
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/586f1b66-87cf-3f2e-92d2-ca21ca8110b9.roa
File: 586f1b66-87cf-3f2e-92d2-ca21ca8110b9.roa (raw, json)
Hash identifier: 88eobsZvd9iKlsv9L1TmonkJGCV/ngE3Y3TDT0Lkp2Y=
Subject key identifier: B8:D9:AD:06:2A:0B:C1:40:2A:C1:13:54:42:E3:74:AC:44:CB:63:EE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5ACDF3935EB03871117DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/586f1b66-87cf-3f2e-92d2-ca21ca8110b9.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 71.58.4.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:cd:f3:93:5e:b0:38:71:11:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=9469b7e5-4adb-4c16-8cb2-8b9eac113f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6e:73:b0:f5:9f:ae:e0:89:bf:11:88:71:9e:
5f:94:58:de:ad:29:50:8a:97:07:fb:7a:7b:98:fb:
2c:4d:aa:ef:5c:ed:50:da:d8:10:f3:e9:78:c5:81:
31:dc:40:4b:5d:08:03:23:ed:ad:a0:6a:d8:93:5a:
42:44:a6:d7:07:21:7a:70:8f:c4:4c:dc:f1:08:6b:
2f:f4:37:a2:d2:2b:b4:9d:07:b5:91:03:30:0d:aa:
4a:61:29:2d:83:fc:73:a0:ae:f7:64:44:d2:1b:5c:
60:67:88:fa:15:07:17:a0:eb:f5:98:e9:ca:31:2c:
51:3f:6d:f0:d0:5e:9a:a6:88:d3:7e:3e:78:6f:35:
29:f8:20:86:4c:df:36:f0:4c:57:d3:50:ab:6d:d2:
22:65:f4:77:4d:ef:10:d1:a3:28:c4:e2:59:4b:fe:
2e:df:56:6e:97:61:c5:03:0b:71:51:39:38:c5:7c:
05:a0:ab:d5:22:1f:2d:e6:2c:1f:29:40:00:02:a6:
81:cc:68:2d:68:37:b0:76:da:55:bd:d4:ac:a8:16:
f8:2e:29:0b:2d:9d:85:3f:bb:94:23:0a:b6:71:f4:
0f:24:61:c7:f5:58:02:d2:e9:fc:4b:21:09:9f:35:
4e:d0:b9:55:ac:73:7d:1f:4a:48:13:30:77:bd:52:
01:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:D9:AD:06:2A:0B:C1:40:2A:C1:13:54:42:E3:74:AC:44:CB:63:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/586f1b66-87cf-3f2e-92d2-ca21ca8110b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.58.4.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:73:25:6f:5b:69:65:e7:db:48:6e:78:96:5c:4f:7a:e0:73:
1e:34:fa:0d:09:a4:3b:df:23:20:0a:96:81:4d:13:39:b4:51:
08:18:59:19:94:6e:76:bc:2e:96:b7:ff:a9:62:a7:18:b4:2b:
2d:a5:63:c8:5b:b3:a9:8b:09:9d:cf:04:da:b6:c5:3c:f5:26:
9a:4f:23:dd:37:f6:04:41:7f:bd:67:ea:31:7b:bc:8a:48:a5:
cb:09:1c:a7:ed:b1:11:b5:d2:36:58:51:3a:da:90:98:72:0c:
0b:b4:29:09:4b:63:2f:ed:42:16:cd:59:2a:30:89:51:01:d1:
fb:73:ff:73:d7:cb:c9:18:69:7d:ff:25:0a:81:f0:7c:40:1c:
22:c8:e8:4b:44:df:07:b1:01:59:66:86:6a:c4:35:93:fa:25:
6e:34:e0:61:10:03:13:49:8b:4b:d3:2b:9c:9e:43:dc:9d:30:
c0:b9:ea:15:29:96:e2:0b:14:81:dd:4e:f1:e9:d1:9e:dc:5f:
ea:47:2c:cf:d5:61:5c:28:a3:32:17:7c:a1:1e:bf:57:6f:f2:
ed:8c:fe:df:37:50:79:62:6b:b3:9b:65:84:4e:46:6c:d9:e1:
60:f3:f1:70:f2:af:c5:bb:b3:48:cc:d7:b0:db:e6:2a:b3:67:
ab:94:5e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 23:58:20 2026 by rpki-client