
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a21fed7-ec4a-34ce-9b18-4a7b9dc176b2.roa
File: 2a21fed7-ec4a-34ce-9b18-4a7b9dc176b2.roa (raw, json)
Hash identifier: csbIOhx8F51nzBuYNnhTpTocLmRfL7XDAovTqReYHJA=
Subject key identifier: 59:7A:74:A0:10:CD:80:74:C7:53:97:71:E6:E2:41:0F:60:C8:49:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863C4A70019BE9429EFBC86
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a21fed7-ec4a-34ce-9b18-4a7b9dc176b2.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 107.4.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:c4:a7:00:19:be:94:29:ef:bc:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=9e13d9c9-144f-48e9-b019-950386f4df80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:57:a0:59:c8:b2:99:4f:c2:8f:01:c2:ba:90:
b9:be:6b:f8:d9:ed:a2:11:cc:07:1e:e5:bf:1d:52:
81:b5:03:71:cf:fc:5c:ec:73:6c:d2:b8:7f:ba:16:
8b:47:9f:51:62:13:83:00:2a:d2:cd:15:19:66:48:
94:8d:dd:ba:f1:4d:42:ac:a7:e5:3e:10:18:8a:36:
fd:75:bb:0f:13:cc:86:df:53:bc:4d:73:52:01:f8:
e5:f7:7a:3f:71:63:3a:ab:7a:63:71:78:e2:07:ea:
40:b0:20:3a:30:d6:86:98:42:85:5a:8c:69:d5:78:
40:33:49:66:17:2c:8b:a5:99:d8:0e:0a:06:13:7f:
99:6f:aa:3f:f2:58:22:72:92:4e:ab:70:12:fe:aa:
97:c6:c5:ad:39:e4:9b:27:d5:c1:42:f4:7b:16:37:
d7:9b:10:4c:3f:03:e4:0a:0c:a6:fc:70:a4:4d:95:
1b:e3:bf:cb:79:65:5e:6f:b0:2f:03:06:ab:42:df:
ed:28:0b:6a:27:47:fb:58:d6:80:aa:27:ed:98:3e:
73:ed:85:67:ff:00:10:c7:9a:71:63:90:b2:35:39:
a8:67:d4:8b:73:34:a0:c0:24:4c:b5:1b:bf:e9:eb:
81:9e:b6:43:f0:24:57:76:5c:95:8a:7c:dd:73:e7:
53:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:7A:74:A0:10:CD:80:74:C7:53:97:71:E6:E2:41:0F:60:C8:49:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2a21fed7-ec4a-34ce-9b18-4a7b9dc176b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
107.4.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ad:8b:cf:31:81:1a:ad:a8:01:49:d2:22:b8:d5:55:b0:f8:40:
99:5c:e5:28:2b:c3:17:fb:a3:78:7b:fe:00:de:3c:0c:c3:f2:
98:37:dd:20:3e:4c:93:39:a2:25:ae:c9:b6:66:cd:07:2c:c7:
81:a3:b7:66:ba:89:9e:03:12:d5:e8:cb:a5:16:40:48:0a:c9:
9d:88:4d:d4:59:c4:77:7b:14:b1:ab:ac:b3:1d:de:0b:85:d4:
84:d3:cf:32:c7:ce:33:1c:d7:79:78:6e:01:6c:6e:12:69:3c:
fe:ef:f5:de:d7:a4:47:4a:16:83:b6:03:3a:d5:23:aa:f3:aa:
f9:85:88:e9:cf:5a:5a:ac:4a:46:7c:23:e2:a2:89:a3:c8:c2:
e9:bc:cd:89:d0:cb:17:c1:85:fb:03:3c:c1:5f:4d:b2:16:5a:
2a:04:e9:c8:50:e4:46:7a:7b:30:a7:12:44:c2:a8:e0:5d:79:
23:ca:95:c2:8b:c3:ba:25:ad:85:c2:9a:f5:60:ca:ee:00:f4:
ec:12:73:a7:c7:6a:97:45:75:39:23:96:8c:72:3f:25:13:20:
f9:68:04:69:a6:40:e3:19:0e:55:3f:5b:2b:14:79:6a:16:cd:
b6:22:f9:41:ec:06:9c:97:13:99:19:9b:9c:9d:28:4e:24:0a:
28:23:d2:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY8SnABm+lCnvvIYwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
OWUxM2Q5YzktMTQ0Zi00OGU5LWIwMTktOTUwMzg2ZjRkZjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsVegWciymU/CjwHCupC5vmv42e2iEcwHHuW/
HVKBtQNxz/xc7HNs0rh/uhaLR59RYhODACrSzRUZZkiUjd268U1CrKflPhAYijb9
dbsPE8yG31O8TXNSAfjl93o/cWM6q3pjcXjiB+pAsCA6MNaGmEKFWoxp1XhAM0lm
FyyLpZnYDgoGE3+Zb6o/8lgicpJOq3AS/qqXxsWtOeSbJ9XBQvR7FjfXmxBMPwPk
Cgym/HCkTZUb47/LeWVeb7AvAwarQt/tKAtqJ0f7WNaAqiftmD5z7YVn/wAQx5px
Y5CyNTmoZ9SLczSgwCRMtRu/6euBnrZD8CRXdlyVinzdc+dTJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFl6dKAQzYB0x1OXcebiQQ9gyEltMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmEyMWZlZDctZWM0YS0z
NGNlLTliMTgtNGE3YjlkYzE3NmIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCawR4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK2LzzGBGq2oAUnSIrjVVbD4QJlc5Sgrwxf7o3h7/gDePAzD8pg33SA+
TJM5oiWuybZmzQcsx4Gjt2a6iZ4DEtXoy6UWQEgKyZ2ITdRZxHd7FLGrrLMd3guF
1ITTzzLHzjMc13l4bgFsbhJpPP7v9d7XpEdKFoO2AzrVI6rzqvmFiOnPWlqsSkZ8
I+KiiaPIwum8zYnQyxfBhfsDPMFfTbIWWioE6chQ5EZ6ezCnEkTCqOBdeSPKlcKL
w7olrYXCmvVgyu4A9OwSc6fHapdFdTkjloxyPyUTIPloBGmmQOMZDlU/WysUeWoW
zbYi+UHsBpyXE5kZm5ydKE4kCigj0pM=
-----END CERTIFICATE-----
Generated at Tue Sep 1 05:07:24 2026 by rpki-client