
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4875bc7-612d-3049-9b50-549aca1777d2.roa
File: c4875bc7-612d-3049-9b50-549aca1777d2.roa (raw, json)
Hash identifier: bAtWGh5SqDq09KkSIbCkuJEbtdou2A+yhfTnpSqJ+kw=
Subject key identifier: 4D:CF:EE:C9:44:8D:CE:3D:54:57:DC:47:23:17:C6:C6:EA:6D:E3:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5828403F916B1ABCD978C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4875bc7-612d-3049-9b50-549aca1777d2.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 71.194.12.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:28:40:3f:91:6b:1a:bc:d9:78:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=dcfa1eec-8219-433e-aeb3-760f36623c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:37:85:52:2a:8b:6b:a5:3d:e4:02:1c:ba:69:
60:81:6d:e8:a6:d7:26:b1:9b:3f:99:46:62:8a:71:
26:59:7e:59:4a:22:2c:d1:7d:c4:57:e8:4c:26:ec:
cc:67:2d:96:bf:f2:39:15:aa:38:9d:b8:24:64:fb:
41:97:b3:6a:14:60:17:81:b0:0d:ae:a1:88:05:4e:
b7:bc:68:0a:f2:6f:21:12:8c:0f:f7:50:d3:02:6a:
89:c5:64:af:e6:56:d7:8a:3d:c2:8f:86:f0:90:2e:
1e:3c:fa:75:d4:99:0b:02:3a:7b:c6:48:b3:42:7b:
00:e1:73:f5:96:3e:20:51:a8:01:38:00:33:99:0f:
a8:76:1e:10:06:6d:7e:69:52:bc:1f:91:5d:49:8e:
82:76:75:66:a2:17:a2:a4:7d:31:6a:0e:8a:c1:9d:
04:b1:3a:48:85:c0:62:65:73:61:2c:0a:ae:51:2a:
3a:68:ae:95:23:1b:d2:3b:52:5b:a9:ae:35:61:32:
40:5f:3b:d8:56:b9:a5:2d:bd:23:5b:d9:73:d7:51:
45:69:46:f5:94:8d:80:3a:80:2e:41:f8:af:73:84:
89:be:d2:cd:69:ed:30:20:09:fa:33:69:33:18:f8:
74:f7:02:1e:0c:85:b1:9c:4f:7a:2e:0d:78:ae:05:
84:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:CF:EE:C9:44:8D:CE:3D:54:57:DC:47:23:17:C6:C6:EA:6D:E3:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c4875bc7-612d-3049-9b50-549aca1777d2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.194.12.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:52:47:67:0c:0e:2e:8c:e6:66:85:ba:78:ef:54:44:5f:64:
d3:34:91:07:17:95:f3:5b:20:3a:38:2d:a5:32:78:6a:3e:59:
de:32:f5:c1:f3:fb:4d:2c:f8:5e:bc:01:81:dc:a5:b8:ab:30:
e2:30:ae:0c:d2:49:d8:15:ee:bf:11:fb:01:45:8e:a4:3f:40:
d6:a7:3f:54:1d:17:7f:09:d2:5e:e4:b2:19:29:87:a7:a0:7a:
be:2b:59:b1:50:da:43:bd:31:c4:66:81:89:a9:a9:77:86:ec:
21:83:e1:c9:1e:c6:9f:c7:40:1a:d4:39:85:83:ae:14:6f:a9:
aa:32:e2:b7:67:f9:9c:d8:11:73:5f:28:5d:07:11:30:a6:dd:
9b:15:90:c9:87:43:32:d9:b0:78:cc:da:08:71:3d:a7:79:b7:
b1:e8:2b:df:2d:5f:87:a6:5d:35:2d:53:49:55:ce:d6:f9:26:
b8:12:41:09:c8:2e:ea:3e:58:80:c3:03:74:4c:4a:99:48:66:
a7:58:b5:75:85:2c:e6:e7:22:bd:6e:66:6f:59:28:a3:99:8d:
22:eb:40:3c:70:1e:d6:f4:b6:c5:68:80:c8:9c:3d:f5:71:83:
81:da:71:4f:c8:54:d8:43:d1:6c:27:4b:18:0e:26:ca:79:2f:
19:b4:5f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:06 2026 by rpki-client