
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c1a94b6-2259-3cc0-a6a5-0f5c4f085bbe.roa
File: 6c1a94b6-2259-3cc0-a6a5-0f5c4f085bbe.roa (raw, json)
Hash identifier: cgKk2J4+3V137S1EjeOouuoh8M8EdBorYF7fQnYT+Ys=
Subject key identifier: C2:40:DD:C0:F8:F5:92:0B:7F:A7:66:89:D0:C7:08:E7:ED:C9:C5:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3B5A21EA5CE64A0A2F1040
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c1a94b6-2259-3cc0-a6a5-0f5c4f085bbe.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33651
IP address blocks: 71.198.208.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3b:5a:21:ea:5c:e6:4a:0a:2f:10:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=356a50cf-b590-4e81-bf42-28806bd3605f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ee:e8:97:c0:dc:d0:75:ac:b1:e9:67:ac:29:
78:40:31:b9:77:7b:91:19:7a:8d:dd:df:5f:25:12:
4d:6b:2e:3f:4f:66:a7:38:4f:8b:8e:40:e2:07:ee:
e4:20:f4:fc:77:f9:aa:e3:d7:70:de:21:c6:81:39:
9c:0f:44:ae:56:a6:10:05:5d:32:e8:7a:c9:ee:d5:
23:15:46:9c:69:64:0a:b5:a5:c5:36:fd:31:ab:f4:
af:b0:43:32:0d:8d:ea:6b:97:79:52:c0:48:fe:ca:
55:7c:3c:48:01:17:b1:ed:79:a1:8c:81:cb:44:a7:
23:72:28:82:cb:78:88:05:67:f9:1e:53:bf:6f:82:
ad:1f:3a:c0:99:e1:53:be:2a:81:1e:2e:60:e7:ce:
45:c2:46:7f:0f:82:a2:dd:86:2c:40:ca:15:29:aa:
10:49:00:46:68:d3:6c:39:96:e9:2d:13:ec:ce:c9:
e3:86:bb:c3:12:a6:b9:8e:46:62:f6:1d:80:1b:dc:
ac:95:b0:d5:00:e0:d6:80:cf:be:c4:1e:08:c1:2a:
c6:73:82:2e:25:34:8d:8a:00:9e:93:36:8c:b2:04:
73:5c:20:d3:45:db:12:7b:e1:28:39:af:2e:6e:f2:
69:10:b5:b0:92:27:6c:71:93:75:d1:31:30:8e:19:
cd:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:40:DD:C0:F8:F5:92:0B:7F:A7:66:89:D0:C7:08:E7:ED:C9:C5:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6c1a94b6-2259-3cc0-a6a5-0f5c4f085bbe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.208.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:60:b9:98:49:7d:03:a9:8b:1c:ab:3a:e4:45:0d:d1:b3:24:
65:11:9c:cf:c5:10:a4:3c:85:e4:32:55:04:bc:49:92:d7:08:
94:13:90:3d:45:99:5c:9b:ab:4f:14:56:8e:55:86:2d:df:e9:
7b:8a:0e:7e:98:29:82:03:7e:17:94:8c:7d:d2:80:93:26:40:
87:1d:8a:02:57:d1:c3:e0:90:da:9a:34:c4:d3:b8:f2:a5:19:
31:3c:38:bf:22:da:c1:28:8d:09:d8:f4:87:cb:37:d6:91:30:
75:d2:10:f8:23:d9:ac:ad:43:81:03:6a:05:da:97:45:8d:ce:
8f:70:c5:0a:58:cd:9e:2e:be:ec:64:38:ae:db:df:7b:67:d5:
2d:d5:e4:15:5c:bb:a8:28:b2:4f:b9:61:11:4b:b4:c5:a0:d1:
af:76:be:0c:6b:78:91:36:48:a9:e6:7d:cf:6a:76:fb:77:58:
9c:d6:fe:90:41:ea:b5:af:64:2a:03:f5:fd:47:cf:a8:14:b6:
54:4d:11:f3:cc:1a:9c:2e:2e:97:29:0f:86:8e:86:63:c7:84:
c9:1c:9c:71:48:fe:98:9b:76:1b:d2:71:96:61:4f:d4:a9:ed:
85:e4:60:5e:eb:57:96:f6:c3:f4:4f:09:be:90:93:f9:21:3b:
29:31:83:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE5vO1oh6lzmSgovEEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcwODIxMDAxMloXDTI2MTAwNjIxMDAxMlowLzEtMCsGA1UEAxMk
MzU2YTUwY2YtYjU5MC00ZTgxLWJmNDItMjg4MDZiZDM2MDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAte7ol8Dc0HWsselnrCl4QDG5d3uRGXqN3d9f
JRJNay4/T2anOE+LjkDiB+7kIPT8d/mq49dw3iHGgTmcD0SuVqYQBV0y6HrJ7tUj
FUacaWQKtaXFNv0xq/SvsEMyDY3qa5d5UsBI/spVfDxIARex7XmhjIHLRKcjciiC
y3iIBWf5HlO/b4KtHzrAmeFTviqBHi5g585FwkZ/D4Ki3YYsQMoVKaoQSQBGaNNs
OZbpLRPszsnjhrvDEqa5jkZi9h2AG9yslbDVAODWgM++xB4IwSrGc4IuJTSNigCe
kzaMsgRzXCDTRdsSe+EoOa8ubvJpELWwkidscZN10TEwjhnNIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJA3cD49ZILf6dmidDHCOftycWyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNmMxYTk0YjYtMjI1OS0z
Y2MwLWE2YTUtMGY1YzRmMDg1YmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBR8bQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH5guZhJfQOpixyrOuRFDdGzJGURnM/FEKQ8heQyVQS8SZLXCJQTkD1F
mVybq08UVo5Vhi3f6XuKDn6YKYIDfheUjH3SgJMmQIcdigJX0cPgkNqaNMTTuPKl
GTE8OL8i2sEojQnY9IfLN9aRMHXSEPgj2aytQ4EDagXal0WNzo9wxQpYzZ4uvuxk
OK7b33tn1S3V5BVcu6gosk+5YRFLtMWg0a92vgxreJE2SKnmfc9qdvt3WJzW/pBB
6rWvZCoD9f1Hz6gUtlRNEfPMGpwuLpcpD4aOhmPHhMkcnHFI/pibdhvScZZhT9Sp
7YXkYF7rV5b2w/RPCb6Qk/khOykxg7s=
-----END CERTIFICATE-----
Generated at Tue Jul 21 20:11:39 2026 by rpki-client