d:3a:3a:39:93:c7:27:ed:13:c7:58:75:7c:e1:
3a:a2:af:d0:8f:9f:05:0e:b8:e6:3b:46:35:97:ae:
d5:38:0e:ff:04:d5:5a:96:61:e4:12:0c:90:a6:cb:
b5:a2:27:60:be:ee:98:da:96:fe:b2:bf:33:a9:c4:
6e:0b:76:2b:d8:f9:1a:ce:93:43:f5:e7:40:48:b7:
61:21:02:c0:83:97:c7:85:fc:9e:87:25:6c:28:11:
a2:3d:96:fb:02:45:83:c7:97:b9:e8:b2:13:f1:29:
c6:f1:fc:ec:a5:f9:63:90:04:ad:02:de:fd:1a:86:
0f:b5:6d:a1:b2:b7:d6:07:11:d1:f8:01:e1:87:3d:
13:15:4b:26:36:0e:68:4e:29:56:f8:30:ee:24:56:
da:9a:71:f4:4f:57:6a:cc:10:d4:5f:e4:e5:2e:6f:
6c:9c:f0:56:ff:a7:fb:e1:df:eb:f3:b5:96:c1:94:
0a:99:2b:75:7f:fc:94:b3:49:19:7e:c5:e0:0b:ca:
25:aa:02:4e:2e:69:4c:c7:07:af:09:5d:e7:21:20:
ee:70:30:a4:2a:52:bb:20:70:dc:a1:1f:a2:23:0f:
98:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:F5:84:2D:37:9B:02:21:99:AD:72:A4:E3:92:DE:D2:23:FA:81:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d67c5990-f273-3422-ae4b-798d097cb7a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.16.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:21:fc:34:53:b5:63:72:06:7c:ce:19:be:e8:38:99:de:a7:
8c:29:b5:a1:41:68:d1:d9:5e:e9:e7:a9:da:95:38:62:5d:4c:
be:2d:76:41:21:8f:5e:b1:2b:35:a7:70:5e:55:56:69:82:2b:
17:f1:8a:2b:58:d7:b2:05:39:63:41:18:be:a8:b2:81:c8:32:
3a:ce:d1:ef:2c:c7:70:2d:6e:f6:93:04:6d:c8:4d:a0:18:e5:
f7:53:09:29:f9:dd:9e:4a:46:31:d2:a5:f6:29:ad:29:14:95:
fa:dc:4f:9b:8b:f2:5b:3a:27:eb:a0:c5:8f:55:b0:c0:46:0a:
a4:64:ba:0d:8a:29:70:8f:dc:ac:93:24:2e:b6:26:dd:1c:d8:
c6:56:62:02:d8:fb:3f:3b:09:51:e2:3d:2c:6e:12:8e:e4:31:
97:c3:22:c3:ff:8b:10:0f:cd:72:39:0c:54:9f:e6:68:81:ba:
ba:8a:0c:15:ec:be:a7:3f:a3:79:ab:56:a9:c7:08:7a:3e:04:
bd:0d:c2:cd:41:1b:d4:04:89:94:bb:6f:e2:d9:06:33:5d:3c:
c1:11:77:95:32:de:f9:5a:1d:72:bb:01:60:89:e3:e4:18:df:
95:0e:61:45:71:07:b0:3e:e6:00:b2:c7:a8:92:56:fb:fd:20:
e2:73:6c:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuXMxp7MKK5QJ9WEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Yzg2ZDFlZjctOTkyMS00ZWRmLTk1OTEtODE1ZWUyMTM0M2E0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArAw0qUa7KBaqX4rjtR1+gTEp5TqR0g8irAEr
rIvubTo6OZPHJ+0Tx1h1fOE6oq/Qj58FDrjmO0Y1l67VOA7/BNValmHkEgyQpsu1
oidgvu6Y2pb+sr8zqcRuC3Yr2PkazpND9edASLdhIQLAg5fHhfyehyVsKBGiPZb7
AkWDx5e56LIT8SnG8fzspfljkAStAt79GoYPtW2hsrfWBxHR+AHhhz0TFUsmNg5o
TilW+DDuJFbamnH0T1dqzBDUX+TlLm9snPBW/6f74d/r87WWwZQKmSt1f/yUs0kZ
fsXgC8olqgJOLmlMxwevCV3nISDucDCkKlK7IHDcoR+iIw+YrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPX1hC03mwIhma1ypOOS3tIj+oEaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDY3YzU5OTAtZjI3My0z
NDIyLWFlNGItNzk4ZDA5N2NiN2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTBAEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACgh/DRTtWNyBnzOGb7oOJnep4wptaFBaNHZXunnqdqVOGJdTL4tdkEh
j16xKzWncF5VVmmCKxfxiitY17IFOWNBGL6osoHIMjrO0e8sx3AtbvaTBG3ITaAY
5fdTCSn53Z5KRjHSpfYprSkUlfrcT5uL8ls6J+ugxY9VsMBGCqRkug2KKXCP3KyT
JC62Jt0c2MZWYgLY+z87CVHiPSxuEo7kMZfDIsP/ixAPzXI5DFSf5miBurqKDBXs
vqc/o3mrVqnHCHo+BL0Nws1BG9QEiZS7b+LZBjNdPMERd5Uy3vlaHXK7AWCJ4+QY
35UOYUVxB7A+5gCyx6iSVvv9IOJzbBg=
-----END CERTIFICATE-----
Generated at Mon Mar 2 18:33:51 2026 by rpki-client