
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e851c72-2aee-32ff-92ed-2cd6270ef0dd.roa
File: 5e851c72-2aee-32ff-92ed-2cd6270ef0dd.roa (raw, json)
Hash identifier: BRZWLCHEmyil2fuCnQd+zqiw+lYaZZHIvfLE0OSq4XE=
Subject key identifier: 66:C3:08:B9:80:3C:0B:CF:7F:C6:F3:F8:B1:42:06:A5:0B:DA:80:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6369F8516AB7E908390C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e851c72-2aee-32ff-92ed-2cd6270ef0dd.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 71.228.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:36:9f:85:16:ab:7e:90:83:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=3032628e-beb8-453b-aeba-1523f2eb7706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:6a:63:3b:27:21:06:c6:13:26:a7:b3:1a:e6:
79:89:31:9f:dd:7d:ee:99:0b:2d:06:75:54:ca:89:
1a:08:d8:53:45:5c:36:d0:b7:54:cb:80:97:94:16:
31:7c:dc:59:e7:11:41:7e:21:82:61:78:84:86:60:
72:74:c3:a4:0f:12:6a:15:12:01:02:1c:6f:df:32:
21:74:ed:bb:4c:d1:de:34:6c:33:9d:65:06:2a:0d:
59:c1:cb:a5:f0:b6:b0:19:23:8a:c7:cf:6d:08:e6:
c7:56:92:f4:d9:f7:f0:e2:2c:a5:6a:0a:e3:dd:a5:
83:27:53:a0:8e:9a:da:65:10:8f:3d:53:5c:3b:cd:
f5:30:01:c2:e6:f6:92:12:d2:9d:a4:e7:e6:47:26:
61:eb:1c:62:ea:c4:f1:35:fc:dc:81:76:e7:bf:ca:
9b:0a:e7:7f:be:d8:81:a7:03:23:98:3e:34:bc:a4:
39:b3:05:04:db:c6:84:8e:27:c6:29:4e:78:41:5d:
16:44:ec:e0:69:64:e6:4f:d1:12:b0:a6:0b:e5:77:
cf:0e:cb:80:f0:55:5d:41:a8:4a:42:80:d8:1a:67:
72:60:65:88:2f:a0:05:ca:d8:50:4b:36:b6:01:6f:
14:f8:06:66:23:b9:34:2a:f1:3a:ff:0a:32:19:d6:
2d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C3:08:B9:80:3C:0B:CF:7F:C6:F3:F8:B1:42:06:A5:0B:DA:80:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5e851c72-2aee-32ff-92ed-2cd6270ef0dd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.228.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:8f:c8:b0:ed:f0:51:75:f3:f2:37:50:ac:ed:f2:76:a4:93:
d5:92:d2:7a:e6:3b:48:52:b3:21:b4:0d:32:17:40:db:fd:42:
0c:88:6d:4c:73:72:35:9a:5f:b6:ee:27:08:65:c7:a1:47:ae:
bf:6c:32:a0:4a:60:8e:6a:35:5d:56:b2:b3:29:5a:f0:de:17:
70:72:e6:bd:57:5d:6d:2f:a8:eb:f8:fb:68:09:4d:2e:0e:4b:
54:fe:23:16:70:25:5d:a8:cb:ae:29:8f:f5:84:37:6d:54:c2:
56:64:07:1a:70:77:25:1e:0c:64:37:a7:00:0b:ae:f9:1f:16:
05:82:d3:14:91:80:3a:8f:b5:69:59:11:60:fc:b3:e6:f3:ce:
18:6d:8d:6d:2c:05:f1:a0:a4:5e:70:a9:ee:6e:6b:8e:9d:41:
00:85:ee:d8:76:b3:dc:79:f0:ad:cc:c5:81:ce:ea:63:e0:30:
ec:ff:b5:f7:b5:52:0a:e8:8a:a9:a2:0f:41:38:43:a3:0a:ba:
9d:2e:b8:7c:57:56:f4:8d:58:17:a2:b1:c4:97:00:1b:25:0e:
53:dc:77:fd:d3:1c:8c:9f:4a:05:ec:82:ac:1a:c8:77:44:78:
45:23:7f:21:86:d3:a4:de:9a:e6:b4:0e:ee:1e:35:68:b2:01:
c2:f5:5d:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:17:21 2026 by rpki-client