
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa
File: 5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa (raw, json)
Hash identifier: hTOmHkvrXx696idJrC5xx5gmw8lUFY9gFcHH8edT6xs=
Subject key identifier: 39:D8:8F:74:37:43:E5:87:D5:19:93:67:E5:E9:DF:F4:C0:A8:6E:05
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE86F415A3D7B5D5EC898640
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 22909
IP address blocks: 71.25.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:86:f4:15:a3:d7:b5:d5:ec:89:86:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=802e5a20-0c25-4e15-b242-2e01ca17b8cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:2d:b7:3c:78:22:77:27:17:d9:12:9e:48:bc:
4a:d6:2a:13:0c:26:9a:99:a1:d0:e0:94:57:6c:04:
83:9b:5e:98:f9:b1:19:08:38:18:0d:f6:30:bb:4a:
81:41:88:52:a9:13:68:58:b8:2b:74:32:fe:83:44:
2e:27:ff:a6:5d:e7:c3:28:b4:d7:c5:31:41:8b:08:
2e:8d:55:7d:5e:cb:be:30:03:cc:9f:18:d8:86:83:
aa:e8:81:09:fa:59:69:e7:38:4c:d8:ca:59:8d:f0:
b0:0d:cb:07:5c:c0:d9:15:50:b1:82:32:b5:5f:58:
fd:8c:4e:c2:8d:f7:70:96:01:82:5d:69:32:ef:75:
af:ae:d6:bb:8c:f6:af:fc:9f:7f:e9:81:90:10:29:
b8:a7:cc:73:7d:d3:cb:77:74:d9:79:3e:2c:9a:f1:
d0:4d:c3:78:1e:39:c6:a6:15:a2:d3:72:4a:a9:60:
5a:7d:7b:7a:76:38:37:3f:98:e1:ff:1b:3b:5d:8c:
16:40:aa:e8:9d:41:b6:70:b3:b0:cd:8a:4c:1b:97:
74:07:40:fa:dd:b0:51:60:f4:37:8a:f7:21:82:93:
32:65:d2:be:1a:f1:0a:b8:fe:8f:43:b6:c8:3a:7e:
8c:49:03:2d:35:bf:fe:d2:25:33:39:e8:38:7d:fa:
a0:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:D8:8F:74:37:43:E5:87:D5:19:93:67:E5:E9:DF:F4:C0:A8:6E:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5c6bf600-5f18-3d17-83a1-4dd073e63e2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.25.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:e4:01:2e:1b:46:e5:25:28:b3:48:07:24:63:ef:59:60:50:
81:10:cc:62:ec:a2:6a:93:d6:6d:4f:43:d8:69:d3:64:88:27:
90:a3:e7:76:8f:8b:02:9a:04:57:bd:b5:57:98:2c:99:17:6d:
c5:8d:23:cc:e7:59:02:8a:91:76:99:c6:ae:7b:7d:af:6f:42:
b6:3e:8f:42:07:19:07:31:f3:18:00:29:33:2b:51:4e:3a:77:
27:e8:e8:57:8c:6a:21:cf:6f:08:9c:09:49:b3:73:10:4a:92:
a9:ea:69:87:fa:11:dd:9c:d1:5b:cb:ef:7c:c0:b9:ef:dd:61:
f8:b5:5a:9c:9e:c5:bf:21:de:01:86:e4:4d:43:f0:72:29:04:
1e:5f:53:3b:54:b3:8a:0b:3c:4d:6e:65:c6:07:b5:79:44:90:
2a:d4:1f:86:2f:50:5b:63:5d:ec:62:8b:aa:14:3c:e1:c7:c6:
75:8d:eb:19:62:2e:a5:11:4d:b6:28:51:09:2a:96:3e:91:17:
4e:fc:ce:6e:0d:53:f1:3d:00:9e:71:1e:ee:ec:03:e7:85:a9:
65:f0:fe:6a:54:3e:0d:f3:af:64:15:61:b3:4b:a5:4c:86:da:
84:a7:8e:b0:c7:54:23:cf:84:04:af:35:ef:c6:89:26:2e:82:
07:15:e7:3d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehvQVo9e11eyJhkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
ODAyZTVhMjAtMGMyNS00ZTE1LWIyNDItMmUwMWNhMTdiOGNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1S23PHgidycX2RKeSLxK1ioTDCaamaHQ4JRX
bASDm16Y+bEZCDgYDfYwu0qBQYhSqRNoWLgrdDL+g0QuJ/+mXefDKLTXxTFBiwgu
jVV9Xsu+MAPMnxjYhoOq6IEJ+llp5zhM2MpZjfCwDcsHXMDZFVCxgjK1X1j9jE7C
jfdwlgGCXWky73Wvrta7jPav/J9/6YGQECm4p8xzfdPLd3TZeT4smvHQTcN4HjnG
phWi03JKqWBafXt6djg3P5jh/xs7XYwWQKronUG2cLOwzYpMG5d0B0D63bBRYPQ3
ivchgpMyZdK+GvEKuP6PQ7bIOn6MSQMtNb/+0iUzOeg4ffqgwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDnYj3Q3Q+WH1RmTZ+Xp3/TAqG4FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWM2YmY2MDAtNWYxOC0z
ZDE3LTgzYTEtNGRkMDczZTYzZTJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERxngMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADLkAS4bRuUlKLNIByRj71lgUIEQzGLsomqT1m1PQ9hp02SIJ5Cj53aP
iwKaBFe9tVeYLJkXbcWNI8znWQKKkXaZxq57fa9vQrY+j0IHGQcx8xgAKTMrUU46
dyfo6FeMaiHPbwicCUmzcxBKkqnqaYf6Ed2c0VvL73zAue/dYfi1Wpyexb8h3gGG
5E1D8HIpBB5fUztUs4oLPE1uZcYHtXlEkCrUH4YvUFtjXexii6oUPOHHxnWN6xli
LqURTbYoUQkqlj6RF078zm4NU/E9AJ5xHu7sA+eFqWXw/mpUPg3zr2QVYbNLpUyG
2oSnjrDHVCPPhASvNe/GiSYuggcV5z0=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:46:40 2026 by rpki-client