
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a10edac6-1230-3549-8315-f4879c6324df.roa
File: a10edac6-1230-3549-8315-f4879c6324df.roa (raw, json)
Hash identifier: 25TtFZuWpJ/XBYKvhLItrV83743InbQ1woIc0AA8pps=
Subject key identifier: 2E:89:75:3E:1C:6C:A4:20:8A:C7:53:6B:B9:80:FD:83:67:68:F2:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5BD0563B05735BB2299880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a10edac6-1230-3549-8315-f4879c6324df.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 71.57.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:d0:56:3b:05:73:5b:b2:29:98:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c2b66982-56b3-4775-9f5a-9f2b05a8a414
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:a4:58:12:46:4a:58:3f:7a:50:dd:89:72:
be:54:d6:93:2b:84:0f:24:37:08:24:fa:a9:0d:28:
f4:f0:f4:b3:ca:ce:05:e2:74:ca:38:39:99:45:a2:
f5:52:7c:92:3c:cf:9e:7f:40:ff:eb:eb:2a:e6:6d:
bb:11:6b:4c:51:20:6d:5b:34:76:a5:d0:0f:c1:ee:
0f:d1:67:0a:f7:c5:22:dd:31:fc:63:f2:69:0a:dd:
5b:7b:d2:df:a0:2e:fd:fd:b4:4f:65:5a:81:91:f1:
e0:b2:e2:fc:0a:e6:51:6e:67:db:56:f2:9f:0c:7d:
d7:61:c5:31:c0:d5:58:ca:d8:36:94:b6:70:c1:8e:
c4:bc:ff:19:f6:a6:45:e8:0a:21:86:f4:3c:74:18:
4b:54:0c:f1:2f:b2:d7:dd:60:99:eb:fa:c3:02:03:
a7:85:f3:19:16:52:d0:3d:1e:6d:83:0c:c9:6f:cf:
46:80:3d:dd:70:97:c6:08:d8:c3:87:e6:94:95:e4:
c6:34:2f:fa:92:a8:32:cb:09:e7:62:c7:6a:9c:0d:
32:3b:bd:3b:9e:b9:d9:25:62:d3:58:65:f1:d4:17:
19:b8:d4:44:80:13:7b:e9:08:e4:b3:bd:b7:63:fa:
0c:b3:fa:bd:b9:05:95:6e:04:12:6b:a3:4f:3e:ed:
e9:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:89:75:3E:1C:6C:A4:20:8A:C7:53:6B:B9:80:FD:83:67:68:F2:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a10edac6-1230-3549-8315-f4879c6324df.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.57.124.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:64:12:76:ef:84:5c:ca:6d:65:9a:b7:84:8f:f2:70:26:5a:
ce:85:8d:37:1d:32:5d:09:40:42:1d:ac:f9:c6:71:1a:7a:6e:
91:18:bc:36:67:6f:26:b8:5e:bf:72:59:7e:25:9d:3f:01:f4:
0a:cc:09:be:1b:c5:ed:47:b5:38:ee:df:bd:46:a9:30:05:c5:
40:f5:e8:23:d7:74:6d:7b:c2:7d:25:29:30:21:d5:c4:9c:33:
e4:4f:94:55:96:d7:23:1b:0f:2a:46:28:63:db:02:12:38:ca:
21:a0:0d:74:b2:16:5b:b4:d5:a5:9c:40:ec:66:f0:17:ac:b0:
62:cb:30:13:e1:0c:83:4d:f6:af:10:13:cb:81:06:59:9f:a8:
98:f5:e8:30:3a:03:23:80:78:9c:e4:74:1b:2c:57:16:41:e5:
9b:1b:f0:52:7e:9d:4e:fd:9d:9c:bd:4b:72:68:59:60:07:ad:
7c:fb:1e:15:c3:48:f9:e0:6d:75:ed:20:9e:9f:38:ce:b3:6e:
ae:e8:06:e9:8d:5b:8a:1a:df:a7:0c:7f:73:ce:63:f7:3f:36:
96:31:cd:18:35:50:22:f5:57:bc:cb:cc:14:7a:99:e2:ee:4f:
82:df:07:9b:dd:31:5e:7e:99:30:71:e5:27:25:41:37:4a:0b:
56:52:40:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW9BWOwVzW7IpmIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzJiNjY5ODItNTZiMy00Nzc1LTlmNWEtOWYyYjA1YThhNDE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbWkWBJGSlg/elDdiXK+VNaTK4QPJDcIJPqp
DSj08PSzys4F4nTKODmZRaL1UnySPM+ef0D/6+sq5m27EWtMUSBtWzR2pdAPwe4P
0WcK98Ui3TH8Y/JpCt1be9LfoC79/bRPZVqBkfHgsuL8CuZRbmfbVvKfDH3XYcUx
wNVYytg2lLZwwY7EvP8Z9qZF6AohhvQ8dBhLVAzxL7LX3WCZ6/rDAgOnhfMZFlLQ
PR5tgwzJb89GgD3dcJfGCNjDh+aUleTGNC/6kqgyywnnYsdqnA0yO707nrnZJWLT
WGXx1BcZuNREgBN76Qjks723Y/oMs/q9uQWVbgQSa6NPPu3pjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC6JdT4cbKQgisdTa7mA/YNnaPJuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTEwZWRhYzYtMTIzMC0z
NTQ5LTgzMTUtZjQ4NzljNjMyNGRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRzl8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIFkEnbvhFzKbWWat4SP8nAmWs6FjTcdMl0JQEIdrPnGcRp6bpEYvDZn
bya4Xr9yWX4lnT8B9ArMCb4bxe1HtTju371GqTAFxUD16CPXdG17wn0lKTAh1cSc
M+RPlFWW1yMbDypGKGPbAhI4yiGgDXSyFlu01aWcQOxm8BessGLLMBPhDINN9q8Q
E8uBBlmfqJj16DA6AyOAeJzkdBssVxZB5Zsb8FJ+nU79nZy9S3JoWWAHrXz7HhXD
SPngbXXtIJ6fOM6zbq7oBumNW4oa36cMf3POY/c/NpYxzRg1UCL1V7zLzBR6meLu
T4LfB5vdMV5+mTBx5SclQTdKC1ZSQOo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:13:47 2026 by rpki-client