
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2d1b774-1d40-38e6-af6e-2545aa5a647d.roa
File: c2d1b774-1d40-38e6-af6e-2545aa5a647d.roa (raw, json)
Hash identifier: PFaTkPDkNQnYPXfD0h3wKsz8ynZ8/3khO6a/Al1cFm8=
Subject key identifier: 23:F0:27:3C:B7:4E:51:B6:99:D2:EC:6C:B5:D9:3F:9B:DB:EA:34:F2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E35FFF2D899F63121E490C680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2d1b774-1d40-38e6-af6e-2545aa5a647d.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33668
IP address blocks: 71.227.8.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:35:ff:f2:d8:99:f6:31:21:e4:90:c6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=3a6b80ed-2bfe-4bd7-9d47-85276237c78d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:21:48:06:dc:ca:1d:5b:e7:a2:65:b9:fc:52:
95:6e:3b:4b:29:8b:a5:42:97:ad:72:2b:bd:0b:22:
c4:ec:d8:4d:86:91:d2:2b:2f:44:6f:5d:78:c2:91:
77:68:b8:d7:24:21:28:3b:44:77:01:e6:4f:0d:f5:
06:41:80:0e:f6:3b:fb:b0:ba:11:71:2a:db:a3:ab:
0a:37:6e:30:d1:d2:ca:01:5e:d5:46:fd:50:9c:23:
ae:81:aa:25:22:9d:f9:ff:f2:2f:73:0a:bf:41:d2:
90:19:9d:e5:16:c0:6d:c8:ca:58:01:f7:8c:19:8a:
6e:ea:7d:94:4b:e6:9d:6c:09:9c:36:7f:b3:62:89:
6f:fc:d5:7d:9f:74:df:73:10:23:34:0e:a4:b6:c4:
d8:c1:fb:87:46:a3:9d:92:76:14:41:fc:63:33:5e:
67:02:e0:c4:c0:3f:da:ec:3a:89:fe:ce:0d:25:f8:
a8:75:8b:27:34:86:70:b5:2b:bd:d1:5f:5c:ac:af:
76:63:7c:63:b8:1f:00:08:bd:f0:6c:89:c8:d6:2e:
b4:d5:9f:40:49:65:03:2d:11:2c:29:02:b5:cc:ab:
40:96:f1:6e:f5:d7:65:4f:5c:66:9d:e3:07:37:dd:
4a:b2:eb:52:4e:3e:94:50:e4:a9:2f:a3:56:88:01:
4e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:F0:27:3C:B7:4E:51:B6:99:D2:EC:6C:B5:D9:3F:9B:DB:EA:34:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c2d1b774-1d40-38e6-af6e-2545aa5a647d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.227.8.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:99:23:e9:7d:0a:3f:f2:40:b2:95:c1:19:e0:9f:02:e3:97:
a0:67:c6:fb:c4:79:6a:c6:8c:0f:e4:77:13:06:63:82:91:66:
46:c3:f7:43:26:39:3c:85:74:65:b2:32:b8:71:47:50:d7:1d:
82:be:57:40:25:42:60:c6:f5:2d:bb:b6:0c:23:5e:a7:da:e8:
9e:a7:75:40:2f:e7:cb:00:94:ea:76:16:f5:ed:3e:62:26:9d:
ba:7f:13:ea:4a:10:7d:8d:16:15:63:9c:8a:45:36:71:02:e0:
45:68:14:c8:06:cb:8c:ac:90:2d:d5:5e:34:31:b4:7c:07:b9:
4b:7b:eb:3f:5b:c2:09:cb:53:d6:57:03:b8:a7:52:87:ba:00:
da:7c:db:a5:87:0d:ae:7f:6d:2b:b8:07:91:ab:ec:97:fa:97:
af:b8:35:cd:7f:17:74:b9:d4:7a:57:15:ca:c8:ea:d2:a3:3c:
ab:f3:00:75:22:0d:39:f9:32:bc:70:2d:07:d1:8d:ec:ed:66:
55:24:a0:ae:1f:4b:ec:07:f5:81:ca:22:c3:03:9e:76:ca:2c:
a5:8c:53:16:72:25:9f:c3:24:46:64:1d:cd:f2:9c:7b:27:d7:
a0:b0:9a:7b:b9:af:d3:e2:76:92:73:d5:5a:02:e1:c2:41:57:
65:82:a7:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:33:03 2026 by rpki-client