
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c759ef66-8916-335a-b020-293cf701956c.roa
File: c759ef66-8916-335a-b020-293cf701956c.roa (raw, json)
Hash identifier: KsUtMZ3PP9uY5AC8KOxNjRzr7mIRdJyYNGsSGa9kgqY=
Subject key identifier: 7C:D4:39:39:0B:5A:A2:80:42:E9:B1:6C:60:08:B3:C9:9F:66:3D:30
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF750719AC4B5727E2FEC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c759ef66-8916-335a-b020-293cf701956c.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 71.225.40.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:50:71:9a:c4:b5:72:7e:2f:ec:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=83aa490c-d3f1-476a-819e-4308eb0d3f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ba:d4:ea:b6:3f:1d:8a:01:51:dd:3e:5f:2e:
03:1b:19:1a:6d:d6:24:de:8a:4d:65:d8:19:9b:a1:
f8:27:87:c2:13:45:ec:dd:51:42:50:52:03:d9:c9:
1e:f9:ee:e5:5b:fc:9a:dc:8a:e2:1f:aa:a3:74:83:
9b:11:8e:4c:99:0a:e0:42:e5:ca:27:02:3a:8f:38:
ee:3c:bb:6b:f8:e4:f0:de:17:9a:be:07:9d:02:b6:
b2:3f:5a:0e:ad:0d:79:05:60:11:a4:1a:0c:2d:81:
57:94:8d:6b:02:2e:1c:c5:fc:0c:61:46:ed:be:6d:
ac:2f:bd:0a:98:97:94:a9:b4:71:56:38:be:a9:64:
25:9e:25:da:17:12:af:cb:ab:4d:76:d5:fb:05:38:
12:96:26:aa:19:6c:0a:7e:f9:f4:d7:21:4d:ee:df:
f6:5b:6c:17:3c:aa:85:ce:88:88:c4:eb:01:71:1c:
eb:96:99:03:a7:2f:06:75:41:98:1c:a8:aa:c1:2a:
51:78:70:8c:e7:03:f0:24:cb:37:6c:a2:fc:76:02:
9c:9d:16:5a:5e:ee:04:2b:53:16:d2:93:46:ed:cb:
c7:e8:c5:5e:98:ad:ce:2c:c6:a9:9f:36:8a:ae:d6:
96:c7:ff:85:78:e8:41:d6:da:e8:ba:2a:6b:34:5f:
f3:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:D4:39:39:0B:5A:A2:80:42:E9:B1:6C:60:08:B3:C9:9F:66:3D:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c759ef66-8916-335a-b020-293cf701956c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.40.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:79:38:42:e9:27:b4:21:c4:8e:03:65:66:2a:38:53:a5:3e:
86:93:ec:ec:ed:a2:e2:b3:6a:a9:27:1d:6b:9e:c9:de:22:7c:
5f:aa:3a:e2:31:f9:3c:fe:e5:d5:79:34:23:86:85:6f:c1:2d:
70:cd:ce:7a:a9:ab:7f:64:05:df:2b:7f:40:49:15:63:da:91:
3d:de:55:b2:8b:4f:e0:c2:63:f2:dc:94:95:01:28:52:4b:43:
a0:c7:a6:c4:a9:92:63:9a:4a:95:64:0a:77:d8:7b:0c:30:b8:
92:cc:35:04:8e:11:bb:e4:f5:56:e0:25:1b:c1:67:5f:1c:2a:
ef:31:dc:3e:83:50:51:5f:8f:4e:38:5d:45:06:4f:1a:90:cb:
1d:88:43:3e:2d:22:04:32:45:30:9f:6d:2d:b0:a7:b2:ce:f1:
24:5f:13:26:6f:c8:f6:4b:7a:d0:31:77:91:85:d1:39:ec:07:
93:5a:23:d7:7a:c2:32:e8:98:66:78:f6:8f:73:99:b3:85:c5:
03:7b:60:e0:45:67:f4:c4:2e:ad:ba:3a:7d:14:7e:5c:bf:bb:
a2:e0:9b:47:a8:e8:52:43:89:68:91:e0:51:f0:96:58:6c:73:
99:50:b2:cb:5c:27:83:6a:ab:f6:be:41:fe:9a:47:c8:3a:e6:
5c:f1:e8:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:54:48 2026 by rpki-client