
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5429e3b7-40da-340a-bfe8-3af34c29fdfe.roa
File: 5429e3b7-40da-340a-bfe8-3af34c29fdfe.roa (raw, json)
Hash identifier: hJni84uxURAXTPlaJpsV5prjZdIIhpCEHQkx2PLeZ7w=
Subject key identifier: 19:39:80:A2:46:FA:58:4D:6D:F7:3F:76:19:D4:10:B3:75:88:66:64
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3E55411879194510A3E000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5429e3b7-40da-340a-bfe8-3af34c29fdfe.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33651
IP address blocks: 76.21.96.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3e:55:41:18:79:19:45:10:a3:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=249b2841-6ae2-46f8-922e-a0a369a5166a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:32:2d:b4:98:39:97:9b:e8:d8:ce:3a:45:a8:
d8:d4:4b:13:93:aa:97:5e:be:96:07:df:58:aa:f2:
e3:9b:92:c3:d1:0e:60:67:32:ed:25:4f:a4:84:b8:
f7:23:1a:71:60:ea:8c:01:b4:3b:a8:09:a7:7b:ac:
cd:02:70:e6:4b:99:3c:5e:f8:0b:60:e8:76:82:7a:
a7:11:44:ca:f7:e0:01:9c:b1:a1:35:bd:56:18:de:
7a:06:95:32:e4:76:27:87:b9:5b:4d:1a:74:8e:f7:
76:a2:20:1a:9e:68:76:ec:f8:74:3f:03:ad:83:3f:
2e:b3:0c:ae:26:bb:b1:69:06:49:39:35:29:29:7b:
6c:58:32:5b:01:be:fd:a7:49:42:9f:d3:e4:c8:72:
e8:70:8d:20:ba:0f:7c:d1:72:de:30:13:0c:1b:5c:
b3:26:06:34:fc:64:ff:4f:e0:bf:f8:8d:85:df:54:
f8:08:1d:16:6f:fc:dc:98:0a:28:f6:fc:86:50:ef:
3d:7a:99:19:1e:82:d9:a1:19:fa:97:fe:84:39:0d:
c4:3c:e4:bb:97:1b:6b:50:45:d5:c1:c0:42:62:86:
ef:1c:37:9b:ae:ba:f6:11:4f:1d:62:b2:d9:7e:76:
97:6b:f5:d4:87:6e:99:3e:1b:ed:4e:96:3f:58:43:
d7:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:39:80:A2:46:FA:58:4D:6D:F7:3F:76:19:D4:10:B3:75:88:66:64
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5429e3b7-40da-340a-bfe8-3af34c29fdfe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.21.96.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:1e:73:8a:e5:a2:c3:3a:b9:1f:ff:f0:95:25:67:bf:3d:76:
77:ce:ec:be:73:03:ee:37:63:99:37:f9:c5:52:4b:c0:05:df:
0a:ae:d7:3c:8a:66:a4:45:1c:ad:e5:df:64:fd:b2:2e:32:81:
3e:06:8c:b0:38:d1:b0:fe:ad:eb:b9:29:a9:52:01:80:14:b4:
cb:07:78:14:65:ca:26:c1:49:f9:d5:ca:72:7b:72:f1:0e:e4:
a9:9f:32:77:09:97:6f:c3:32:36:c3:59:a9:92:94:50:be:6f:
fe:a8:94:79:e9:30:8c:00:d2:7c:b2:94:d8:f3:90:7c:d8:60:
cf:ac:21:67:7e:e1:10:dc:af:94:0d:14:91:22:56:c2:43:e7:
5d:b0:27:b5:a7:01:f8:67:47:08:8b:cb:07:17:c7:65:c4:9d:
d2:6d:56:25:03:98:ec:66:8f:33:67:56:33:98:27:6b:12:d2:
42:42:71:0c:43:82:6f:2e:b4:41:e1:bb:dd:ef:23:e2:e0:1b:
91:c8:52:32:ed:b4:ca:95:a3:ed:5b:ce:e4:74:15:26:ec:78:
e6:74:1d:8a:4c:e5:5c:5b:37:19:7b:da:42:7a:87:74:05:4e:
1e:cf:bd:f6:54:4a:39:60:f9:45:67:4e:24:a9:d6:6f:fe:a8:
c5:e5:7c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 20:41:27 2026 by rpki-client