
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2943f947-fe41-33b0-87d9-99ee912add85.roa
File: 2943f947-fe41-33b0-87d9-99ee912add85.roa (raw, json)
Hash identifier: azGkxpp5K74AzrP9hmVBIJRnQU2YT77VA3FgK6QSI0o=
Subject key identifier: 3F:CF:56:D7:C9:B1:19:70:EC:8A:F9:BD:E0:CB:16:95:F2:B8:23:C0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D5243692736E352FA208C8E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2943f947-fe41-33b0-87d9-99ee912add85.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 13367
IP address blocks: 69.180.138.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:69:27:36:e3:52:fa:20:8c:8e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=90b7985c-d831-44ec-a433-10655ae97a9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:22:5c:67:ea:10:0b:9d:71:c2:c8:c1:fb:
61:8d:cf:90:dd:67:36:8f:11:3e:01:3f:95:c7:a0:
7c:af:67:75:04:16:9d:f8:80:a6:be:d0:d0:68:1a:
69:eb:09:e2:fb:06:ce:0a:9f:46:3f:d1:57:55:c1:
d1:4f:c0:5f:cf:2b:fe:69:cd:3b:c0:16:60:fc:95:
90:26:35:a3:fc:bc:49:05:8f:98:95:bf:94:e5:0a:
92:7d:45:60:c3:ca:bf:a0:7b:08:38:f0:d8:af:9c:
60:f8:bb:91:96:ac:0b:ac:12:03:6d:38:e5:c3:26:
cf:24:3f:62:b8:82:04:3c:75:2b:1d:28:28:3a:c7:
dc:68:19:1f:06:77:f6:66:a0:a0:bf:16:67:a9:47:
aa:b6:ef:22:11:4d:79:34:f2:1a:e5:65:79:17:5f:
89:e5:a0:4d:f7:a3:62:e7:d7:85:57:1b:96:e5:51:
c4:ba:4b:af:25:1c:5b:13:07:50:05:10:e0:8c:e0:
7b:35:fa:f5:93:99:2f:99:6b:72:c5:8c:f2:31:fd:
ad:fb:20:91:85:e0:cb:3e:d9:d8:44:87:79:0f:bd:
15:3c:25:ff:00:7b:58:af:64:f5:06:50:20:99:f8:
42:79:e0:11:09:f2:3c:d7:87:46:28:e8:47:cb:67:
b4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:CF:56:D7:C9:B1:19:70:EC:8A:F9:BD:E0:CB:16:95:F2:B8:23:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2943f947-fe41-33b0-87d9-99ee912add85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
69.180.138.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:5a:17:8d:38:fb:4f:f2:88:1e:23:4b:75:41:30:d6:73:02:
6e:ae:b5:c8:ff:64:82:37:2f:8a:b7:59:45:4c:12:7a:fc:4c:
06:53:f3:e7:c1:c2:09:44:db:3d:64:c7:39:7e:e5:ee:9a:82:
fe:ed:38:6c:46:9b:d5:44:8d:07:fd:90:57:c9:20:3a:82:a4:
2c:86:d5:40:72:b2:a4:e2:2f:e1:54:2c:dc:c7:c7:5c:5b:5f:
77:e6:88:48:27:39:44:4f:23:58:66:53:1f:dc:74:6d:01:46:
be:fa:7e:a8:0f:aa:70:48:8b:14:f3:4e:51:38:eb:6a:7f:5b:
45:45:5e:ae:3e:a2:5e:5d:60:3d:18:9c:1d:45:91:b8:86:67:
24:79:6d:56:d7:74:33:96:7c:3d:d9:4a:cc:12:90:0e:54:bd:
4a:26:e5:50:54:38:8c:0a:09:05:5b:da:19:86:c4:7a:13:93:
0f:f0:75:81:43:ba:fb:29:f6:2b:de:88:0f:78:94:5d:1e:23:
47:71:73:47:1c:d6:4e:e3:51:30:21:b0:73:1c:10:cf:ec:93:
14:04:ce:e9:95:c3:1e:05:2f:20:77:df:62:08:08:95:ec:2d:
15:7f:c2:65:a4:fd:6d:30:97:35:72:2d:2e:81:83:3d:c0:95:
9b:5c:d4:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:44:01 2026 by rpki-client