
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/976a39fb-64f9-34f1-b084-600c65e0f295.roa
File: 976a39fb-64f9-34f1-b084-600c65e0f295.roa (raw, json)
Hash identifier: NgsGogvit/5M2isM0vyGWEmKTvy24vSTYpQ8RC+hLZo=
Subject key identifier: E4:7D:5A:C6:33:48:5D:A7:14:94:BF:87:57:FC:C2:9F:68:C9:AD:6C
Certificate issuer: /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial: 010D0C9F4328584D8128613C971438FDF152DF80
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/976a39fb-64f9-34f1-b084-600c65e0f295.roa
Signing time: Tue 14 Apr 2026 14:22:13 +0000
ROA not before: Tue 14 Apr 2026 14:22:13 +0000
ROA not after: Mon 13 Jul 2026 14:22:13 +0000
asID: 396827
IP address blocks: 199.7.76.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:81:28:61:3c:97:14:38:fd:f1:52:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Validity
Not Before: Apr 14 14:22:13 2026 GMT
Not After : Jul 13 14:22:13 2026 GMT
Subject: CN=4d41db10-cf0e-4022-82d4-13ff2dabfc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:de:a0:0b:51:cf:17:2c:f5:e6:f8:93:29:95:
74:9b:4a:09:e7:00:93:69:97:15:89:81:59:fd:6a:
a4:55:0b:78:8a:14:0c:24:f0:48:99:2a:0b:8c:fb:
2e:34:c1:39:9d:89:92:53:e1:e6:0a:c6:f4:97:71:
cc:ce:b7:72:9e:a9:5d:d0:db:52:5a:28:83:95:5f:
13:d0:25:e0:43:dc:57:47:38:89:ef:69:04:c2:ac:
4b:0f:76:3e:b4:39:8f:9b:98:e2:33:2e:73:06:dd:
57:19:d0:09:05:bc:64:4b:c3:97:6a:64:89:63:2f:
d3:32:b0:a0:f5:7c:cd:94:a6:4b:1a:9a:4c:7e:62:
9e:cb:84:3d:85:d9:9f:75:b9:5d:fb:94:b0:09:d5:
83:c6:5a:b2:67:8c:9c:b3:3e:03:07:0b:55:dd:ee:
32:5e:ca:05:e1:3a:87:c0:49:36:1a:e5:e4:55:3c:
db:81:ec:52:1e:03:80:20:73:6c:0f:d9:22:0a:d0:
f8:fe:08:a5:8e:69:6b:c8:43:8c:51:37:17:cf:72:
a4:fc:43:8c:a6:3d:89:81:79:4f:14:f3:5c:97:ff:
94:e6:a6:de:f3:7f:2d:82:92:4a:84:af:57:75:0e:
76:60:de:bb:70:9d:a1:92:e7:31:b3:68:a7:1f:bc:
6d:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:7D:5A:C6:33:48:5D:A7:14:94:BF:87:57:FC:C2:9F:68:C9:AD:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/976a39fb-64f9-34f1-b084-600c65e0f295.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
X509v3 Authority Key Identifier:
keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
sbgp-ipAddrBlock: critical
IPv4:
199.7.76.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:c4:9b:13:cc:82:ba:94:09:eb:6f:6d:06:a4:93:b1:66:3e:
53:ee:b4:44:42:9c:c9:26:c8:6e:19:81:a5:55:48:4d:3f:1f:
cc:36:e7:42:4d:5c:88:05:47:26:ce:1c:fc:50:a1:d8:cb:98:
4d:61:c7:c6:90:77:7c:b0:dc:34:9b:08:da:28:02:ce:8f:2f:
cd:7b:e0:af:e5:2a:3a:6b:35:ff:40:a5:bb:33:6b:b4:7a:6a:
b3:5e:29:4e:b9:ab:02:e4:56:01:fc:04:3a:29:4a:38:8b:66:
03:77:4e:f8:22:eb:46:ca:c1:72:e0:16:49:a4:23:6c:d4:bb:
ab:e0:3f:89:aa:52:19:fe:fe:2d:46:00:1c:2d:15:49:59:15:
ee:4c:9b:17:06:f3:f5:ea:01:9f:34:08:d5:1d:e0:da:0f:bf:
c3:39:94:33:1a:26:1b:68:68:ff:42:53:d4:97:e7:fa:0a:eb:
a6:ff:90:3d:fe:9e:1c:1a:40:71:e9:a7:ef:96:0f:d0:c7:50:
18:88:65:f0:91:d8:bb:5c:ee:93:e6:cd:3f:55:6d:61:88:c2:
71:92:10:aa:8b:a4:e5:f1:bc:80:8a:73:2a:73:cb:58:3e:35:
cf:60:75:f4:84:59:92:2d:83:c3:13:95:c2:cf:49:cc:88:69:
ad:f8:b2:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:41:32 2026 by rpki-client