
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa
File: 95d7152e-c6b8-348b-8dde-e12c279be0ff.roa (raw, json)
Hash identifier: 4g4bCh+4bx0JBUcaKayvPx7LIBukMWAiil/3ABImQAc=
Subject key identifier: 80:8A:25:85:A3:06:D5:43:3F:3C:EA:58:85:B4:11:31:0C:B2:D3:EC
Certificate issuer: /CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Certificate serial: 010D0C9F4328584D143D7DC7768D1DEB3E4D5440
Authority key identifier: D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa
Signing time: Fri 06 Mar 2026 14:00:40 +0000
ROA not before: Fri 06 Mar 2026 14:00:40 +0000
ROA not after: Thu 04 Jun 2026 13:00:40 +0000
asID: 395506
IP address blocks: 76.8.20.0/23 maxlen: 24
76.8.26.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:3d:7d:c7:76:8d:1d:eb:3e:4d:54:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf
Validity
Not Before: Mar 6 14:00:40 2026 GMT
Not After : Jun 4 13:00:40 2026 GMT
Subject: CN=647d2df9-9415-4392-98fb-22ce97232832
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:0b:da:91:5c:02:de:0f:d7:6b:26:4c:9c:9c:
94:87:b1:a7:b3:3e:d5:23:97:05:4f:09:0c:be:dc:
54:1c:90:d1:f5:bb:d5:2d:51:f5:42:6a:5f:58:81:
df:1b:89:c4:0d:0f:2e:b2:e2:72:84:63:15:51:02:
33:88:0f:1b:a4:30:00:30:2c:12:f8:46:9f:9e:07:
0c:ac:c0:1d:ad:6e:ee:c8:b6:ae:2c:b6:96:7c:f8:
01:e2:15:6e:72:c8:0f:ca:a2:08:c9:2c:32:04:b7:
6f:c0:95:99:35:ca:fd:8d:d5:a5:00:87:1b:25:dd:
7e:6e:78:d5:c4:1c:c7:ae:64:9e:55:fe:fe:82:57:
31:88:02:d3:c4:d7:23:72:18:ea:1e:b1:e0:87:33:
a9:36:63:df:f8:91:33:77:0a:22:9b:08:85:4a:ef:
bd:b9:fc:2b:2c:cd:d5:19:5c:49:51:a8:a0:3e:85:
e9:26:68:54:8b:f4:0d:af:e2:8c:03:75:27:4d:6f:
78:6a:64:00:6d:6a:94:6f:cb:c0:d9:a5:32:10:66:
d1:98:cf:77:d5:5a:d3:da:be:4c:46:f6:18:5e:05:
e8:f2:c8:7b:6d:f0:dc:cc:e8:05:52:69:13:6b:8e:
68:68:29:bc:0a:89:ae:d9:f0:b4:5e:95:ec:87:8a:
ec:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8A:25:85:A3:06:D5:43:3F:3C:EA:58:85:B4:11:31:0C:B2:D3:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/95d7152e-c6b8-348b-8dde-e12c279be0ff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.crl
X509v3 Authority Key Identifier:
keyid:D8:2B:96:CD:C2:38:E4:0E:17:FA:7A:F5:14:C2:56:60:9D:D2:71:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4c1e5650-59b7-4acb-b0de-0b4fbaaf3ebf.cer
sbgp-ipAddrBlock: critical
IPv4:
76.8.20.0/23
76.8.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:bf:8d:81:9a:90:f0:c9:f1:f1:41:eb:10:e2:c4:6c:67:75:
a0:1b:8f:e4:4c:97:d2:7a:e9:f2:7b:54:79:f2:d2:46:80:62:
7a:e5:87:fb:71:64:cb:18:70:79:ff:c4:f6:15:a9:1d:44:5e:
e9:f3:71:df:95:14:42:33:85:b6:b8:5f:c6:c9:61:69:28:cd:
3d:a8:b9:59:d5:1d:e9:f7:aa:fa:21:84:b4:f6:80:ff:a0:9d:
43:cf:ad:0e:65:66:20:e4:16:77:6d:6a:00:9f:e1:b9:b0:f9:
64:f7:ba:89:2e:f2:c4:14:cf:9e:5a:1d:73:89:4f:52:a7:4c:
a9:9c:81:29:d0:5b:55:3c:25:9e:32:c7:6c:32:a5:71:ff:7f:
06:78:02:01:9f:29:b5:20:06:2f:ec:ae:69:a4:c6:25:34:c6:
74:fd:00:4d:5b:58:06:ed:f0:e4:d7:e4:77:7b:06:06:bf:6f:
26:a4:c1:27:1e:6f:bb:36:dc:7b:02:ef:b3:7f:61:a9:0d:82:
93:dd:1d:95:57:a4:8c:71:a9:36:9c:64:c7:53:3e:e2:82:43:
6a:5f:ad:fa:90:7a:29:29:77:9f:98:60:c8:33:c1:57:28:f9:
1a:8f:be:97:c6:96:fb:03:22:83:9b:c3:94:6c:72:36:42:59:
2f:6c:d6:29
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWE0UPX3Hdo0d6z5NVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGMxZTU2NTAtNTliNy00YWNiLWIwZGUtMGI0ZmJhYWYz
ZWJmMB4XDTI2MDMwNjE0MDA0MFoXDTI2MDYwNDEzMDA0MFowLzEtMCsGA1UEAxMk
NjQ3ZDJkZjktOTQxNS00MzkyLTk4ZmItMjJjZTk3MjMyODMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtAvakVwC3g/XayZMnJyUh7Gnsz7VI5cFTwkM
vtxUHJDR9bvVLVH1QmpfWIHfG4nEDQ8usuJyhGMVUQIziA8bpDAAMCwS+EafngcM
rMAdrW7uyLauLLaWfPgB4hVucsgPyqIIySwyBLdvwJWZNcr9jdWlAIcbJd1+bnjV
xBzHrmSeVf7+glcxiALTxNcjchjqHrHghzOpNmPf+JEzdwoimwiFSu+9ufwrLM3V
GVxJUaigPoXpJmhUi/QNr+KMA3UnTW94amQAbWqUb8vA2aUyEGbRmM931VrT2r5M
RvYYXgXo8sh7bfDczOgFUmkTa45oaCm8Comu2fC0XpXsh4rstwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFICKJYWjBtVDPzzqWIW0ETEMstPsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80YzFl
NTY1MC01OWI3LTRhY2ItYjBkZS0wYjRmYmFhZjNlYmYvOTVkNzE1MmUtYzZiOC0z
NDhiLThkZGUtZTEyYzI3OWJlMGZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNGMxZTU2NTAtNTliNy00YWNiLWIw
ZGUtMGI0ZmJhYWYzZWJmLzRjMWU1NjUwLTU5YjctNGFjYi1iMGRlLTBiNGZiYWFm
M2ViZi5jcmwwHwYDVR0jBBgwFoAU2CuWzcI45A4X+nr1FMJWYJ3ScdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80YzFlNTY1MC01OWI3LTRhY2ItYjBkZS0wYjRm
YmFhZjNlYmYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBTAgUAwQB
TAgaMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAJG/jYGakPDJ8fFB6xDixGxndaAbj+RMl9J66fJ7VHny0kaA
Ynrlh/txZMsYcHn/xPYVqR1EXunzcd+VFEIzhba4X8bJYWkozT2ouVnVHen3qvoh
hLT2gP+gnUPPrQ5lZiDkFndtagCf4bmw+WT3uoku8sQUz55aHXOJT1KnTKmcgSnQ
W1U8JZ4yx2wypXH/fwZ4AgGfKbUgBi/srmmkxiU0xnT9AE1bWAbt8OTX5Hd7Bga/
byakwSceb7s23HsC77N/YakNgpPdHZVXpIxxqTacZMdTPuKCQ2pfrfqQeikpd5+Y
YMgzwVco+RqPvpfGlvsDIoObw5RscjZCWS9s1ik=
-----END CERTIFICATE-----
Generated at Thu Mar 26 14:32:10 2026 by rpki-client