
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed0d652e-7cb6-3cea-981a-dd6a043da19a.roa
File: ed0d652e-7cb6-3cea-981a-dd6a043da19a.roa (raw, json)
Hash identifier: 3qZMYodlmEXIvoKl+LC0jy222Ysuj4AMhBThPQ0g3PE=
Subject key identifier: 13:3B:05:C9:AD:AB:0E:8B:6E:82:22:FC:1E:D0:C7:42:39:B9:9A:81
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4EFF96D43F85D412303180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed0d652e-7cb6-3cea-981a-dd6a043da19a.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33490
IP address blocks: 76.138.158.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:ff:96:d4:3f:85:d4:12:30:31:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=d1840505-d141-4b63-b6d8-670e76d1591a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f8:96:63:cd:b1:db:e1:e9:98:8b:37:c9:46:
1f:57:49:01:38:e4:9d:5c:a2:20:4a:81:b0:32:a1:
eb:4d:18:a4:d9:b2:0f:82:de:e9:fc:47:dc:98:92:
9e:11:89:25:ff:1d:c8:5e:3c:92:1a:0a:13:61:82:
ce:73:65:2c:9d:14:46:75:21:67:6c:fd:36:52:c3:
c7:d3:bb:13:a3:c0:3d:39:9c:00:ce:ba:7e:8f:37:
f3:1f:79:0f:89:22:77:9b:7a:8b:ef:01:a5:fb:4a:
05:30:b0:4e:f2:b9:c4:0f:f7:2c:fe:03:51:bf:9b:
00:c3:5c:42:16:bd:8d:36:39:f5:56:c8:1b:d3:b4:
73:47:c4:17:c5:71:9b:32:d9:04:01:d2:0f:9a:af:
f5:04:6d:84:ce:6d:7c:c9:e2:65:6e:9a:ac:bf:2c:
d3:07:cb:78:c5:30:b9:18:e3:87:0a:ef:ac:c7:5c:
0d:7e:30:6a:38:27:10:e2:7a:d3:d4:98:34:f0:35:
27:61:fb:9b:8d:14:d9:06:ac:24:03:5c:40:e5:38:
44:f1:6d:7e:57:73:e7:f6:69:11:88:d7:d3:0a:00:
c9:e6:b2:16:5b:b9:98:02:b3:1e:6b:09:2f:70:41:
b3:71:dc:78:f6:03:e5:f8:7e:99:c6:b9:fc:32:a5:
6a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:3B:05:C9:AD:AB:0E:8B:6E:82:22:FC:1E:D0:C7:42:39:B9:9A:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ed0d652e-7cb6-3cea-981a-dd6a043da19a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.138.158.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:77:bf:e2:56:6f:bc:36:47:56:a5:2d:64:78:e4:a4:09:73:
4a:8a:9b:d2:a4:0c:ee:91:44:12:60:10:2c:8f:ba:4e:4a:27:
86:4f:93:4e:be:86:c3:2c:00:66:c9:fc:b1:8e:6b:cc:6a:87:
60:97:3c:f2:3e:6f:e4:47:ac:31:37:ea:a7:bf:fc:3a:fa:bc:
8b:24:77:c0:e5:6a:e9:61:56:e6:e8:3e:5b:3b:73:cb:aa:2e:
45:a7:1c:03:9b:67:bf:cb:6c:c4:f8:61:d3:05:2f:9f:1c:f2:
14:a0:4c:19:ce:83:68:b1:23:9c:27:0d:e6:70:d8:76:cf:06:
91:f1:04:1b:bf:dc:5c:ed:b3:89:83:97:d1:ca:f8:91:ed:32:
20:04:ea:ea:5d:35:de:6b:d7:dc:d1:91:73:85:47:96:2d:72:
92:28:59:02:1b:55:0f:8d:75:64:55:2e:9e:c6:88:cd:f6:76:
13:d6:4a:29:35:25:fc:46:58:42:fc:b3:72:31:7a:4f:f0:92:
17:77:0c:7e:ad:8b:b8:76:f7:af:41:3a:ab:ba:85:57:80:7f:
ac:4f:c8:99:1b:2b:62:ad:d1:db:c2:9b:35:c9:1a:82:45:c9:
ff:58:cd:0a:4f:27:0f:89:49:16:94:29:58:87:b5:45:aa:63:
a4:71:27:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tv+W1D+F1BIwMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ZDE4NDA1MDUtZDE0MS00YjYzLWI2ZDgtNjcwZTc2ZDE1OTFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPiWY82x2+HpmIs3yUYfV0kBOOSdXKIgSoGw
MqHrTRik2bIPgt7p/EfcmJKeEYkl/x3IXjySGgoTYYLOc2UsnRRGdSFnbP02UsPH
07sTo8A9OZwAzrp+jzfzH3kPiSJ3m3qL7wGl+0oFMLBO8rnED/cs/gNRv5sAw1xC
Fr2NNjn1Vsgb07RzR8QXxXGbMtkEAdIPmq/1BG2Ezm18yeJlbpqsvyzTB8t4xTC5
GOOHCu+sx1wNfjBqOCcQ4nrT1Jg08DUnYfubjRTZBqwkA1xA5ThE8W1+V3Pn9mkR
iNfTCgDJ5rIWW7mYArMeawkvcEGzcdx49gPl+H6Zxrn8MqVq2QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBM7Bcmtqw6LboIi/B7Qx0I5uZqBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZWQwZDY1MmUtN2NiNi0z
Y2VhLTk4MWEtZGQ2YTA0M2RhMTlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTIqeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGd3v+JWb7w2R1alLWR45KQJc0qKm9KkDO6RRBJgECyPuk5KJ4ZPk06+
hsMsAGbJ/LGOa8xqh2CXPPI+b+RHrDE36qe//Dr6vIskd8DlaulhVuboPls7c8uq
LkWnHAObZ7/LbMT4YdMFL58c8hSgTBnOg2ixI5wnDeZw2HbPBpHxBBu/3Fzts4mD
l9HK+JHtMiAE6updNd5r19zRkXOFR5YtcpIoWQIbVQ+NdWRVLp7GiM32dhPWSik1
JfxGWEL8s3Ixek/wkhd3DH6ti7h2969BOqu6hVeAf6xPyJkbK2Kt0dvCmzXJGoJF
yf9YzQpPJw+JSRaUKViHtUWqY6RxJ5A=
-----END CERTIFICATE-----
Generated at Tue Oct 20 22:11:55 2026 by rpki-client