
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5e0159-177b-3225-8136-6c1308b2819e.roa
File: ed5e0159-177b-3225-8136-6c1308b2819e.roa (raw, json)
Hash identifier: tPi4DUM4Nu35w4KtW8vF2jRmuDPUaVKbpv/0cD60/nQ=
Subject key identifier: B2:08:08:D7:7D:59:2C:98:3D:D2:43:8F:A9:D0:D5:C1:53:B1:B6:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B254977891FA793B69500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5e0159-177b-3225-8136-6c1308b2819e.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 76.124.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:25:49:77:89:1f:a7:93:b6:95:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=ea1ca4c0-bc8d-45e9-a203-5892d77406dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:97:1c:7c:c3:33:06:fd:82:5d:1e:aa:dc:55:
77:31:b2:3a:4f:75:50:d0:24:b6:5d:03:44:11:41:
35:d3:6c:7f:ee:b2:34:db:38:53:7f:d7:b2:76:6f:
e5:2e:7a:ca:aa:68:b2:b9:1d:03:9c:4f:4f:5a:2c:
50:d7:60:7a:35:6b:a6:9c:ba:78:38:26:2d:94:a0:
c1:69:d9:f2:ed:ef:5f:3c:e8:26:86:79:ea:23:2e:
46:f4:9a:e6:16:26:c5:1a:8e:69:54:46:98:11:8e:
cb:ee:41:a2:bd:42:42:a8:d7:23:81:cb:2c:14:74:
da:fc:9d:d5:b1:d6:8d:73:48:e0:8a:e1:6c:14:55:
04:50:80:e7:e0:ff:44:76:98:d3:f6:6f:a4:d4:24:
bc:b0:7b:8a:9b:9c:14:01:60:bb:b7:86:69:a1:7e:
7b:f4:ee:86:81:f6:4b:c0:2d:99:80:c4:bf:6e:9a:
61:f7:22:90:18:81:35:97:a3:64:92:fd:ca:26:4b:
6f:d3:a3:93:64:81:0b:34:d3:e4:b5:3f:2b:05:c3:
f7:05:c8:6e:03:1f:25:2d:bd:c0:d4:d5:83:fa:41:
da:ac:da:6a:ec:77:f8:d8:98:33:17:c2:d4:e0:0c:
e0:c9:74:19:ad:39:ad:d2:b6:6a:ba:50:83:df:22:
83:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:08:08:D7:7D:59:2C:98:3D:D2:43:8F:A9:D0:D5:C1:53:B1:B6:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed5e0159-177b-3225-8136-6c1308b2819e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.124.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:62:88:32:ce:f3:4c:ba:1c:29:71:e0:95:0c:9d:ac:fe:1f:
ab:bb:c7:63:fe:12:92:11:f5:70:34:2a:47:23:9d:3f:e4:3b:
39:5a:84:8e:54:82:a6:55:43:19:3b:6f:74:4a:de:3f:8c:6e:
aa:70:a0:a5:28:d8:2b:40:da:e3:0b:63:d8:0c:01:5e:ba:63:
5d:b9:f7:7b:ad:77:a5:21:03:fc:e0:86:71:23:03:8e:39:b5:
72:9b:de:9e:07:9f:fb:43:07:b2:81:64:00:a2:42:68:28:04:
40:c3:0e:6f:1b:18:dd:42:87:9f:6b:0b:04:4d:ee:20:72:25:
49:22:27:8a:16:4d:9a:51:d0:b6:57:27:1f:c8:0f:f5:6b:86:
01:48:59:dc:f0:53:69:b2:59:12:64:9f:4a:a4:eb:dd:01:65:
b8:2a:4c:7a:dd:a2:cb:54:38:a8:24:67:4d:2e:85:33:5e:ad:
d1:84:38:65:16:43:e5:05:1b:03:0d:66:41:de:1b:12:85:72:
05:84:02:6a:b7:fd:86:45:cd:ef:97:62:28:38:5e:63:42:fc:
bc:55:72:81:a5:3b:34:b1:54:1b:ba:1d:87:0d:e5:10:0f:0e:
4c:3e:df:d3:43:69:91:f0:da:cd:21:6a:ba:88:5e:99:38:da:
48:0e:36:eb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWyVJd4kfp5O2lQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZWExY2E0YzAtYmM4ZC00NWU5LWEyMDMtNTg5MmQ3NzQwNmRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3pccfMMzBv2CXR6q3FV3MbI6T3VQ0CS2XQNE
EUE102x/7rI02zhTf9eydm/lLnrKqmiyuR0DnE9PWixQ12B6NWumnLp4OCYtlKDB
adny7e9fPOgmhnnqIy5G9JrmFibFGo5pVEaYEY7L7kGivUJCqNcjgcssFHTa/J3V
sdaNc0jgiuFsFFUEUIDn4P9EdpjT9m+k1CS8sHuKm5wUAWC7t4ZpoX579O6GgfZL
wC2ZgMS/bpph9yKQGIE1l6Nkkv3KJktv06OTZIELNNPktT8rBcP3BchuAx8lLb3A
1NWD+kHarNpq7Hf42JgzF8LU4AzgyXQZrTmt0rZqulCD3yKDjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIICNd9WSyYPdJDj6nQ1cFTsbYgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWQ1ZTAxNTktMTc3Yi0z
MjI1LTgxMzYtNmMxMzA4YjI4MTllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTHxIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACtiiDLO80y6HClx4JUMnaz+H6u7x2P+EpIR9XA0KkcjnT/kOzlahI5U
gqZVQxk7b3RK3j+MbqpwoKUo2CtA2uMLY9gMAV66Y12593utd6UhA/zghnEjA445
tXKb3p4Hn/tDB7KBZACiQmgoBEDDDm8bGN1Ch59rCwRN7iByJUkiJ4oWTZpR0LZX
Jx/ID/VrhgFIWdzwU2myWRJkn0qk690BZbgqTHrdostUOKgkZ00uhTNerdGEOGUW
Q+UFGwMNZkHeGxKFcgWEAmq3/YZFze+XYig4XmNC/LxVcoGlOzSxVBu6HYcN5RAP
Dkw+39NDaZHw2s0harqIXpk42kgONus=
-----END CERTIFICATE-----
Generated at Mon Mar 2 09:49:15 2026 by rpki-client