
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60ec617c-a735-3476-bbbd-e36810a6ac85.roa
File: 60ec617c-a735-3476-bbbd-e36810a6ac85.roa (raw, json)
Hash identifier: rxBdHP181rLxy+zvSpb7hRoluFOb/BFW68D7/zWOz4g=
Subject key identifier: F9:D7:52:F3:8C:77:75:5C:BD:AE:1B:35:B4:AD:C4:96:8B:F5:2A:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57BEAA9330BE5C52BF2280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60ec617c-a735-3476-bbbd-e36810a6ac85.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 71.225.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:be:aa:93:30:be:5c:52:bf:22:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=52ec77fc-b57d-4c06-aff5-322297f9885a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:f2:00:65:2c:de:25:f0:28:f3:ab:c1:15:a7:
82:1f:71:b6:c3:10:cc:64:7a:81:7e:3e:e9:f4:7e:
10:81:1c:b8:13:7a:c6:9b:98:1f:7a:82:60:6f:50:
f6:24:a4:ee:ba:fb:17:7a:47:e0:ea:01:60:f9:13:
86:a5:19:09:4d:af:d8:d5:dc:3e:08:7f:a4:f3:fc:
85:39:b5:76:ab:52:df:6d:fa:5b:c5:97:ef:22:c2:
ec:a8:c9:e5:77:89:aa:34:ed:0a:44:35:b5:a5:f0:
ef:6e:85:4c:38:7e:e3:45:94:0c:44:e8:70:51:62:
21:6e:04:74:fc:41:af:e6:1e:70:78:8c:39:e0:8b:
ff:10:dc:a9:d8:9c:9f:5b:ea:74:ac:f9:a2:76:33:
41:d1:7d:7c:ca:0e:f7:c2:9c:76:26:58:82:64:8a:
c6:85:38:da:2f:2c:9a:91:65:be:92:f7:07:41:b4:
df:8b:45:ff:0a:39:22:66:b5:e8:b0:b6:8d:5a:39:
b0:63:73:2c:5a:e7:b4:81:85:06:07:4c:4b:0d:dc:
fb:23:b5:70:e8:a1:4c:9b:c8:55:5e:33:f8:05:d2:
11:b0:ef:eb:eb:a3:8f:b8:39:88:fe:05:b5:eb:6e:
d7:ef:d6:ae:bf:fc:6d:0e:d8:04:09:f2:49:77:30:
5c:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:D7:52:F3:8C:77:75:5C:BD:AE:1B:35:B4:AD:C4:96:8B:F5:2A:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/60ec617c-a735-3476-bbbd-e36810a6ac85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.225.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:b0:0e:ee:b3:62:fe:d0:bd:02:a4:3a:fd:98:e7:17:c8:6f:
72:20:31:9d:dc:b0:6d:1f:70:1a:98:c0:81:aa:74:78:48:7e:
37:95:89:06:f7:8e:33:e8:e4:da:18:7b:aa:9d:d4:68:eb:fa:
28:b8:30:fd:00:2c:d3:5a:bf:4a:6d:77:c9:5b:68:8f:a0:f9:
75:9b:5d:16:aa:01:48:88:f5:6e:8d:1a:43:9f:b5:7c:31:50:
01:71:c5:2b:49:56:28:0a:3f:d2:77:b9:fc:f8:e9:35:a9:c5:
96:d7:f1:98:0e:a7:09:cf:c7:1d:24:f0:57:49:b8:87:f3:54:
bb:5d:59:03:af:25:fe:fe:7e:51:8e:64:18:0d:06:ef:10:10:
77:ad:ae:12:d6:ee:1a:a6:42:b6:7a:fe:b5:f1:ca:a1:fe:43:
fa:23:84:db:31:fd:80:42:9a:ad:b1:14:ed:9f:11:f2:47:1f:
27:1c:10:85:80:13:c3:2a:b8:0a:45:88:d4:7e:3d:bb:8a:ed:
e1:09:f4:18:4d:14:49:1b:2e:78:54:c8:c3:b2:39:24:1c:2e:
48:0e:bb:db:3c:91:f0:7b:89:17:ac:56:fb:90:f8:3e:4e:12:
9b:b2:90:89:d5:10:44:ea:70:7d:02:68:a4:a5:97:ae:b5:97:
3f:84:0a:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:03 2026 by rpki-client