
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b14da70d-b4cc-3bd0-806d-ee65311e61a7.roa
File: b14da70d-b4cc-3bd0-806d-ee65311e61a7.roa (raw, json)
Hash identifier: UJAaEXU2LWG5/0vbVfNu5N2Ul2f5FiSzv2Ybze/VrSc=
Subject key identifier: 99:92:32:4A:E1:2D:60:67:67:89:D7:0D:79:D8:98:94:34:68:E3:7B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5A8B64D04F4605FFEB2C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b14da70d-b4cc-3bd0-806d-ee65311e61a7.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 174.167.16.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:8b:64:d0:4f:46:05:ff:eb:2c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=8c7528d0-cdd1-459b-a208-f66d4404d9ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:0d:35:40:87:29:47:a0:78:8d:71:5f:6d:b5:
e7:4e:b0:94:7d:ac:b8:56:b3:bc:4e:80:f4:b7:b3:
a0:c9:78:f5:13:13:bd:d2:08:4e:57:d4:1c:f6:03:
3f:ed:28:bf:f8:5c:c3:7f:db:4d:39:40:25:2b:0c:
e5:72:d9:93:7c:40:58:4b:9d:38:ee:85:a5:a8:e0:
85:f0:6d:60:69:e1:3e:e3:44:a4:77:0a:97:02:8a:
6b:62:b1:3d:46:6c:c5:90:10:5a:ec:7f:19:71:17:
5b:93:3d:1e:5f:c3:82:bd:d2:70:b8:5b:9e:b4:12:
4c:96:6d:54:32:8c:86:6b:0d:55:c8:e1:8a:e7:fd:
2f:b3:71:b2:2a:11:55:3b:d5:95:77:39:7e:7f:6e:
9b:22:69:84:d9:be:06:cb:2a:a0:7c:bc:b8:79:0e:
b9:9d:8f:3a:08:6d:1f:19:de:2b:f3:1d:28:f0:6b:
6a:2f:32:33:8c:e8:e6:33:6b:a3:07:c5:5f:0a:55:
1f:e0:50:a6:d3:db:74:f4:8c:56:e6:93:fd:d5:8e:
19:18:46:d0:0d:f0:7b:ff:a5:ea:f0:7d:06:61:a4:
ea:fd:28:94:cd:d5:70:8a:83:22:3a:7b:61:73:69:
c6:24:84:bc:45:cb:8f:18:b3:f6:a9:c7:91:fe:42:
3a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:92:32:4A:E1:2D:60:67:67:89:D7:0D:79:D8:98:94:34:68:E3:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b14da70d-b4cc-3bd0-806d-ee65311e61a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.167.16.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:56:74:b8:8a:db:71:80:42:f8:7d:14:48:62:7d:2c:d2:e2:
80:ca:06:b5:63:60:55:ed:04:36:96:30:e0:4c:8f:ca:8e:89:
2a:aa:20:dd:28:b1:b0:65:76:66:7c:fe:50:e7:c6:75:e5:3f:
03:04:24:e4:7b:7a:36:f6:49:36:3d:2a:cd:b8:07:1b:66:34:
65:84:9e:2d:e1:af:2f:ef:91:1a:ac:c0:89:69:56:73:31:78:
70:63:17:dc:8e:06:ff:c8:6d:6b:01:52:1a:5a:a4:15:82:76:
67:c4:fc:bb:52:83:b1:ed:65:27:a2:9f:94:86:f3:34:31:cd:
92:b2:87:b5:d6:d2:80:0e:e6:62:3a:23:b2:8b:cb:36:c6:fa:
ab:49:d7:0d:66:dd:93:f7:88:43:6b:f3:d5:19:92:fb:ff:76:
6d:6d:31:fd:f0:64:45:41:b9:10:1c:d0:e2:b2:a7:5d:c2:08:
80:68:5d:68:ef:4d:d7:8e:5b:25:95:ad:2e:44:ba:8e:ed:df:
ab:6b:00:10:58:4d:e3:0c:d0:e0:6e:9d:19:41:33:c6:c1:e0:
17:3e:c1:98:3b:a3:98:0d:1e:99:0f:d8:b3:12:04:14:87:ab:
fd:6e:1e:fa:50:11:b3:7a:2d:d1:80:07:96:7d:a8:a1:de:af:
46:4f:5a:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWotk0E9GBf/rLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OGM3NTI4ZDAtY2RkMS00NTliLWEyMDgtZjY2ZDQ0MDRkOWJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQ01QIcpR6B4jXFfbbXnTrCUfay4VrO8ToD0
t7OgyXj1ExO90ghOV9Qc9gM/7Si/+FzDf9tNOUAlKwzlctmTfEBYS5047oWlqOCF
8G1gaeE+40SkdwqXAoprYrE9RmzFkBBa7H8ZcRdbkz0eX8OCvdJwuFuetBJMlm1U
MoyGaw1VyOGK5/0vs3GyKhFVO9WVdzl+f26bImmE2b4GyyqgfLy4eQ65nY86CG0f
Gd4r8x0o8GtqLzIzjOjmM2ujB8VfClUf4FCm09t09IxW5pP91Y4ZGEbQDfB7/6Xq
8H0GYaTq/SiUzdVwioMiOnthc2nGJIS8RcuPGLP2qceR/kI67wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmSMkrhLWBnZ4nXDXnYmJQ0aON7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjE0ZGE3MGQtYjRjYy0z
YmQwLTgwNmQtZWU2NTMxMWU2MWE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrqcQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFhWdLiK23GAQvh9FEhifSzS4oDKBrVjYFXtBDaWMOBMj8qOiSqqIN0o
sbBldmZ8/lDnxnXlPwMEJOR7ejb2STY9Ks24BxtmNGWEni3hry/vkRqswIlpVnMx
eHBjF9yOBv/IbWsBUhpapBWCdmfE/LtSg7HtZSein5SG8zQxzZKyh7XW0oAO5mI6
I7KLyzbG+qtJ1w1m3ZP3iENr89UZkvv/dm1tMf3wZEVBuRAc0OKyp13CCIBoXWjv
TdeOWyWVrS5Euo7t36trABBYTeMM0OBunRlBM8bB4Bc+wZg7o5gNHpkP2LMSBBSH
q/1uHvpQEbN6LdGAB5Z9qKHer0ZPWmk=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:31:27 2026 by rpki-client