
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b1e7fc2-43ad-33c1-b8a2-db4a7569284b.roa
File: 4b1e7fc2-43ad-33c1-b8a2-db4a7569284b.roa (raw, json)
Hash identifier: nnuOD/lWxI4uTY41E1L76McOSZXCvzCTrB4T1j+vQUk=
Subject key identifier: B2:BE:65:E0:74:76:36:2D:27:84:B0:E1:94:19:64:E8:8F:E1:36:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA9B3776F4FCEC01551C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b1e7fc2-43ad-33c1-b8a2-db4a7569284b.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 66.31.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:9b:37:76:f4:fc:ec:01:55:1c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=8cc9519a-ea3b-436b-a797-f0e7532bf986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:3b:3f:53:3e:8b:03:43:8d:9b:af:ea:3e:dc:
47:c9:64:1a:ae:e1:f3:ba:3c:25:aa:e9:48:62:d3:
a1:c2:d2:e0:f2:4b:4f:83:e3:e3:b3:8c:cb:ab:25:
e1:7f:52:c8:3d:78:ea:90:5b:10:35:c4:8f:3a:a1:
03:f4:b1:86:99:58:0b:ef:32:49:f8:14:97:df:29:
84:74:fd:7f:12:5d:b1:02:ed:c1:64:1f:4c:1e:1e:
86:ff:32:70:75:83:c6:6b:93:ff:1c:4b:d7:56:0c:
33:f8:b5:93:58:d3:fb:73:b2:99:ea:74:32:25:d7:
1e:f6:c7:b7:21:d1:3b:70:9a:52:17:68:5e:dd:0b:
b4:d7:b8:43:ce:89:41:35:71:61:19:86:06:35:4c:
31:05:76:6d:de:58:f8:16:6a:15:41:e8:ec:e9:d8:
6c:66:e6:50:14:c7:cf:24:58:88:0e:61:19:2d:c5:
2e:58:bb:36:81:16:58:e7:c4:bc:2b:1e:a5:f3:30:
7c:19:f6:22:2d:e0:4c:c9:32:30:58:bb:e4:dc:d6:
19:17:a5:3b:f5:97:9b:9c:e0:89:ae:54:9e:4d:73:
00:41:2f:e4:fe:7c:0b:26:a7:04:16:49:81:c9:5f:
c5:04:e6:82:87:37:80:43:9b:b0:c0:a3:43:85:4f:
35:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:BE:65:E0:74:76:36:2D:27:84:B0:E1:94:19:64:E8:8F:E1:36:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b1e7fc2-43ad-33c1-b8a2-db4a7569284b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.31.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:4c:86:76:53:3a:59:03:72:35:dc:24:aa:49:a7:8c:c3:39:
7b:11:e4:2e:2d:9e:96:1b:2c:5b:a2:f4:ae:ba:dd:4a:a0:1d:
af:9c:b0:90:dd:37:5a:64:0e:3a:6f:01:e2:90:af:0c:b1:c8:
79:70:96:36:d1:0e:30:d4:a4:01:2a:71:32:93:06:5b:46:6d:
0b:0c:e7:80:75:ee:55:6e:42:ce:a9:fa:68:61:31:7f:0f:0c:
db:be:56:83:1f:d9:39:28:78:e6:e2:bd:87:22:77:dd:22:30:
be:14:6c:1e:e9:d6:20:f3:06:25:2f:ce:31:63:6f:00:10:3e:
97:5c:f9:4a:dd:2e:4c:55:1b:81:05:80:6d:2c:3b:13:da:eb:
14:0e:3e:33:71:b3:14:37:54:16:e7:17:1a:e1:df:5c:ef:25:
4e:18:b4:4f:af:db:ce:44:3d:dd:5a:fd:dd:30:c4:63:3b:79:
60:3a:05:15:79:bc:51:70:b0:4d:af:71:a4:95:56:7e:d6:72:
40:a7:32:5a:a0:bf:c3:d5:75:69:90:75:0f:e0:34:61:ce:92:
a7:9f:2b:82:36:a8:48:a5:79:97:ba:f2:31:ed:71:ae:6d:80:
87:f4:b0:ce:bc:49:02:c1:60:b2:2d:2a:df:60:f8:98:c4:cd:
32:12:10:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:06:38 2026 by rpki-client