
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cd12041-61ae-3c8b-902b-defff766cf1c.roa
File: 4cd12041-61ae-3c8b-902b-defff766cf1c.roa (raw, json)
Hash identifier: TgUjLyEw/viEqU5w/qByz/qbJJ1v8zO/drl84iTEDEs=
Subject key identifier: 3C:6B:63:59:0D:5D:94:0D:B4:05:B3:50:F9:71:DE:E3:54:E8:90:D8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF752D6B4C38CDBEC0C17C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cd12041-61ae-3c8b-902b-defff766cf1c.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 71.230.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:52:d6:b4:c3:8c:db:ec:0c:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=5fc9c74e-e789-4144-aa9a-1d04a7ee7f0d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:8c:3c:e9:30:c4:c5:de:ea:d3:75:f8:52:
d4:ef:c6:bb:63:3a:0d:9e:f3:3c:f3:39:66:3d:94:
1a:fe:36:d5:d4:04:dc:5e:e5:dc:70:85:ba:06:39:
2f:c6:e9:33:f4:d2:56:80:6f:d0:1f:c2:85:ba:69:
0b:2e:15:5c:da:ea:8c:61:cd:9f:9b:b8:e5:a4:a5:
8c:a1:20:c9:9b:ae:f3:2b:34:2e:18:a5:7a:64:c6:
60:e7:e5:f5:03:cb:4d:59:b1:fa:71:45:25:00:74:
68:29:89:73:01:31:9d:cd:7e:b5:89:f2:65:db:4b:
8f:51:a0:fc:fc:bc:23:0e:af:8a:c7:90:1f:75:3d:
8f:55:97:c8:00:9b:4c:4b:65:6e:ba:29:7f:c5:db:
42:c3:a9:17:b7:be:e9:e5:ea:ce:29:ca:02:65:d1:
e5:af:fa:93:33:c2:c5:98:57:ab:7f:44:31:f0:33:
22:00:61:27:2f:12:62:b2:4d:1d:ca:34:5a:f5:fb:
dc:c7:74:75:c9:9f:7c:9d:33:f5:ea:b6:09:b5:0c:
62:82:1b:96:d0:10:de:93:8a:1c:5a:3d:46:bb:48:
3d:b2:97:1d:15:ea:0f:1f:2d:57:a7:d1:c2:d2:c3:
e5:a9:26:99:5c:63:df:f4:df:7b:d4:21:c3:0b:f1:
fe:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6B:63:59:0D:5D:94:0D:B4:05:B3:50:F9:71:DE:E3:54:E8:90:D8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cd12041-61ae-3c8b-902b-defff766cf1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.230.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:20:bd:4d:de:22:98:a9:64:ee:4f:69:0e:ec:af:1f:7f:6e:
41:9a:70:c6:17:8c:8d:a0:fa:3c:d2:72:77:bd:18:f2:cd:d1:
cf:63:02:4f:5b:9b:9b:31:f6:7b:88:45:9b:e8:77:ca:e4:c0:
83:6b:f0:4d:77:d4:de:9a:d7:3c:09:5a:1c:0c:e3:df:ab:4f:
39:bd:2a:a6:d1:b4:b6:4f:6b:38:b5:81:f8:c3:db:a2:a2:af:
af:42:9f:12:c2:7f:ef:3d:90:dc:3c:7d:23:e0:fb:b9:68:38:
6e:fa:7e:85:e8:2f:c8:98:68:78:24:b6:8b:e1:3a:a6:ec:9c:
b0:27:ac:8f:3f:dc:49:9f:af:87:c4:b8:c5:c1:b4:c3:28:81:
bf:32:72:13:d4:dc:cd:32:7b:21:05:a9:52:41:5f:83:46:e4:
b4:02:ed:fe:d9:64:5f:fe:38:fd:71:18:25:7e:7d:ec:bd:2f:
7f:cb:74:95:6d:1b:a7:9a:bf:41:ed:c3:b1:11:0e:b8:85:45:
a5:2a:44:1c:20:38:48:02:56:4f:30:82:e3:9a:c4:89:7d:7f:
66:c1:fe:4c:93:6d:0f:4c:a5:c3:e7:bb:3b:8c:4a:dc:e1:f5:
1f:9c:5a:44:ce:78:3d:3e:e8:d7:29:d2:b8:50:3a:bb:7c:6e:
58:c1:5e:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 22:54:26 2026 by rpki-client