
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa
File: bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa (raw, json)
Hash identifier: OnlYEBB+HRhN/PQCMd1S2G3YJL6+2ZjCUNWFQFZEaG8=
Subject key identifier: 43:34:29:F6:84:8E:2F:E0:6F:73:0D:FA:25:54:AB:21:C2:83:7C:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB3EFE9F9E40C02D06D6C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33662
IP address blocks: 174.170.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:3e:fe:9f:9e:40:c0:2d:06:d6:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=85123e5c-81b8-45f2-88c1-752926f8e554
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:0c:92:cb:11:06:1b:c7:20:48:23:bd:d9:a3:
64:ce:4d:24:1d:45:3a:32:3f:c0:0f:29:aa:d7:85:
3a:8c:96:af:a7:b5:b3:b5:bc:79:b8:ab:12:23:3e:
76:2b:a2:54:59:6f:b5:48:db:00:4e:2c:0f:99:ed:
a8:0a:af:09:57:59:f2:64:a9:3a:c7:6e:26:6e:a8:
21:ae:be:4b:39:f4:5f:1d:68:2a:e7:5e:3d:d5:de:
d3:22:94:b8:f7:74:03:4d:63:64:3c:e7:2c:99:09:
c6:7a:e2:fb:53:11:3f:1a:5e:e4:6c:ea:28:29:fa:
a2:de:15:2f:7a:a8:59:63:cf:91:df:2b:53:c3:3c:
3d:6a:ee:c5:fc:fd:a7:8c:71:2c:00:d9:88:76:b0:
3a:c9:13:96:f6:7d:fd:9e:f9:8f:7a:12:d1:ca:88:
c5:f9:de:a4:ce:20:61:8c:54:d1:9e:04:31:8a:b8:
5e:cf:e3:fe:01:ca:29:27:4a:0c:b3:4d:91:aa:06:
e9:81:89:fa:2f:fa:20:ec:f8:3c:a5:81:dc:6d:fd:
c3:fb:f9:84:5e:63:6a:82:08:e2:2b:0e:de:85:c8:
c7:a7:99:34:9f:8b:6e:c0:6c:1d:0e:26:35:e3:e4:
81:7a:6e:55:ef:20:40:23:83:63:d9:da:d9:e9:a4:
09:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:34:29:F6:84:8E:2F:E0:6F:73:0D:FA:25:54:AB:21:C2:83:7C:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bae2ed5b-f4b9-3d75-86a1-6ff9896a52c6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.170.120.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:34:bb:2f:3f:62:54:af:61:4c:19:38:8f:8f:88:35:ee:83:
81:52:14:83:76:78:62:ca:01:88:6c:fd:91:51:8a:34:1d:3a:
10:ac:cd:03:fe:ac:f4:6d:e6:10:c0:89:87:3e:c0:7b:ef:da:
76:e1:6f:69:73:bd:3a:13:30:5f:ed:8d:9c:ad:bb:08:4f:a3:
d4:6e:9c:a9:3e:0f:04:6b:08:d3:0a:01:38:71:76:f4:cf:e7:
22:be:6c:6e:93:73:a2:1f:f7:4f:6a:83:6a:0e:ff:c0:b9:7d:
82:74:25:5d:9f:16:8f:59:a1:c0:51:a6:0b:43:b7:6c:56:54:
dc:5f:ab:25:ba:04:62:e6:f9:8e:c4:ed:80:f0:5c:85:39:87:
09:2c:32:d3:2e:9e:e4:d6:91:79:f5:f4:c5:ac:2a:b3:95:bf:
5c:bb:9d:ea:fc:87:ed:c3:5a:9e:ce:36:a4:f3:cf:21:b9:99:
17:64:f3:1f:67:60:46:2d:c0:b0:7a:35:65:5a:6b:81:fd:0b:
37:c2:f5:e9:cf:14:ca:91:6c:c2:a2:ce:1a:b3:25:23:b5:33:
d0:e2:08:a3:f0:02:78:69:89:59:f8:52:b6:c0:a3:40:30:93:
21:6d:1a:33:03:43:1b:1a:d7:4a:9e:80:71:d6:39:f7:62:74:
0f:1e:34:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:21:34 2026 by rpki-client