
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb99f08-9c0e-3b6a-b054-ec4002d21405.roa
File: ceb99f08-9c0e-3b6a-b054-ec4002d21405.roa (raw, json)
Hash identifier: TbKVX5ZWZSARjM51qVVUYMXM2BQfZ83pdJznAi8DjTc=
Subject key identifier: B0:9F:DF:59:A3:E3:0C:1F:E4:AD:1F:FE:CB:63:53:57:FD:82:70:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D83CAB7819EE89020DCF519C8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb99f08-9c0e-3b6a-b054-ec4002d21405.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 33655
IP address blocks: 74.95.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:b7:81:9e:e8:90:20:dc:f5:19:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=2ed4c133-476f-4c9f-a3da-0ab7342192be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:b8:99:e6:03:fc:9f:71:00:62:79:71:34:94:
71:43:ea:42:26:99:b7:d9:19:0d:4a:2a:f3:5a:15:
98:07:18:c2:33:b3:5d:db:26:ff:4a:eb:32:76:b4:
ca:27:d8:68:61:a3:c5:24:6d:e7:c9:ee:96:95:58:
3a:70:63:2d:58:7b:af:81:d7:00:6d:16:cd:fc:df:
7a:cd:f2:69:2e:0d:e9:3c:3d:a1:21:f8:b9:5e:b3:
bc:77:1c:1b:35:30:7c:86:31:c0:31:87:99:fd:6d:
26:a4:f9:e1:e2:06:ad:3e:ee:71:6c:ce:33:28:ab:
b8:e3:2c:f8:49:9a:ec:61:80:bb:75:8e:ad:87:10:
fa:08:57:5c:53:48:3e:85:af:da:48:ad:4a:3d:ba:
91:81:a2:39:7f:cc:65:49:d1:ad:6d:37:57:af:24:
0f:e6:08:1d:c1:5e:52:ff:c5:f4:a5:28:88:32:5d:
9a:65:5b:b6:f1:0c:36:de:74:de:a6:86:b8:a7:25:
3f:da:a7:44:23:f6:dd:86:56:ad:b5:d2:c6:fe:d1:
25:8e:8b:9f:de:b9:9c:df:a4:02:9d:34:fe:1b:8f:
e9:60:2c:b3:1a:45:63:64:34:f8:47:e8:14:13:75:
55:e7:54:36:56:e7:8c:12:c5:c6:21:89:90:b1:ec:
f3:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:9F:DF:59:A3:E3:0C:1F:E4:AD:1F:FE:CB:63:53:57:FD:82:70:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ceb99f08-9c0e-3b6a-b054-ec4002d21405.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
74.95.110.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:91:d1:bf:6a:26:73:82:aa:2d:4f:c6:44:90:4e:4f:7c:63:
20:bb:49:be:f8:da:3f:f6:ed:32:aa:87:79:a9:60:b2:4f:0b:
ff:67:94:fd:91:93:b2:d2:5f:f3:65:80:89:5f:23:41:f4:35:
9b:86:c5:ba:2b:fb:d6:e1:fa:82:4d:e1:4e:5a:a6:23:59:16:
82:ff:1a:24:72:e9:50:aa:e8:28:07:2d:53:13:81:b4:91:4e:
45:c1:b0:f9:a4:ed:5c:24:53:61:d8:ee:1f:d3:44:40:32:10:
f7:cb:e4:fa:d9:06:a6:f4:e9:cb:05:5d:a6:e1:a8:8d:31:c5:
53:56:d0:d6:cc:31:99:fe:70:f5:b3:ab:95:70:12:bf:19:23:
af:ab:3f:a4:ea:a8:17:7f:75:8d:b7:14:d0:4e:c2:4a:9e:b5:
95:8d:07:6e:44:49:ec:3d:33:81:32:7b:e7:8c:96:4a:39:b7:
22:44:b4:9a:82:c6:b1:9f:11:bd:88:02:26:74:6a:ae:bb:a8:
81:ce:8b:7e:36:62:8e:85:c7:d7:4b:2a:d1:83:9c:fe:22:ca:
93:31:9d:df:d7:00:2b:94:0d:4b:d5:93:28:4a:a7:5f:fe:71:
e3:78:bc:78:c7:65:d6:11:07:95:e0:67:ea:e6:df:e7:64:c4:
ca:26:64:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2DyreBnuiQINz1GcgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
MmVkNGMxMzMtNDc2Zi00YzlmLWEzZGEtMGFiNzM0MjE5MmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07iZ5gP8n3EAYnlxNJRxQ+pCJpm32RkNSirz
WhWYBxjCM7Nd2yb/SusydrTKJ9hoYaPFJG3nye6WlVg6cGMtWHuvgdcAbRbN/N96
zfJpLg3pPD2hIfi5XrO8dxwbNTB8hjHAMYeZ/W0mpPnh4gatPu5xbM4zKKu44yz4
SZrsYYC7dY6thxD6CFdcU0g+ha/aSK1KPbqRgaI5f8xlSdGtbTdXryQP5ggdwV5S
/8X0pSiIMl2aZVu28Qw23nTepoa4pyU/2qdEI/bdhlattdLG/tEljouf3rmc36QC
nTT+G4/pYCyzGkVjZDT4R+gUE3VV51Q2VueMEsXGIYmQsezzwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLCf31mj4wwf5K0f/stjU1f9gnCsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2ViOTlmMDgtOWMwZS0z
YjZhLWIwNTQtZWM0MDAyZDIxNDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASl9uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFGR0b9qJnOCqi1PxkSQTk98YyC7Sb742j/27TKqh3mpYLJPC/9nlP2R
k7LSX/NlgIlfI0H0NZuGxbor+9bh+oJN4U5apiNZFoL/GiRy6VCq6CgHLVMTgbSR
TkXBsPmk7VwkU2HY7h/TREAyEPfL5PrZBqb06csFXabhqI0xxVNW0NbMMZn+cPWz
q5VwEr8ZI6+rP6TqqBd/dY23FNBOwkqetZWNB25ESew9M4Eye+eMlko5tyJEtJqC
xrGfEb2IAiZ0aq67qIHOi342Yo6Fx9dLKtGDnP4iypMxnd/XACuUDUvVkyhKp1/+
ceN4vHjHZdYRB5XgZ+rm3+dkxMomZA8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:36 2026 by rpki-client