
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b2b5b2-4ae1-385a-a691-7f795ba8b147.roa
File: d5b2b5b2-4ae1-385a-a691-7f795ba8b147.roa (raw, json)
Hash identifier: KEkC9LsFKVQ4H1frln2+xMGFv+Poe5fetpa/puSNwW8=
Subject key identifier: 50:1F:E3:65:57:00:3B:6D:E3:9D:90:33:DF:B1:4D:20:77:C2:98:33
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF75C67660D8D37C0C02480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b2b5b2-4ae1-385a-a691-7f795ba8b147.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 73.141.240.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:5c:67:66:0d:8d:37:c0:c0:24:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=fce573c6-cf2a-4b2c-b6ab-7f6a80f6e3f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:e4:83:da:0f:83:88:a0:de:e3:e3:03:78:64:
36:45:e5:60:fe:07:e7:6f:3b:a7:bd:55:f0:e0:d7:
ae:d6:1f:14:b4:b0:50:a7:0e:d9:41:31:0b:6e:1a:
7f:b0:d1:6c:0a:47:08:ad:53:c6:44:fc:66:d2:24:
2f:02:da:91:43:aa:69:db:71:6f:22:ca:9d:b3:9e:
ae:35:b0:4f:cd:8f:c8:f1:cd:42:08:60:44:9c:93:
42:f5:a0:d4:bb:1e:48:e6:27:3d:a3:c4:9e:a1:78:
9d:09:cd:e0:6c:fa:23:06:9c:8f:23:b6:41:ca:06:
86:ee:3e:51:a4:8f:b4:15:c5:be:35:0c:57:a3:6a:
6a:64:b6:fc:1a:bc:a6:b9:4d:49:31:10:b4:02:6c:
b2:78:3c:44:a1:22:9f:e8:e2:65:f9:d6:23:8b:21:
68:22:b5:e0:4e:f3:1a:85:5a:8e:1e:9b:56:94:bc:
58:f1:c8:66:ed:5b:40:67:e2:71:17:53:51:06:a9:
1d:e5:fd:12:09:e9:36:07:ee:3d:f3:96:b8:d1:82:
e9:c9:f9:14:a8:89:dc:8d:df:7c:89:7d:b2:b6:23:
29:28:d3:ed:83:96:9f:51:cf:6f:c0:3e:6d:2b:65:
2d:3c:72:4a:d3:dc:1d:b7:0e:f8:98:2f:5e:d4:0b:
10:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:1F:E3:65:57:00:3B:6D:E3:9D:90:33:DF:B1:4D:20:77:C2:98:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d5b2b5b2-4ae1-385a-a691-7f795ba8b147.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.141.240.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:d0:91:cd:bf:c3:01:8d:97:68:9b:db:80:9d:e0:c1:8a:6f:
36:56:4d:0f:32:a3:87:c0:3d:23:e6:3f:5c:83:04:9a:9d:c6:
2e:aa:f6:2e:7c:0d:e1:5c:56:9e:7e:87:93:81:34:3b:10:cf:
2a:3f:cf:e3:17:ce:02:71:af:8b:22:f2:78:24:6f:2c:83:57:
c4:6d:6a:01:6a:90:7c:59:6a:11:e5:bc:a9:71:76:f1:bc:4d:
69:f3:1c:9c:66:d5:8d:c2:0a:b8:64:f0:01:c8:d1:7b:3c:24:
b3:83:01:9a:40:6e:82:cb:d7:0b:c3:5b:f6:75:5b:dc:c0:29:
81:55:10:33:c5:ad:6f:70:19:f8:1d:26:22:49:20:77:ee:5e:
f8:68:41:0c:a8:8b:d0:4f:11:7a:38:82:67:2c:3c:b6:46:a9:
b1:0d:20:66:cb:5c:67:ad:4a:7b:25:23:84:33:3c:a0:2a:90:
37:f2:0f:39:5a:cd:81:80:c9:e9:02:72:d1:e8:36:62:80:ea:
33:3e:f6:6d:03:54:da:6e:13:f3:90:ed:b8:0c:cf:8d:46:70:
5d:76:d1:6c:9f:90:97:71:03:85:3b:d4:3c:a1:e2:fc:5b:88:
71:ea:33:d2:5b:60:d7:3f:f8:36:de:f3:35:56:e1:bd:e5:09:
3e:39:07:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:31:30 2026 by rpki-client