
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8943f1be-826e-334d-80ab-c954063f38f8.roa
File: 8943f1be-826e-334d-80ab-c954063f38f8.roa (raw, json)
Hash identifier: wGzJRqtMkJEKJN3dPkxlFgLhjH/dPz6zvtDId2BxJn4=
Subject key identifier: 34:28:D4:13:47:76:58:A6:DB:92:FC:7D:65:6C:50:09:49:CC:42:74
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BBD1DDA880D023705E1740
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8943f1be-826e-334d-80ab-c954063f38f8.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 71.232.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:d1:dd:a8:80:d0:23:70:5e:17:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=4ff7eaf4-dd3f-4971-b6ea-d0c13b026a94
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:3d:44:ef:d4:1d:3f:41:2c:bc:b4:50:c7:67:
b9:b8:df:94:70:24:f7:d1:64:e3:e6:2d:8a:e0:61:
5b:1a:a5:07:05:a4:3a:bc:3c:f2:e1:bc:dd:2e:c5:
d0:0b:84:7a:30:4a:28:51:85:d0:b2:f3:41:84:a9:
c6:50:a9:c8:53:3b:d8:f9:4d:90:3d:b8:74:a7:c8:
bf:63:49:ac:16:7c:e5:92:1d:d6:ea:31:70:49:2c:
ce:ed:dd:19:f1:c8:e3:8b:59:66:02:c8:3f:75:77:
fc:51:74:92:59:26:27:55:09:0f:df:ac:3e:7e:e1:
a4:0b:c3:68:dd:8d:99:db:90:89:bc:ad:ef:bb:e3:
53:58:6e:fc:fc:bd:cc:03:42:cb:97:49:c9:cb:4f:
ea:82:6e:51:37:5c:61:50:b4:9f:ea:cb:07:1b:c5:
14:ff:91:2d:ee:d1:cb:31:e7:e8:0b:f7:84:40:5b:
00:22:86:0f:47:19:0b:51:df:a6:07:b2:ad:99:fa:
32:1f:b3:47:11:21:8f:86:29:96:b8:12:09:2a:b3:
68:e5:ec:3c:f2:55:3a:00:4c:46:03:ab:5b:e0:c6:
27:25:f1:8d:e4:6c:ed:14:48:df:6e:06:c3:e0:f4:
13:66:d8:d4:ae:f2:8a:7f:43:42:17:ae:84:30:5c:
da:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:28:D4:13:47:76:58:A6:DB:92:FC:7D:65:6C:50:09:49:CC:42:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8943f1be-826e-334d-80ab-c954063f38f8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:af:79:68:32:2d:2e:3b:08:76:9e:0f:a8:df:e2:a3:04:b0:
4f:dd:96:81:20:b8:61:f1:5c:cd:ce:17:95:18:07:f6:48:c6:
bc:45:27:db:82:2f:e8:8a:71:80:cc:8e:9d:09:1b:ce:98:e6:
3f:fe:c1:45:e7:78:c4:b8:ae:e3:26:cd:db:67:79:85:bb:ec:
40:5f:d9:55:7c:b2:0a:ad:c3:f4:51:fe:a7:46:78:e9:5d:68:
fe:a3:12:bd:96:ce:dd:16:c3:09:87:c1:83:f8:c0:be:19:db:
80:fb:fb:01:ed:a9:9d:81:8f:d0:4c:f9:8d:ca:32:ec:0f:0a:
a7:6a:57:31:15:3f:33:54:10:9e:f1:09:ba:ec:78:c4:d0:bc:
52:68:53:87:5f:e2:30:0e:c6:0e:7d:69:34:b4:29:7f:3f:65:
1a:8d:94:b7:d8:db:48:5b:86:b9:bd:12:8b:db:df:70:06:3d:
6c:91:50:fa:de:c8:43:b7:54:ad:ae:89:5b:36:74:d9:6b:e8:
31:bd:f2:8b:6d:73:07:7a:14:ca:6f:17:83:0e:cd:a8:cc:19:
9e:5b:1b:77:e2:d7:2d:bf:94:95:4a:e0:40:2f:a5:b5:18:91:
ec:45:ee:e9:a2:e0:3f:8f:c3:d3:f3:62:61:2c:fb:5c:d6:e5:
10:e8:4a:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu9HdqIDQI3BeF0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
NGZmN2VhZjQtZGQzZi00OTcxLWI2ZWEtZDBjMTNiMDI2YTk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyT1E79QdP0EsvLRQx2e5uN+UcCT30WTj5i2K
4GFbGqUHBaQ6vDzy4bzdLsXQC4R6MEooUYXQsvNBhKnGUKnIUzvY+U2QPbh0p8i/
Y0msFnzlkh3W6jFwSSzO7d0Z8cjji1lmAsg/dXf8UXSSWSYnVQkP36w+fuGkC8No
3Y2Z25CJvK3vu+NTWG78/L3MA0LLl0nJy0/qgm5RN1xhULSf6ssHG8UU/5Et7tHL
MefoC/eEQFsAIoYPRxkLUd+mB7KtmfoyH7NHESGPhimWuBIJKrNo5ew88lU6AExG
A6tb4MYnJfGN5GztFEjfbgbD4PQTZtjUrvKKf0NCF66EMFzaBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQo1BNHdlim25L8fWVsUAlJzEJ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODk0M2YxYmUtODI2ZS0z
MzRkLTgwYWItYzk1NDA2M2YzOGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCR+hEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH+veWgyLS47CHaeD6jf4qMEsE/dloEguGHxXM3OF5UYB/ZIxrxFJ9uC
L+iKcYDMjp0JG86Y5j/+wUXneMS4ruMmzdtneYW77EBf2VV8sgqtw/RR/qdGeOld
aP6jEr2Wzt0WwwmHwYP4wL4Z24D7+wHtqZ2Bj9BM+Y3KMuwPCqdqVzEVPzNUEJ7x
CbrseMTQvFJoU4df4jAOxg59aTS0KX8/ZRqNlLfY20hbhrm9Eovb33AGPWyRUPre
yEO3VK2uiVs2dNlr6DG98ottcwd6FMpvF4MOzajMGZ5bG3fi1y2/lJVK4EAvpbUY
kexF7umi4D+Pw9PzYmEs+1zW5RDoSgQ=
-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:43 2026 by rpki-client