
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bb8a7bd-9718-3cbf-b8d2-33243ae9854e.roa
File: 1bb8a7bd-9718-3cbf-b8d2-33243ae9854e.roa (raw, json)
Hash identifier: RCQnrJTdaSkmllNGhfpHYWp/yZ7Cwl85dgsEJN818yA=
Subject key identifier: 09:7C:94:EB:AF:18:8C:83:81:B0:E1:00:69:6A:B4:B2:E4:83:37:17
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57BF0B99BF8FFAF5EA6D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bb8a7bd-9718-3cbf-b8d2-33243ae9854e.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 71.225.184.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:bf:0b:99:bf:8f:fa:f5:ea:6d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=7b5bf40c-9c40-41a4-bdb1-24a57cb74937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3f:fa:8b:5a:13:f4:44:e3:a7:dd:c6:b4:85:
9e:2b:ba:32:f6:9a:50:d1:2f:81:28:ee:f9:fc:82:
03:30:81:5d:88:c9:ad:96:d5:f4:2b:7a:81:42:7f:
2a:9a:73:d4:9c:bd:fc:65:d9:bf:1e:b9:c3:d2:7e:
66:d8:ee:fc:88:d8:31:6c:c8:2c:eb:97:d1:51:03:
01:cb:51:4f:b1:38:7d:e9:2f:08:fa:61:1e:6e:6f:
57:cc:32:c5:db:dc:79:ce:62:30:da:93:b4:cf:39:
9b:b8:4f:be:09:b8:d8:a7:89:a9:b6:96:d4:83:0b:
e2:73:e5:26:7a:57:e3:4f:5d:85:5e:6d:6d:59:58:
48:6c:26:cb:de:28:b3:b0:3c:79:67:06:11:2f:be:
07:f4:cf:9e:ac:a1:2b:36:b3:28:8f:ef:86:03:0f:
17:6f:b6:ea:5b:fd:ca:3d:5d:c8:c7:2f:c3:a0:7a:
7c:8e:60:86:69:5c:b8:bd:fa:a9:17:b6:55:81:36:
0c:fe:de:9d:58:d2:5e:5d:19:5a:c2:4d:e6:42:0b:
8a:31:38:af:bb:b6:bd:3d:80:e4:7d:ff:fc:9e:00:
1d:01:e9:e4:22:70:de:bc:7f:0b:8e:ee:de:fe:b8:
76:71:d8:b6:cd:6f:eb:7b:e2:42:91:84:84:73:24:
85:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:7C:94:EB:AF:18:8C:83:81:B0:E1:00:69:6A:B4:B2:E4:83:37:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1bb8a7bd-9718-3cbf-b8d2-33243ae9854e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.184.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:93:6d:5f:bf:33:61:a3:83:dc:7c:ef:ba:22:6a:af:93:22:
fb:69:1e:c2:48:77:b5:aa:9a:26:5c:c3:15:c0:df:eb:dc:99:
d9:da:38:cb:35:2f:ad:5d:23:46:7c:c6:89:2d:0a:eb:c7:f2:
40:2d:24:7d:dc:25:0d:2c:49:4d:33:ec:18:16:78:1b:93:29:
3d:6a:54:37:46:05:c2:87:92:f5:43:c1:1c:26:dd:9b:07:82:
f5:17:51:e8:f7:ef:3b:64:42:87:e2:57:05:e6:08:bf:58:93:
43:4e:21:89:86:c9:a1:72:01:27:34:b9:6e:be:38:00:37:01:
7c:14:b0:fb:d7:80:d9:b7:a6:d1:85:cb:97:b1:31:7f:6d:4d:
aa:d1:b6:2d:62:15:ec:15:00:0c:20:78:15:ed:9e:22:cb:8c:
3a:75:00:a6:46:46:17:2b:1a:74:7d:f3:d0:73:c0:fd:f9:18:
ea:44:5e:72:b7:2a:98:50:6c:4a:61:50:95:f7:da:20:45:99:
89:25:63:4d:3b:5d:5d:8c:0a:2e:23:9d:c9:c3:49:47:73:a4:
48:3b:71:18:8b:dd:36:6e:d4:6b:fc:61:5c:60:dc:bf:4b:f5:
dd:a7:00:53:d3:c2:c4:bd:de:27:ae:52:f8:97:e5:85:78:0c:
20:ca:3a:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:49:43 2026 by rpki-client