
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59687fbf-d8ef-3fc5-b161-0630d2411bea.roa
File: 59687fbf-d8ef-3fc5-b161-0630d2411bea.roa (raw, json)
Hash identifier: M3GZNQGKGUmmLwLJSnfOxLIKNYy7da/aQ0fYZyRQG10=
Subject key identifier: CF:1B:2C:D1:FC:49:E2:FD:5C:52:5E:07:10:D9:3E:5C:87:12:F7:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA7D850A6EBA88767F5D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59687fbf-d8ef-3fc5-b161-0630d2411bea.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 174.168.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:7d:85:0a:6e:ba:88:76:7f:5d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=0cfeb5af-9987-44a4-b6c4-9c218352eaf4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:ba:15:9e:29:9e:8b:dc:bd:b1:eb:09:54:99:
07:1b:56:e7:50:91:ec:59:39:12:17:0c:5d:f1:88:
60:03:76:4a:2e:71:31:26:e2:85:64:0e:ea:51:56:
db:eb:93:0a:d6:aa:72:c7:fa:6a:d4:d6:9f:f3:92:
1e:6d:50:ca:9c:17:32:c7:20:d4:01:9d:b0:1f:67:
6d:7a:9a:a3:97:49:92:51:35:f7:80:11:ae:17:a6:
fc:97:c9:7c:db:38:c6:09:63:ff:c1:0c:e8:54:40:
1f:eb:6d:a7:de:45:ea:6b:99:d2:b5:62:6a:8e:b3:
10:10:15:46:57:88:d0:e7:39:7c:fc:d0:3f:9d:82:
e6:1c:d1:2e:13:8f:0f:2f:5b:72:6b:be:77:d6:b3:
b4:dd:ab:ef:b8:c7:f7:dd:e6:5d:9b:46:4e:a1:24:
3f:ac:8f:b9:55:c8:bb:7c:5c:4e:95:aa:66:5d:0b:
80:e6:7d:bf:01:23:c3:4c:5f:50:ea:1c:70:98:3b:
12:5b:35:5a:a2:cb:b3:2b:5b:6b:c4:03:42:b6:bd:
a0:77:54:3e:37:9b:3a:72:9b:76:e3:37:ef:bc:70:
8e:cf:26:92:6c:e5:f4:b0:70:de:28:c4:c9:67:bb:
88:19:56:e7:a7:74:1b:6e:22:fc:7a:8c:50:de:b4:
d3:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1B:2C:D1:FC:49:E2:FD:5C:52:5E:07:10:D9:3E:5C:87:12:F7:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59687fbf-d8ef-3fc5-b161-0630d2411bea.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.168.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
45:da:39:32:84:19:0d:2b:75:ed:0f:08:0f:0f:df:40:f8:b9:
3d:8d:65:a1:7c:96:e2:59:9f:1f:0f:0e:f9:13:73:c3:58:f4:
43:3a:36:d8:af:4e:47:0c:d5:45:3f:04:f1:35:f1:01:4e:89:
dc:58:5d:35:7b:d8:da:52:8f:4f:c8:b5:9b:45:41:ec:42:7b:
f5:7b:e3:a9:57:71:74:bb:42:b0:c4:e6:cb:7a:a4:33:7b:88:
ea:66:4e:03:18:9b:12:53:82:6f:39:89:07:20:61:55:9d:30:
41:4a:55:ab:7f:4c:13:6a:c5:c3:0c:a5:b8:28:90:11:c4:9e:
83:cd:d9:3c:bf:5a:22:d8:4b:bf:70:3b:7a:0d:19:65:39:64:
d1:e6:10:58:12:36:ef:56:1b:88:1e:4a:c9:ff:02:c3:c4:62:
75:d9:37:4b:b9:53:66:a6:9f:b4:20:ee:ab:2a:87:98:16:e9:
eb:d5:57:24:13:5e:5b:4c:50:98:ae:d9:e1:86:6f:ed:85:69:
61:fc:af:25:5d:43:ec:00:17:7a:a7:98:6e:48:14:f4:65:08:
2a:de:26:fd:0f:f8:4c:af:07:cb:d9:cb:62:16:22:06:7a:6b:
c2:32:a7:5c:07:44:62:18:f8:73:ba:26:af:d3:be:b0:20:94:
d0:2c:dd:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:26:24 2026 by rpki-client