
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7938ee-e235-3ad2-a003-e48fc9edfd53.roa
File: 9b7938ee-e235-3ad2-a003-e48fc9edfd53.roa (raw, json)
Hash identifier: Z2GWHnlvulmqI/wGkY3PCCgGn8NFuGfL3a7k4ysXIow=
Subject key identifier: 0E:0F:9D:77:EA:44:FC:71:32:FA:1B:47:02:98:BE:67:2B:86:C9:EC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6338D749553D8E785BD40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7938ee-e235-3ad2-a003-e48fc9edfd53.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 71.194.214.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:33:8d:74:95:53:d8:e7:85:bd:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=6c7f4733-f012-4fe7-b5ec-905f6c53f549
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:43:65:8f:de:af:48:6a:4c:51:ea:00:14:cb:
12:86:06:bb:65:65:45:c7:b9:16:b4:13:43:41:cd:
63:6b:51:a5:18:ee:43:0f:19:0a:66:3a:2a:ba:ef:
4e:62:9f:25:db:94:81:8f:e5:17:78:02:fd:26:24:
bb:fa:16:57:3e:db:81:60:5a:11:73:8c:9c:0c:ee:
f0:77:0f:ba:df:1a:7d:77:72:bc:ae:b8:ec:c4:b9:
1d:0b:34:2b:38:4b:f8:a7:33:b7:9c:45:4a:4b:dd:
dc:d8:78:c9:5b:f3:de:64:3c:03:5a:c5:c7:90:6a:
83:0a:70:a2:3a:ef:41:c8:40:4f:8d:38:33:e4:33:
f8:5b:00:ed:45:dc:8d:d1:81:7c:0d:6a:75:c9:3b:
0b:2a:92:8f:ba:e2:c9:0b:6f:fa:03:04:45:e2:d4:
2a:6a:c8:e9:bc:9e:b9:8f:d0:8e:ad:6f:0f:ed:d5:
b7:a2:f0:87:fd:e5:30:c9:f2:42:05:af:6f:a9:dc:
0b:ef:14:a8:6c:70:02:70:d0:9c:97:70:03:22:71:
ec:63:0c:09:50:5c:76:0c:f4:e2:50:46:d3:dc:40:
78:c8:48:0a:a2:16:e6:11:e8:61:43:98:0b:10:0f:
05:bb:a5:d3:5d:c6:26:dd:89:4f:a0:80:6f:e3:09:
6e:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:0F:9D:77:EA:44:FC:71:32:FA:1B:47:02:98:BE:67:2B:86:C9:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9b7938ee-e235-3ad2-a003-e48fc9edfd53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.194.214.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:fe:1f:21:d8:ba:73:4b:d0:91:44:20:19:ec:70:49:73:53:
3f:e1:7f:22:1d:9b:70:4b:23:49:29:d4:b9:45:80:de:f2:25:
10:c5:22:08:02:a9:5c:67:25:68:39:fa:56:32:98:21:d7:9c:
0d:66:5e:80:5d:66:f2:ef:6b:71:8b:50:a4:39:86:73:7a:60:
a0:60:64:b8:f5:b6:69:1d:fd:9d:45:49:df:ca:08:e4:10:2b:
90:7d:ce:ee:59:8d:d4:a1:c5:57:ed:bc:6f:33:0f:89:94:dd:
da:39:f8:7a:53:bc:f4:43:56:04:15:55:7e:69:4f:e6:c9:2f:
9e:76:11:c9:9a:cf:63:3e:48:23:9b:ad:c5:66:c5:54:73:4b:
df:a3:3f:af:43:0a:cf:4b:43:9b:9c:96:8b:f5:25:68:56:55:
58:bf:b1:ad:ea:44:3d:45:41:f6:63:70:80:4a:f9:a9:e2:4f:
68:4f:37:2d:06:75:36:eb:fa:bf:a2:0f:bd:d2:4e:68:2f:80:
5e:65:e9:5c:e4:c9:c3:6c:9a:47:3b:95:b7:a3:71:ef:78:55:
5d:43:46:9f:2b:00:17:c5:bc:39:f8:a9:57:e9:69:70:b6:17:
24:bf:8b:fc:ee:23:1c:2b:f8:83:e0:2e:86:14:cd:b5:02:2b:
94:44:16:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 21:34:37 2026 by rpki-client