
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0940fc61-aa16-39b9-b0e9-46d9a16fcc33.roa
File: 0940fc61-aa16-39b9-b0e9-46d9a16fcc33.roa (raw, json)
Hash identifier: 3+o6iAKREeqzXBrimU5HGuBiYP90JJC7gED8bKEbGy8=
Subject key identifier: AC:9C:84:10:C9:90:EE:B1:10:40:D2:96:23:10:E2:9E:D7:F0:C4:7C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497446B7C6671E4DB3212F4C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0940fc61-aa16-39b9-b0e9-46d9a16fcc33.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 76.102.60.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:46:b7:c6:67:1e:4d:b3:21:2f:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=cca4e994-5ed3-478b-ac4c-a3739fd165c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:41:48:f4:d2:f2:0a:3f:a4:f6:4f:67:95:72:
d1:3f:fb:62:72:70:1b:ed:78:a2:1e:3f:74:0c:aa:
8c:80:56:90:a4:0a:ca:95:b0:40:f6:6b:30:81:a2:
75:44:89:b1:f9:8a:4f:4e:79:e0:57:e5:39:f8:85:
29:bb:11:a8:68:6b:05:3f:cf:32:5a:88:c5:cf:23:
f4:99:33:61:ed:06:c9:f1:55:fe:ae:e7:b9:d1:1b:
10:c1:aa:a3:73:80:43:6b:30:44:51:fb:2b:f6:18:
a1:73:11:7a:4f:e5:a2:e6:6e:fd:e3:67:a5:71:a8:
98:87:de:35:36:45:b4:34:6b:9c:37:59:4c:23:a7:
b3:41:f1:03:2a:80:8e:81:99:d8:50:15:44:1c:bc:
cc:45:33:6a:42:5d:ae:49:2d:c6:37:a0:aa:7c:46:
26:14:48:95:8b:b8:7b:7f:f4:0e:87:f1:6c:41:da:
a5:c3:48:19:32:ff:c2:ba:83:9e:14:8a:67:43:8f:
d5:cc:8b:89:92:1e:f1:8f:d3:2a:b0:3b:84:6c:7d:
dd:95:4c:87:8b:54:f2:f6:5d:d9:59:0d:92:bf:b3:
f7:8d:16:78:60:55:3a:0d:0c:19:72:96:d3:92:06:
32:a0:fb:26:1a:a3:83:67:e4:a3:5c:25:cb:e5:da:
6d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:9C:84:10:C9:90:EE:B1:10:40:D2:96:23:10:E2:9E:D7:F0:C4:7C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0940fc61-aa16-39b9-b0e9-46d9a16fcc33.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
76.102.60.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:09:4d:65:04:d2:e1:9c:fe:ff:e0:b2:19:e2:98:6a:44:0e:
93:2f:08:0b:19:98:b0:b2:a6:46:d0:2c:71:f6:03:64:5f:8a:
ff:4a:13:2a:dc:54:92:fe:0b:d4:6e:c6:b8:3e:57:02:17:75:
b8:a2:bf:75:55:a8:56:d7:98:39:79:90:4f:c3:72:ab:cf:d9:
87:42:9c:03:f8:c1:df:0c:02:8b:ee:58:85:58:0a:96:e0:20:
83:f1:bd:fe:b1:48:8e:ef:d8:75:0f:fa:06:da:7f:36:ef:de:
ff:a3:a8:b4:c3:ef:d2:22:ab:63:22:07:3a:84:ca:bc:2a:7e:
b3:67:df:8e:78:5f:f5:64:6d:eb:5c:48:7a:7d:dc:fd:a2:58:
32:70:93:a3:6c:97:c4:81:5f:a6:ac:cd:82:65:11:59:00:ba:
79:0b:5a:76:05:89:b5:de:e1:f8:63:94:92:28:2f:2b:83:38:
97:05:2e:93:7a:db:67:0d:54:09:ab:4b:e0:85:8e:6e:cf:b9:
d5:91:33:6c:9d:24:08:bd:73:e5:7e:a7:27:ff:e3:38:95:f7:
0b:18:25:be:7f:95:ee:4b:ba:d8:ff:b9:6f:5a:04:53:4f:00:
cc:31:01:59:ab:44:97:32:05:c4:82:1b:e8:51:bc:3c:0b:10:
89:09:1c:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9JdEa3xmceTbMhL0wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2NhNGU5OTQtNWVkMy00NzhiLWFjNGMtYTM3MzlmZDE2NWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhUFI9NLyCj+k9k9nlXLRP/ticnAb7XiiHj90
DKqMgFaQpArKlbBA9mswgaJ1RImx+YpPTnngV+U5+IUpuxGoaGsFP88yWojFzyP0
mTNh7QbJ8VX+rue50RsQwaqjc4BDazBEUfsr9hihcxF6T+Wi5m7942elcaiYh941
NkW0NGucN1lMI6ezQfEDKoCOgZnYUBVEHLzMRTNqQl2uSS3GN6CqfEYmFEiVi7h7
f/QOh/FsQdqlw0gZMv/CuoOeFIpnQ4/VzIuJkh7xj9MqsDuEbH3dlUyHi1Ty9l3Z
WQ2Sv7P3jRZ4YFU6DQwZcpbTkgYyoPsmGqODZ+SjXCXL5dpt+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKychBDJkO6xEEDSliMQ4p7X8MR8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDk0MGZjNjEtYWExNi0z
OWI5LWIwZTktNDZkOWExNmZjYzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBTGY8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFIJTWUE0uGc/v/gshnimGpEDpMvCAsZmLCypkbQLHH2A2Rfiv9KEyrc
VJL+C9Ruxrg+VwIXdbiiv3VVqFbXmDl5kE/DcqvP2YdCnAP4wd8MAovuWIVYCpbg
IIPxvf6xSI7v2HUP+gbafzbv3v+jqLTD79Iiq2MiBzqEyrwqfrNn3454X/Vkbetc
SHp93P2iWDJwk6Nsl8SBX6aszYJlEVkAunkLWnYFibXe4fhjlJIoLyuDOJcFLpN6
22cNVAmrS+CFjm7PudWRM2ydJAi9c+V+pyf/4ziV9wsYJb5/le5Lutj/uW9aBFNP
AMwxAVmrRJcyBcSCG+hRvDwLEIkJHGg=
-----END CERTIFICATE-----
Generated at Sun Sep 27 02:52:38 2026 by rpki-client