
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
File: 2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa (raw, json)
Hash identifier: KMwpWerGcxSShcveF21wqMqnC3GYZ8Xlhm7DTgCNZoc=
Subject key identifier: 13:70:D1:3E:F7:53:D1:03:2A:BC:DB:0D:95:5E:61:21:44:BF:3A:3D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5A3B969EB8E861ABB60EA0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 73.199.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:3b:96:9e:b8:e8:61:ab:b6:0e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=6312b6ac-f6a3-4d22-b792-e7f9bdd0c9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:30:b5:06:78:bf:4e:24:35:ec:5e:1b:ef:bb:
10:50:f6:e9:6e:14:30:7a:da:3a:df:aa:a2:72:86:
b2:23:cf:f5:18:1b:5b:51:4b:57:6c:17:71:27:8f:
53:13:02:f4:72:ec:42:15:5c:ad:0b:34:ae:a4:4b:
1d:de:1e:b2:f9:45:06:f7:a9:02:4b:77:cf:1a:70:
ec:2b:52:cf:04:8d:3d:66:a8:68:df:f3:1a:ab:88:
f1:15:50:6e:fb:43:09:0b:7a:bb:d9:e6:a6:9e:77:
c6:dd:09:e8:d7:13:f0:01:02:09:7a:82:e9:3f:61:
6e:38:f4:85:d6:bb:3c:0b:fa:56:91:4e:f8:80:ca:
f7:0b:af:e1:cb:61:3c:d0:80:4b:a0:fe:89:0e:83:
39:a5:c5:28:00:29:71:f7:49:be:73:98:35:e5:f9:
93:3f:b5:13:05:a9:ff:5d:c1:02:0d:05:da:bc:97:
de:70:0b:ef:9a:7b:5a:95:bd:5f:58:7b:ec:f9:b3:
64:eb:a7:da:75:4e:c7:e6:50:b7:dc:5a:fb:a4:a8:
d2:24:66:e7:96:30:26:41:f6:ed:3c:d8:7d:9c:1f:
c9:b6:a0:27:00:e2:ff:26:3f:9c:2e:d7:3e:09:02:
de:01:50:be:bf:09:04:a3:89:99:d8:4a:e3:64:be:
59:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:70:D1:3E:F7:53:D1:03:2A:BC:DB:0D:95:5E:61:21:44:BF:3A:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d65879c-8c2e-30d2-be98-cab6f0bef4ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3a:e7:83:d2:a8:3e:af:96:f9:3f:67:9b:6f:a4:38:ef:9a:ae:
6e:55:d9:9d:a8:f2:17:b8:0c:73:ff:56:2c:58:aa:e3:a6:38:
c4:89:a1:94:8d:aa:3a:83:20:a6:f5:7e:90:7d:1f:9d:96:cb:
3e:e4:f1:2a:1d:8a:58:4e:d9:d1:fb:01:f3:61:13:f3:67:12:
39:c9:6b:28:7b:02:fa:71:a0:92:d5:3b:7e:51:e8:db:cd:94:
1a:41:06:e7:2b:2f:e3:50:de:ba:12:07:62:e2:17:3d:aa:b8:
3e:25:08:3e:d0:df:b5:12:3b:1f:b5:0d:82:35:d7:2b:78:3f:
07:1c:81:bf:a2:f2:62:49:f3:ab:9d:7c:2a:5e:ca:ce:f8:15:
88:71:80:7b:4f:2e:ee:19:fa:2c:d0:7c:dc:05:0a:5c:26:29:
a2:70:50:d6:b2:67:a1:01:fd:ba:f9:2b:7d:63:4d:3a:7a:99:
10:4a:fc:aa:ba:c2:29:46:e5:bf:2b:5c:0d:6a:cf:0a:12:42:
52:c8:a9:81:00:91:99:fc:c3:64:de:06:28:09:64:27:e3:8f:
1f:76:e3:39:71:fa:0b:4f:c8:35:23:a0:d2:df:06:68:5d:c9:
29:c9:86:89:fe:4a:01:86:f8:9c:c3:8f:fa:07:cf:13:54:2f:
e6:15:c4:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWjuWnrjoYau2DqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NjMxMmI2YWMtZjZhMy00ZDIyLWI3OTItZTdmOWJkZDBjOWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTC1Bni/TiQ17F4b77sQUPbpbhQweto636qi
coayI8/1GBtbUUtXbBdxJ49TEwL0cuxCFVytCzSupEsd3h6y+UUG96kCS3fPGnDs
K1LPBI09Zqho3/Maq4jxFVBu+0MJC3q72eamnnfG3Qno1xPwAQIJeoLpP2FuOPSF
1rs8C/pWkU74gMr3C6/hy2E80IBLoP6JDoM5pcUoAClx90m+c5g15fmTP7UTBan/
XcECDQXavJfecAvvmntalb1fWHvs+bNk66fadU7H5lC33Fr7pKjSJGbnljAmQfbt
PNh9nB/JtqAnAOL/Jj+cLtc+CQLeAVC+vwkEo4mZ2ErjZL5ZuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBNw0T73U9EDKrzbDZVeYSFEvzo9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMmQ2NTg3OWMtOGMyZS0z
MGQyLWJlOTgtY2FiNmYwYmVmNGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSccUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADrng9KoPq+W+T9nm2+kOO+arm5V2Z2o8he4DHP/VixYquOmOMSJoZSN
qjqDIKb1fpB9H52Wyz7k8SodilhO2dH7AfNhE/NnEjnJayh7AvpxoJLVO35R6NvN
lBpBBucrL+NQ3roSB2LiFz2quD4lCD7Q37USOx+1DYI11yt4Pwccgb+i8mJJ86ud
fCpeys74FYhxgHtPLu4Z+izQfNwFClwmKaJwUNayZ6EB/br5K31jTTp6mRBK/Kq6
wilG5b8rXA1qzwoSQlLIqYEAkZn8w2TeBigJZCfjjx924zlx+gtPyDUjoNLfBmhd
ySnJhon+SgGG+JzDj/oHzxNUL+YVxF8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 05:54:50 2026 by rpki-client