
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e1cef7f-49dc-3536-98f0-be0b8c2ea751.roa
File: 3e1cef7f-49dc-3536-98f0-be0b8c2ea751.roa (raw, json)
Hash identifier: f73mew6bzwcUlPgohBlC3zR0hTeRTpAFxrJO4LNzXbY=
Subject key identifier: EB:75:D2:40:A1:8F:51:4D:3F:63:3A:AF:4E:70:F2:EF:F2:44:9D:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5BC0B3E0CAA749AC59D640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e1cef7f-49dc-3536-98f0-be0b8c2ea751.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 71.194.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:c0:b3:e0:ca:a7:49:ac:59:d6:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=f85c5606-01b6-4418-87b7-997c8a3da889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:8a:68:a7:d4:5a:f0:1c:b8:7b:c0:c2:5e:8a:
72:34:02:7c:87:d2:c4:c2:06:fe:db:86:d9:83:32:
f2:6c:64:21:c6:c9:2b:6d:05:91:a0:2d:82:6d:fe:
46:d5:c2:ad:b1:f3:78:04:9d:f0:60:28:5e:a5:87:
d5:73:59:bf:d3:bd:d4:9f:7b:63:e2:e5:6b:e7:85:
96:5d:ab:90:22:63:65:03:52:33:d7:19:c8:0a:2d:
9c:01:82:82:57:9f:93:6c:7a:ac:6d:79:9f:61:0e:
95:b3:40:19:a2:a0:f6:a1:6e:e5:f3:50:06:ad:dd:
3f:01:46:57:79:6c:ba:e8:83:2d:47:3e:24:b4:67:
c8:c0:b5:07:58:7e:fc:ed:26:c4:c9:2d:11:69:04:
34:aa:83:b1:12:11:c5:1b:67:23:01:10:6d:50:3e:
44:f9:55:d2:8c:d5:14:4c:15:bf:1d:70:76:ff:5c:
97:8f:f9:da:dd:d2:b8:04:ab:3d:53:98:a7:b7:25:
41:d6:a5:37:37:e4:3f:b7:3d:20:cd:ac:69:d4:de:
01:ba:41:41:bf:7f:4e:f6:5f:09:d9:78:37:51:77:
df:b4:93:23:3c:a8:05:8d:1e:c7:87:75:98:a4:af:
14:cb:cc:6d:0e:6e:fa:3a:67:f7:0c:a5:26:5b:f6:
ef:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:75:D2:40:A1:8F:51:4D:3F:63:3A:AF:4E:70:F2:EF:F2:44:9D:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e1cef7f-49dc-3536-98f0-be0b8c2ea751.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.194.19.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:88:80:b5:1c:3e:44:02:6a:c8:9e:42:a6:32:b0:4a:31:b2:
40:5f:98:06:3b:14:c4:9c:1a:a0:64:bb:dd:bd:d7:d9:f6:32:
14:7d:b2:1f:22:37:35:be:95:55:b1:02:bb:07:83:6a:11:60:
41:b3:01:e0:74:2a:55:f0:32:c1:d8:3b:0e:f0:1b:b5:90:95:
ed:ae:93:59:53:11:65:aa:f6:76:88:45:17:1e:06:9d:73:a9:
1c:5c:92:4d:01:7b:95:4d:bd:c6:18:32:b4:e4:34:60:2a:a0:
27:1e:28:33:7a:57:cc:7a:56:f5:d8:45:7d:94:68:3c:71:16:
fa:8b:9e:90:72:83:95:ea:fa:6f:c1:9a:5c:6b:49:3c:9a:44:
6a:68:b7:08:02:62:b0:f2:89:a6:f8:e6:40:c8:90:48:01:2d:
53:5f:45:20:0b:14:83:de:16:bf:bf:e0:76:17:55:71:a2:e9:
4e:95:67:25:c9:3d:78:ce:27:5b:4a:7a:07:8c:63:cb:24:6e:
ca:61:96:09:ef:ba:2f:d5:5f:ed:e0:37:53:16:ad:03:2d:6b:
43:2e:29:6c:43:d4:50:29:d0:97:7f:6b:4a:b2:d8:a8:81:a8:
17:b1:23:21:83:39:6f:2d:98:12:a8:4f:18:11:68:d5:ad:a9:
8d:fd:fd:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW8Cz4MqnSaxZ1kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
Zjg1YzU2MDYtMDFiNi00NDE4LTg3YjctOTk3YzhhM2RhODg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApopop9Ra8By4e8DCXopyNAJ8h9LEwgb+24bZ
gzLybGQhxskrbQWRoC2Cbf5G1cKtsfN4BJ3wYChepYfVc1m/073Un3tj4uVr54WW
XauQImNlA1Iz1xnICi2cAYKCV5+TbHqsbXmfYQ6Vs0AZoqD2oW7l81AGrd0/AUZX
eWy66IMtRz4ktGfIwLUHWH787SbEyS0RaQQ0qoOxEhHFG2cjARBtUD5E+VXSjNUU
TBW/HXB2/1yXj/na3dK4BKs9U5intyVB1qU3N+Q/tz0gzaxp1N4BukFBv39O9l8J
2Xg3UXfftJMjPKgFjR7Hh3WYpK8Uy8xtDm76Omf3DKUmW/bvwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOt10kChj1FNP2M6r05w8u/yRJ1tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UxY2VmN2YtNDlkYy0z
NTM2LTk4ZjAtYmUwYjhjMmVhNzUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAR8ITMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKIgLUcPkQCasieQqYysEoxskBfmAY7FMScGqBku92919n2MhR9sh8i
NzW+lVWxArsHg2oRYEGzAeB0KlXwMsHYOw7wG7WQle2uk1lTEWWq9naIRRceBp1z
qRxckk0Be5VNvcYYMrTkNGAqoCceKDN6V8x6VvXYRX2UaDxxFvqLnpByg5Xq+m/B
mlxrSTyaRGpotwgCYrDyiab45kDIkEgBLVNfRSALFIPeFr+/4HYXVXGi6U6VZyXJ
PXjOJ1tKegeMY8skbsphlgnvui/VX+3gN1MWrQMta0MuKWxD1FAp0Jd/a0qy2KiB
qBexIyGDOW8tmBKoTxgRaNWtqY39/Ug=
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:28:52 2026 by rpki-client