
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
File: 5159f522-faa6-3f17-bd17-8b471a149541.roa (raw, json)
Hash identifier: tfaV0ZWizYS7X7C613ckvY/4KyFvJVMGYR0rkZlKXTc=
Subject key identifier: 15:C8:36:23:9C:C2:BB:62:8B:72:AC:6F:1B:54:1D:B3:05:5E:17:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57BD7D2203685379877FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 71.224.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:bd:7d:22:03:68:53:79:87:7f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=9d087528-b0ff-4233-aaed-165a362840f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:5a:8e:1a:b2:a0:8e:3e:52:c6:59:fd:ed:73:
3b:bd:5c:1a:6c:00:6a:f9:c6:00:3e:60:18:dd:29:
b9:c1:4d:ba:54:d2:84:72:56:5d:33:45:46:8f:d0:
38:2e:84:a1:2e:1a:c8:cf:ac:a3:32:2b:77:ef:43:
9f:40:c7:f5:84:e1:b3:e7:a1:91:39:ba:11:b4:76:
f7:87:52:1a:c6:bb:21:e9:9d:30:33:7e:90:60:ce:
36:95:35:42:4b:74:73:47:aa:5d:c3:41:71:0d:c5:
c9:47:3d:3b:62:20:af:23:20:d1:8a:2a:0f:51:41:
cb:7a:c9:70:3c:4e:b4:c7:73:d8:e8:6e:2a:34:85:
8f:4e:96:54:49:c5:e1:43:64:2f:5c:05:cd:c4:0f:
9c:11:30:f2:3e:8e:7a:11:c8:f6:d2:7e:6c:b4:aa:
82:b2:d0:82:33:30:c0:80:3a:2c:a4:31:e7:09:c2:
05:8e:d6:95:4d:f0:60:af:03:07:a0:80:64:d0:b2:
d6:bb:cc:33:f0:81:73:05:d3:ec:82:56:3d:ef:35:
f7:3f:92:36:5c:bf:0c:a8:3d:95:5e:c2:9b:c4:f0:
44:40:04:f1:0b:17:d9:21:b1:3b:09:a1:bb:5e:b9:
f2:06:da:20:4d:0f:40:ed:3c:9b:78:a9:fe:ad:7f:
68:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:C8:36:23:9C:C2:BB:62:8B:72:AC:6F:1B:54:1D:B3:05:5E:17:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5159f522-faa6-3f17-bd17-8b471a149541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.224.35.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dc:75:15:d6:1f:1c:8a:98:e5:32:d8:da:89:f3:5e:3f:d3:99:
03:bd:fd:1b:19:f9:55:22:26:60:97:44:92:29:58:d9:6b:f5:
52:5a:1a:0f:a5:93:a2:63:f0:16:f8:ab:9c:62:af:25:6b:e2:
d8:de:b3:b5:f7:23:b8:04:dd:7e:bf:02:8a:84:f7:31:51:4f:
7f:c6:7a:d9:91:eb:ab:c6:00:82:ed:67:6f:60:29:de:3f:74:
c6:a5:99:2b:af:ea:ff:3d:d8:9b:df:de:d2:41:d6:34:70:7d:
a7:89:dd:a5:9b:37:88:31:08:38:e3:79:36:ca:28:f3:22:be:
bb:c9:66:7c:4c:1d:40:85:83:5a:78:3a:9c:e6:5a:1b:52:86:
f8:e2:a2:33:f9:d7:3c:f6:db:15:dc:d4:28:64:ba:7b:fa:5d:
76:bb:94:5a:81:c7:77:0a:5d:f1:22:ed:f1:d4:57:6e:9a:18:
92:e3:33:8e:97:49:a9:37:ee:18:a8:06:de:89:e7:4a:33:9f:
da:1d:93:e9:3a:b3:32:91:e8:9c:ab:d0:e2:51:71:b6:ad:ad:
d4:2b:d0:5b:ce:83:e7:df:c2:c3:d7:b5:e4:ea:4b:bd:e1:68:
50:50:9f:10:62:0a:c9:10:2d:06:3b:ec:35:46:50:ff:be:fc:
6f:af:5f:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:24:09 2026 by rpki-client