
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa
File: ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa (raw, json)
Hash identifier: JES8Aii9/zXdL8I35WLd7R0gLQDWIfBqpkST6E19uYs=
Subject key identifier: CB:21:0F:0F:E7:DA:30:89:27:1B:E2:42:30:E5:29:55:B9:1A:40:3C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF5FFA94562F1E8F9792AE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 76.124.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:ff:a9:45:62:f1:e8:f9:79:2a:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=2bf52e2b-dc77-4d85-b875-52a28589f3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:3b:d0:b2:4c:36:f7:57:c8:9a:fd:8e:cb:91:
d9:1a:7d:80:9f:39:27:f4:03:3f:39:20:e5:24:95:
39:4c:e0:f1:90:a3:25:0c:d4:c8:4d:ea:94:93:d1:
e0:24:e1:4e:f5:41:87:3d:6e:3e:78:d6:5a:c1:e0:
5d:9c:c9:dc:90:a1:de:e8:54:cf:77:8d:c1:cc:a3:
c5:fd:af:d1:b9:01:06:c2:6c:4c:8e:09:18:3f:6e:
9d:5a:3f:c3:c0:f3:d6:a2:18:f4:b1:6d:46:a4:32:
75:63:d9:a5:05:3a:2a:b1:3d:a4:98:30:37:8b:78:
e6:c7:85:06:a0:fa:83:51:f3:c3:6a:19:50:79:e8:
e2:c9:a8:31:9a:7d:89:2e:1f:17:7a:9a:37:f6:68:
d9:e2:7b:d4:7c:57:fc:09:91:14:1f:07:ce:b2:37:
49:5f:d5:bd:04:a7:f4:3f:5d:48:49:be:73:d5:31:
e7:56:af:db:a9:7e:9e:62:c9:6a:0f:7d:6c:4e:14:
6a:7f:c4:c3:75:72:7d:e4:e2:d0:51:27:c5:48:dc:
48:cb:64:27:ba:61:03:b3:c6:67:0f:c5:52:18:c9:
0a:50:2a:49:c0:97:41:4c:bf:a1:52:7a:d2:4e:9a:
ff:f7:71:72:12:3f:79:09:95:cc:f2:63:e7:55:04:
93:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:21:0F:0F:E7:DA:30:89:27:1B:E2:42:30:E5:29:55:B9:1A:40:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba13b09e-773d-34ba-bfe9-1f1c28c5d485.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.124.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:37:97:27:e3:65:2f:6e:65:84:21:33:71:25:59:49:e9:9f:
85:c2:2c:01:d7:04:56:d2:2f:09:a7:9d:a7:d9:b7:ec:74:1c:
68:59:08:1d:13:8f:5f:4d:32:26:52:d5:a9:41:fd:ea:98:5b:
1e:96:fd:00:7c:c2:67:19:50:91:7f:fc:45:94:c6:74:4c:a5:
a5:00:a7:c0:2d:1e:f0:a3:98:91:74:c2:c3:53:32:fd:30:e7:
da:69:38:70:b0:49:3f:1e:a8:00:3a:62:75:4e:0a:6a:54:ec:
69:b8:fd:fd:f9:be:03:b8:80:8c:78:34:33:42:98:27:16:0b:
2c:7b:a2:96:eb:75:89:01:73:73:11:85:35:4e:c0:9e:ba:40:
a7:21:2d:6b:dc:95:84:97:e1:40:67:5f:cc:5e:46:a7:17:ec:
94:5c:31:c2:27:a8:f7:a2:2b:f0:60:ea:0e:5c:33:01:f8:b8:
e4:99:66:49:fa:87:a6:ac:fd:55:52:32:09:21:e5:4a:cb:b5:
e3:8c:e4:14:f2:2d:2f:64:33:bd:17:cc:47:f2:c9:8d:7f:0a:
f8:9f:77:27:76:65:25:aa:ac:00:15:dd:76:e1:d7:6a:bc:d9:
ac:83:a4:ef:41:9b:2b:32:ce:5b:37:d2:e0:4d:08:67:a2:a1:
4d:4c:a7:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 23:23:23 2026 by rpki-client