
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4ca691-3843-342f-8b99-3f24ba239314.roa
File: 0f4ca691-3843-342f-8b99-3f24ba239314.roa (raw, json)
Hash identifier: 4rfs/b1lbaChLvyiREGelq0XO8zIOYli/AGZEpv98Yg=
Subject key identifier: 25:78:5B:CF:89:C4:A2:D9:3A:AA:30:99:8E:D8:04:A2:28:F6:F0:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3D2463DA93B5E95944F240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4ca691-3843-342f-8b99-3f24ba239314.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33491
IP address blocks: 76.16.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3d:24:63:da:93:b5:e9:59:44:f2:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=1432db4c-78eb-4ffd-82b3-fe52f971a9e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9e:0d:a8:75:37:81:c4:33:14:93:bc:56:57:
e2:2e:c1:34:b3:39:82:24:74:e8:e1:78:02:6d:70:
8d:b6:3f:4e:9f:7e:74:1c:eb:96:e5:f0:89:a4:66:
d3:0d:b9:20:e5:75:9f:be:b7:88:87:8c:b4:2f:53:
3a:42:a9:52:fd:3f:38:5a:b2:06:97:d4:b1:2b:23:
31:b5:6d:7d:21:5f:25:ea:75:a2:78:a0:89:ce:b5:
df:fd:1f:6a:8a:71:85:9d:3b:1c:b6:c2:5a:85:1b:
fb:26:76:d6:7e:81:a8:20:17:34:0a:58:9d:a9:b5:
38:8e:a3:64:70:c7:15:85:a3:32:ee:d6:b3:23:b2:
ff:24:5c:5b:e2:47:6e:cf:21:82:3e:1d:e3:76:90:
d5:c9:a6:67:19:93:1c:29:03:fa:63:5e:ff:46:d7:
5a:95:80:02:e3:bf:a6:af:4c:23:c3:d0:99:04:d9:
d9:6c:6a:6a:d9:df:de:b5:de:f7:de:89:54:46:6f:
30:1e:c7:44:62:b4:06:8b:36:34:70:44:16:12:4b:
12:24:00:f2:2b:7c:70:ed:15:7e:68:17:6f:6f:91:
d6:80:cf:d2:8d:19:bf:a1:d1:aa:2f:cd:cd:5b:c9:
44:0a:2d:99:bd:16:11:0d:cd:bf:1a:31:e1:b0:dc:
a1:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:78:5B:CF:89:C4:A2:D9:3A:AA:30:99:8E:D8:04:A2:28:F6:F0:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f4ca691-3843-342f-8b99-3f24ba239314.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.16.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7b:56:15:7c:b3:82:21:23:56:e7:c6:c1:e1:2d:0c:b1:f0:
53:0a:5c:92:44:e2:4f:50:44:71:80:0c:70:8f:f6:c9:15:0c:
64:3d:9b:47:b5:63:53:15:6e:da:51:49:2a:b4:18:44:19:c9:
5b:b4:85:cf:b5:ed:7e:92:d7:33:30:0a:25:65:68:55:96:5f:
24:04:ad:f5:d9:df:f0:86:c1:ef:47:1b:24:e3:89:c8:31:a7:
c6:58:d4:b1:55:93:78:80:ed:e8:99:f7:57:eb:dc:40:24:c5:
dc:9a:4e:dc:6c:0b:65:e2:b6:f3:6c:8b:a9:2e:37:42:b4:c6:
43:f8:c0:2d:07:dc:d7:54:a5:ac:67:0b:b2:59:41:31:14:34:
cc:a0:df:61:7d:f5:4d:cd:0c:77:ac:ee:a2:3e:4e:57:59:ed:
5a:7e:52:b6:ae:d4:8d:14:00:41:15:87:a8:53:ca:2d:df:df:
bd:70:e0:4d:fa:ac:10:46:56:8f:b5:58:d0:74:49:89:c6:d3:
6a:53:6c:7b:f8:b8:e0:30:b7:ce:39:08:6c:99:2c:6d:1c:2a:
0d:2e:38:20:60:1e:6b:73:15:d2:a7:02:9d:76:a5:c4:dd:f2:
bb:e9:7d:5f:bc:a0:e7:da:0f:5f:1d:c0:38:22:9a:9b:fa:1a:
8b:1f:e2:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:46:47 2026 by rpki-client