
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59deb89d-ced7-3c1a-a021-595bd975868b.roa
File: 59deb89d-ced7-3c1a-a021-595bd975868b.roa (raw, json)
Hash identifier: qGRI7DsYOl3aJZ2G/BwJ+BBQWTxx8ji/quv57S4ga/k=
Subject key identifier: 54:AB:E0:44:1C:8B:0D:DD:48:B7:C7:C7:6E:90:73:58:6C:CE:DF:97
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5A2B64A1C9EDB6BF67ECC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59deb89d-ced7-3c1a-a021-595bd975868b.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 73.198.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:2b:64:a1:c9:ed:b6:bf:67:ec:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b3f257bb-7a3e-4bd2-8a27-0fd4f66f428f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:d5:c9:ea:89:84:f5:9e:38:4f:d5:07:7d:63:
bf:fd:99:42:9a:b0:47:15:cb:58:4b:da:29:fd:34:
cf:3f:00:86:eb:27:03:0f:1c:0f:a9:7b:4a:93:44:
91:9d:1e:bc:25:77:16:b2:98:53:5f:5c:ff:77:cd:
84:1d:8c:bf:1b:75:19:5d:7b:f6:a6:20:04:ff:04:
18:28:4a:0b:31:ff:ad:ea:6c:65:da:a5:72:1b:32:
e6:97:0f:a0:dc:ca:1a:59:1d:e8:b4:fe:e5:36:46:
44:84:56:87:e6:a0:e8:fc:95:31:a0:85:92:00:56:
c7:88:89:67:4f:02:68:1e:4e:15:e5:b8:3c:2d:58:
48:d8:0c:e1:47:58:9f:85:73:b4:c9:28:65:ae:b0:
be:95:0d:f2:97:a1:0d:a3:23:af:56:57:24:e3:a4:
9a:ca:d8:3b:57:10:fd:f0:84:21:62:34:64:c2:f1:
09:f8:4b:0d:06:d9:e0:2f:96:d9:84:1e:20:38:ae:
89:12:04:32:6e:84:ae:53:e7:8f:cc:38:f5:12:8f:
19:0d:ff:3e:bb:be:b0:bb:26:2d:2a:b2:06:3c:18:
de:17:62:23:8d:5f:a4:c0:25:ef:3b:3e:cf:47:82:
b6:1f:f3:44:ff:73:e9:c7:9a:7c:ac:65:a1:5b:39:
fb:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:AB:E0:44:1C:8B:0D:DD:48:B7:C7:C7:6E:90:73:58:6C:CE:DF:97
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/59deb89d-ced7-3c1a-a021-595bd975868b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.198.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:13:3e:e8:dd:93:4e:7e:5a:fd:30:04:c7:07:72:ff:32:42:
33:68:f2:3e:3d:55:33:f4:80:a7:a6:a3:11:06:07:33:da:55:
3e:a5:7c:a3:63:5b:54:33:36:ab:6f:26:14:1f:2c:12:f6:c6:
0a:79:b0:64:da:41:9a:9e:36:27:5c:f6:f6:9c:b8:63:62:ef:
da:7c:d5:c4:02:bf:af:ef:cd:dd:81:14:98:53:4a:8a:94:f0:
ff:87:e8:d9:1c:8d:51:ad:29:01:5b:59:64:9d:3f:4a:f9:fd:
3d:a6:64:78:a1:9b:af:10:3f:3f:fa:12:f3:b1:8b:80:8a:91:
52:19:f7:bc:6c:ec:d2:56:0c:0c:2d:27:3b:7b:63:60:1c:2c:
bf:41:23:5e:f6:a9:eb:fa:85:a4:7f:f1:93:20:61:eb:3a:50:
38:fd:86:4c:e5:f2:03:6d:3a:bc:37:a9:38:dc:bb:b9:77:98:
11:2a:82:42:1c:0c:dc:ab:8a:e0:21:ed:f6:d7:e7:e5:44:ec:
ca:63:d6:b2:f9:dc:49:e3:99:d7:5f:5e:35:e2:8d:07:10:6d:
28:28:ec:8f:af:13:6d:be:fc:3d:43:7d:d7:33:da:0d:c0:e4:
15:e1:66:ab:c5:a0:12:94:40:c5:4c:9b:9f:e4:7a:ab:6f:f1:
30:f2:22:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWitkocnttr9n7MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YjNmMjU3YmItN2EzZS00YmQyLThhMjctMGZkNGY2NmY0MjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAptXJ6omE9Z44T9UHfWO//ZlCmrBHFctYS9op
/TTPPwCG6ycDDxwPqXtKk0SRnR68JXcWsphTX1z/d82EHYy/G3UZXXv2piAE/wQY
KEoLMf+t6mxl2qVyGzLmlw+g3MoaWR3otP7lNkZEhFaH5qDo/JUxoIWSAFbHiIln
TwJoHk4V5bg8LVhI2AzhR1ifhXO0yShlrrC+lQ3yl6ENoyOvVlck46Saytg7VxD9
8IQhYjRkwvEJ+EsNBtngL5bZhB4gOK6JEgQyboSuU+ePzDj1Eo8ZDf8+u76wuyYt
KrIGPBjeF2IjjV+kwCXvOz7PR4K2H/NE/3Ppx5p8rGWhWzn7qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFSr4EQciw3dSLfHx26Qc1hszt+XMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTlkZWI4OWQtY2VkNy0z
YzFhLWEwMjEtNTk1YmQ5NzU4NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScY6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwTPujdk05+Wv0wBMcHcv8yQjNo8j49VTP0gKemoxEGBzPaVT6lfKNj
W1QzNqtvJhQfLBL2xgp5sGTaQZqeNidc9vacuGNi79p81cQCv6/vzd2BFJhTSoqU
8P+H6NkcjVGtKQFbWWSdP0r5/T2mZHihm68QPz/6EvOxi4CKkVIZ97xs7NJWDAwt
Jzt7Y2AcLL9BI172qev6haR/8ZMgYes6UDj9hkzl8gNtOrw3qTjcu7l3mBEqgkIc
DNyriuAh7fbX5+VE7Mpj1rL53EnjmddfXjXijQcQbSgo7I+vE22+/D1Dfdcz2g3A
5BXhZqvFoBKUQMVMm5/keqtv8TDyIsQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:00:31 2026 by rpki-client