
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6635d868-d1f8-376e-b88c-47a0a08147d4.roa
File: 6635d868-d1f8-376e-b88c-47a0a08147d4.roa (raw, json)
Hash identifier: UAxWrOSwUjdk/2pvX0pnGZtfVd2EymYf3ZoUFJdxGDw=
Subject key identifier: F3:9C:15:25:47:0C:6A:C7:C5:1C:FF:47:DA:7A:57:FD:F8:E5:FD:14
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58CA29DE0ACD6C440C4B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6635d868-d1f8-376e-b88c-47a0a08147d4.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 71.202.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:ca:29:de:0a:cd:6c:44:0c:4b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c28dbc55-0beb-464a-8bce-bd6a9f52130f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:52:be:4d:c3:d7:16:f3:fc:eb:8c:4d:3d:90:
43:07:b3:9c:b0:2f:f6:94:a2:a8:18:af:7a:a2:b4:
68:51:4a:85:d0:f0:72:a6:d6:5d:7f:18:0d:5d:81:
5c:b8:c9:e3:f3:bd:f5:4d:39:6f:78:a3:17:4c:b4:
bf:d2:cb:97:4e:dc:66:6e:57:7f:45:55:40:54:16:
a5:5c:6b:70:f4:79:ed:8d:d8:12:bf:b0:9f:66:78:
0a:eb:29:98:6b:c1:39:60:7d:d3:94:af:9d:dd:6f:
8e:b9:bb:e8:95:d5:56:d4:74:dc:d2:1b:da:d9:97:
c9:0d:14:b7:bb:25:ec:1a:49:10:a7:92:92:1e:5a:
ac:74:04:98:3c:13:36:fc:b8:16:28:c1:4f:a1:b4:
eb:3c:13:1a:7f:5d:9a:f0:f4:4f:f9:62:6e:ba:0c:
20:1c:80:4f:b2:6d:fd:dc:1e:ca:3f:65:83:b1:fa:
c3:00:2a:38:f2:49:37:25:dc:f4:fe:2c:81:bf:5c:
af:6f:e4:9c:05:d2:36:f5:81:cd:f7:48:2c:5d:d5:
89:6a:10:d9:d5:fd:75:5b:d6:1f:d6:ee:78:a1:df:
bc:6a:15:9d:c3:a3:8f:c7:c2:ad:c0:23:b4:be:71:
2c:90:bb:bf:94:cb:82:bc:b7:3f:cb:45:9b:fb:b5:
db:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:9C:15:25:47:0C:6A:C7:C5:1C:FF:47:DA:7A:57:FD:F8:E5:FD:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6635d868-d1f8-376e-b88c-47a0a08147d4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.202.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:b9:d6:e4:37:95:44:13:3f:b3:56:71:a8:02:f5:18:14:ed:
ce:b6:a4:88:02:29:44:31:f1:4e:90:09:8b:0b:13:60:b3:51:
c6:14:9d:80:72:bd:f9:65:9c:54:e1:ba:e6:2b:e6:23:8b:76:
ef:8b:b9:dd:a7:9f:f7:9b:c5:73:dd:ac:03:23:00:36:4a:b9:
ce:fd:b9:f5:76:46:79:4f:f0:c2:54:f1:56:a2:4d:79:8e:5f:
47:48:2f:51:d8:98:12:bf:4f:09:26:73:34:3d:10:a7:1b:89:
68:b0:29:27:e8:28:f7:92:42:55:8b:4e:86:ed:de:2c:3d:38:
f9:99:34:7f:48:ed:2f:76:9c:8d:f3:42:1e:b9:71:d5:d1:76:
4c:99:d0:b2:90:10:ae:d1:bd:18:3b:61:e2:8c:a7:f8:b3:40:
97:a8:91:06:68:86:db:1f:a6:db:68:38:38:dd:68:46:20:a7:
17:58:60:69:77:2a:6a:10:bd:0c:c3:3f:31:ce:18:26:13:20:
84:08:bc:da:93:76:29:92:a2:30:e6:8b:0e:95:ea:19:58:54:
7c:bf:be:da:26:f8:d5:dd:4a:ae:a8:d8:a2:44:a1:82:42:38:
88:70:13:d4:41:af:e6:d0:b2:3a:df:1d:7f:d1:67:8c:62:9f:
4e:72:38:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:04:33 2026 by rpki-client