
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5bf878-fe1b-3974-afd4-4947399acb4c.roa
File: bd5bf878-fe1b-3974-afd4-4947399acb4c.roa (raw, json)
Hash identifier: 8McTA5yPuN3oM4XPaV8HUWHMm2NJY1bZ4ugPvIWbHTY=
Subject key identifier: 0C:A8:6F:AA:F0:C9:D4:78:16:9F:A4:7A:75:B1:CD:6E:32:D3:C9:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF704310CABD783D9824C70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5bf878-fe1b-3974-afd4-4947399acb4c.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33660
IP address blocks: 76.140.44.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:04:31:0c:ab:d7:83:d9:82:4c:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=537a71fd-5396-4cbc-b306-5b0ac72c94c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:5d:f9:fc:b1:da:49:e1:d5:28:f9:4c:c8:f0:
1c:87:e9:9b:0a:67:b6:cf:d2:5f:57:44:cc:e7:ea:
a1:61:e4:c1:5c:b3:cc:06:4d:93:a5:bd:7b:1a:34:
d8:9d:2e:dd:63:49:c8:7c:b7:40:9d:1a:7a:ad:51:
fc:af:fc:d0:05:3c:fa:97:04:eb:25:69:8a:f9:34:
1a:9c:cb:61:62:6a:a7:74:d7:63:5b:34:05:fa:2a:
2c:2b:c7:9c:51:28:55:55:28:03:e6:d5:87:cf:a5:
03:89:2d:07:50:2a:bb:01:c3:14:3b:e3:cc:4b:6f:
0a:7c:36:d3:2e:b8:4a:ed:d7:65:7c:fd:cd:ae:ca:
44:86:a4:64:bc:a6:37:c7:60:c0:5e:e6:87:d3:1f:
c3:8f:bf:5d:8a:b5:fd:59:31:8f:6d:d3:3e:18:32:
e2:b9:48:df:d1:18:65:c2:ca:12:a3:05:c1:94:b2:
e2:01:c5:ea:88:75:de:dc:8a:28:b3:c5:e5:6b:b1:
cc:46:74:ed:c6:b9:70:eb:9c:bb:b5:bc:81:26:f1:
25:e1:cf:10:ba:35:dd:fc:ae:b9:14:5d:98:bf:81:
cf:98:a6:50:41:10:96:0b:fd:7f:dc:82:59:04:29:
92:50:d3:2a:cc:78:ba:04:88:a8:32:65:2e:5d:1b:
16:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:6F:AA:F0:C9:D4:78:16:9F:A4:7A:75:B1:CD:6E:32:D3:C9:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bd5bf878-fe1b-3974-afd4-4947399acb4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.140.44.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d0:b2:6a:06:22:4d:2c:e5:99:59:d9:f3:17:3b:3c:d6:53:2c:
e0:1b:f6:1b:4c:20:63:51:0e:97:2b:e6:89:e0:cc:49:39:30:
a3:69:54:00:03:5f:56:d5:82:91:12:e4:af:f4:6e:0b:78:20:
56:e1:c1:85:bc:9d:a0:58:d4:4c:bf:be:ab:a1:03:3a:12:90:
7c:a9:b8:ec:03:46:58:a3:58:26:53:ef:3a:fb:5f:1d:5d:19:
0d:2b:31:26:b8:09:17:16:6c:58:a8:8a:98:d7:9c:ec:cd:34:
0a:5e:49:e4:fc:8c:b7:ed:7c:34:33:fa:51:f1:aa:6c:d1:b5:
bc:5f:e2:29:0d:76:19:49:a4:e7:90:3b:24:e3:cd:4d:04:81:
40:b0:a9:64:6e:7e:5f:23:04:54:3d:74:b9:4b:16:9c:af:67:
ed:55:8a:0c:e6:c7:4c:37:2e:62:82:15:8c:eb:52:f9:ed:ba:
8f:be:52:f8:1a:ab:84:4b:37:dc:d1:4c:04:01:af:d1:40:28:
f8:52:6a:d9:f0:e0:3c:35:f3:04:60:3e:9b:c7:c2:80:7a:c9:
e1:4b:b9:f3:b4:4f:b7:89:55:c2:7e:0b:b9:53:b0:0c:62:da:
7d:c9:c6:55:95:ec:3e:f9:d3:7e:c1:ff:55:57:24:33:7a:f0:
c5:92:c6:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9wQxDKvXg9mCTHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
NTM3YTcxZmQtNTM5Ni00Y2JjLWIzMDYtNWIwYWM3MmM5NGM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl35/LHaSeHVKPlMyPAch+mbCme2z9JfV0TM
5+qhYeTBXLPMBk2Tpb17GjTYnS7dY0nIfLdAnRp6rVH8r/zQBTz6lwTrJWmK+TQa
nMthYmqndNdjWzQF+iosK8ecUShVVSgD5tWHz6UDiS0HUCq7AcMUO+PMS28KfDbT
LrhK7ddlfP3NrspEhqRkvKY3x2DAXuaH0x/Dj79dirX9WTGPbdM+GDLiuUjf0Rhl
wsoSowXBlLLiAcXqiHXe3Ioos8Xla7HMRnTtxrlw65y7tbyBJvEl4c8QujXd/K65
FF2Yv4HPmKZQQRCWC/1/3IJZBCmSUNMqzHi6BIioMmUuXRsWOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyob6rwydR4Fp+kenWxzW4y08l6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYmQ1YmY4NzgtZmUxYi0z
OTc0LWFmZDQtNDk0NzM5OWFjYjRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTIwsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANCyagYiTSzlmVnZ8xc7PNZTLOAb9htMIGNRDpcr5ongzEk5MKNpVAAD
X1bVgpES5K/0bgt4IFbhwYW8naBY1Ey/vquhAzoSkHypuOwDRlijWCZT7zr7Xx1d
GQ0rMSa4CRcWbFioipjXnOzNNApeSeT8jLftfDQz+lHxqmzRtbxf4ikNdhlJpOeQ
OyTjzU0EgUCwqWRufl8jBFQ9dLlLFpyvZ+1Vigzmx0w3LmKCFYzrUvntuo++Uvga
q4RLN9zRTAQBr9FAKPhSatnw4Dw18wRgPpvHwoB6yeFLufO0T7eJVcJ+C7lTsAxi
2n3JxlWV7D75037B/1VXJDN68MWSxlE=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:28:16 2026 by rpki-client