
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
File: 4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa (raw, json)
Hash identifier: z1V8juTX1WO8E+i6e+YpAymO3+r40lC6S9Lp6EtRlgM=
Subject key identifier: 27:DA:DF:2B:FD:33:44:02:86:45:EB:89:86:4D:E3:4D:A4:38:76:5B
Certificate issuer: /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial: 010D0C9F4328584CD13CA816DE4DAC9180C9E180
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
Signing time: Tue 10 Feb 2026 14:00:41 +0000
ROA not before: Tue 10 Feb 2026 14:00:41 +0000
ROA not after: Mon 11 May 2026 13:00:41 +0000
asID: 395092
IP address blocks: 64.28.236.0/23 maxlen: 24
172.96.136.0/22 maxlen: 24
2607:a680:3::/48 maxlen: 48
2607:a680:7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d1:3c:a8:16:de:4d:ac:91:80:c9:e1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Validity
Not Before: Feb 10 14:00:41 2026 GMT
Not After : May 11 13:00:41 2026 GMT
Subject: CN=a057c0b1-a3dd-4a92-9fda-60d8576dff8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:3b:82:7d:d7:d4:25:ca:ff:37:47:05:2e:30:
1d:96:c4:3c:37:4e:86:ca:91:36:c7:f2:75:7a:8c:
e4:92:1e:93:56:c2:e5:5c:6e:8d:c4:a9:f9:9a:05:
c1:59:90:39:68:84:bb:10:78:ad:01:d8:97:82:88:
a0:c6:84:89:c7:15:48:f2:82:ac:b8:0c:e9:08:25:
28:8a:18:d6:2b:9c:e8:69:a6:93:73:f3:81:71:2e:
ec:f8:30:d8:80:f0:45:05:53:5b:52:5f:f8:b1:f3:
af:58:2f:e5:0a:c8:ce:78:1a:59:48:5f:cb:a2:5b:
84:ae:9e:52:b4:59:36:04:c7:7b:79:34:25:5e:8c:
3e:73:e5:4d:eb:dd:ff:2e:5e:52:2f:31:60:4c:9a:
12:df:af:97:9a:08:b3:c9:6b:f2:90:46:32:0e:9d:
d1:2f:7f:5d:75:f2:0d:cf:5e:4a:3d:36:06:1e:af:
81:e8:c4:91:d0:b6:b8:32:bd:a6:ba:21:56:27:0d:
59:34:98:f1:be:b0:62:07:6c:0b:28:22:d7:93:3f:
a2:dc:c7:4f:e2:24:d7:4c:79:4f:94:73:55:cb:a1:
e7:2c:25:08:4e:d9:fb:cf:84:7f:77:5e:29:1b:4d:
94:69:cc:54:88:9a:01:5d:80:3b:e9:65:10:b2:5d:
fa:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:DA:DF:2B:FD:33:44:02:86:45:EB:89:86:4D:E3:4D:A4:38:76:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/4fcb6e97-5369-35e4-84f9-b6e57c18512a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
X509v3 Authority Key Identifier:
keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
sbgp-ipAddrBlock: critical
IPv4:
64.28.236.0/23
172.96.136.0/22
IPv6:
2607:a680:3::/48
2607:a680:7::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:c9:f7:e2:b1:8b:ab:00:b4:77:1d:7f:19:8f:aa:0c:16:ee:
2b:5d:28:7d:9b:ff:e5:06:2f:7f:94:e2:43:38:de:0d:ac:c2:
5a:93:a1:5b:5c:56:54:21:15:5c:3f:9f:6b:a5:88:ee:d5:f6:
44:e8:dd:ed:95:21:4a:b1:e0:c0:00:37:97:19:6f:43:83:a3:
8d:f4:6c:77:0f:f9:e7:34:3d:9e:3a:9a:2e:88:83:ee:dc:58:
df:89:30:c6:7e:cd:c0:af:6d:1b:c9:00:f3:43:b9:1a:c3:a5:
d1:2e:57:fd:32:fb:97:32:79:62:ac:7a:b4:04:38:48:7a:c9:
66:57:e5:25:d9:18:0a:f3:8c:e4:d4:a1:87:53:a9:32:69:ef:
0a:8f:b9:90:6a:39:f6:a2:b4:61:56:39:cd:d7:e6:21:de:0d:
17:be:e4:a8:8e:2f:a0:25:99:56:ac:27:92:2d:1b:ee:e8:92:
50:59:c1:88:d3:31:00:60:62:af:b0:f8:b5:78:74:8f:45:f6:
26:82:5b:16:39:ba:14:8a:ac:2d:e0:d9:a9:81:e9:aa:6e:86:
80:e1:97:86:af:bb:30:f2:67:7a:31:8f:12:14:cb:dc:e3:94:
7d:d2:21:db:79:d0:d6:e6:b5:8e:a6:2c:53:d3:dd:e8:89:fe:
19:a3:2c:74
-----BEGIN CERTIFICATE-----
MIIGYzCCBUugAwIBAgIUAQ0Mn0MoWEzRPKgW3k2skYDJ4YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI2MDIxMDE0MDA0MVoXDTI2MDUxMTEzMDA0MVowLzEtMCsGA1UEAxMk
YTA1N2MwYjEtYTNkZC00YTkyLTlmZGEtNjBkODU3NmRmZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzuCfdfUJcr/N0cFLjAdlsQ8N06GypE2x/J1
eozkkh6TVsLlXG6NxKn5mgXBWZA5aIS7EHitAdiXgoigxoSJxxVI8oKsuAzpCCUo
ihjWK5zoaaaTc/OBcS7s+DDYgPBFBVNbUl/4sfOvWC/lCsjOeBpZSF/LoluErp5S
tFk2BMd7eTQlXow+c+VN693/Ll5SLzFgTJoS36+XmgizyWvykEYyDp3RL39ddfIN
z15KPTYGHq+B6MSR0La4Mr2muiFWJw1ZNJjxvrBiB2wLKCLXkz+i3MdP4iTXTHlP
lHNVy6HnLCUITtn7z4R/d14pG02UacxUiJoBXYA76WUQsl36NQIDAQABo4IDdTCC
A3EwHQYDVR0OBBYEFCfa3yv9M0QChkXriYZN402kOHZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvNGZjYjZlOTctNTM2OS0z
NWU0LTg0ZjktYjZlNTdjMTg1MTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQBQBzsAwQC
rGCIMBgEAgACMBIDBwAmB6aAAAMDBwAmB6aAAAcwVAYDVR0gAQH/BEowSDBGBggr
BgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNv
dXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAVMn34rGLqwC0
dx1/GY+qDBbuK10ofZv/5QYvf5TiQzjeDazCWpOhW1xWVCEVXD+fa6WI7tX2ROjd
7ZUhSrHgwAA3lxlvQ4OjjfRsdw/55zQ9njqaLoiD7txY34kwxn7NwK9tG8kA80O5
GsOl0S5X/TL7lzJ5Yqx6tAQ4SHrJZlflJdkYCvOM5NShh1OpMmnvCo+5kGo59qK0
YVY5zdfmId4NF77kqI4voCWZVqwnki0b7uiSUFnBiNMxAGBir7D4tXh0j0X2JoJb
Fjm6FIqsLeDZqYHpqm6GgOGXhq+7MPJnejGPEhTL3OOUfdIh23nQ1ua1jqYsU9Pd
6In+GaMsdA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:06:40 2026 by rpki-client