
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf58e65b-2700-3df9-8291-3a2be480f5cf.roa
File: cf58e65b-2700-3df9-8291-3a2be480f5cf.roa (raw, json)
Hash identifier: zNrzLPlhO5srK7jsmffTdps50mAqfxKNDl06IaCz4nY=
Subject key identifier: 6A:F3:FA:C2:F7:49:01:32:4C:79:71:3D:DE:2D:2F:83:CD:AA:5D:3C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BBA293756BFA76A0333B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf58e65b-2700-3df9-8291-3a2be480f5cf.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33490
IP address blocks: 73.240.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:a2:93:75:6b:fa:76:a0:33:3b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=041d92c2-d68d-47e2-86b4-3006b9a95ba9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:61:a1:7b:85:bd:7a:98:c0:36:1c:27:e4:8b:
d2:5e:de:65:35:0d:cb:8a:25:65:21:39:a2:e3:35:
aa:9f:14:3d:88:38:dc:d1:51:87:9f:1f:72:ec:f5:
94:26:d7:8f:f0:e1:4a:08:30:c7:ff:a3:cf:3e:fc:
49:14:3d:0c:b8:9a:c7:d1:af:62:cc:bc:30:3e:22:
88:38:7b:f1:0d:8c:43:01:b6:3e:3d:d5:36:dd:ff:
90:9f:0c:ac:36:83:0a:22:d6:42:02:e7:e6:da:b5:
ea:e6:b1:08:47:98:6f:47:e2:3a:14:25:8f:a8:a8:
eb:d7:68:1d:a1:6a:ec:ee:52:f2:b1:1e:38:23:06:
5f:19:8d:49:d8:89:99:9a:d0:a7:ad:d7:4b:80:f3:
8e:62:e8:1a:b7:63:f6:e4:d1:f1:38:e2:ab:f8:06:
c9:79:02:32:69:01:be:2e:ff:83:ae:c9:42:83:c1:
46:7f:15:df:34:00:bd:9a:34:b3:d8:b3:27:20:68:
a9:ab:1b:32:d9:0b:f5:17:a5:a6:d2:00:05:18:8c:
a1:ec:a9:78:21:c9:d2:fb:2a:d4:90:2f:69:88:50:
91:da:82:96:78:c4:65:95:7d:18:be:63:90:56:52:
b8:ce:37:ad:b4:5d:c5:cc:aa:2b:76:33:fb:8d:2d:
9d:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:F3:FA:C2:F7:49:01:32:4C:79:71:3D:DE:2D:2F:83:CD:AA:5D:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf58e65b-2700-3df9-8291-3a2be480f5cf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.240.254.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:db:96:de:1e:20:6f:90:b7:f2:e0:de:d9:17:c1:59:d3:b7:
df:ea:9a:fa:a0:2f:5f:8a:67:75:33:17:c9:8e:05:c3:c3:fc:
f0:14:6b:db:5a:c0:8f:23:61:18:79:be:53:d4:0d:2e:68:e3:
51:11:a7:f2:f3:52:41:b8:61:17:e6:42:2e:e5:1d:b8:88:e0:
84:41:f1:7c:38:1e:de:80:b8:b4:41:7a:de:b5:32:cc:ea:31:
2d:28:95:b6:0e:92:86:b8:0e:b1:d3:79:be:7e:6a:9f:ea:ff:
30:2b:59:0a:ea:13:e6:f7:26:a5:e1:59:63:e0:47:fc:58:63:
b8:11:16:0f:3f:e8:33:bb:c4:5c:96:dd:d3:7f:87:3b:77:bd:
42:0e:fb:6f:51:dd:b0:21:d7:c5:82:17:d6:75:f4:80:c9:8b:
da:ad:25:51:0d:ff:ba:46:80:da:c9:9a:59:bc:91:24:96:62:
46:54:c4:22:e7:46:78:3d:09:e1:fb:5e:89:6f:fc:5a:09:27:
18:99:c6:51:8c:84:fd:2c:3a:1e:2d:3d:42:b7:bc:f0:33:b0:
41:df:77:86:f5:63:d3:1a:6c:ba:62:6a:c1:6f:cf:a9:b4:04:
71:4a:80:1b:9a:26:83:53:fb:35:e1:cb:d0:e1:85:b9:2b:db:
8f:38:33:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vu6KTdWv6dqAzOwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MDQxZDkyYzItZDY4ZC00N2UyLTg2YjQtMzAwNmI5YTk1YmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwGGhe4W9epjANhwn5IvSXt5lNQ3LiiVlITmi
4zWqnxQ9iDjc0VGHnx9y7PWUJteP8OFKCDDH/6PPPvxJFD0MuJrH0a9izLwwPiKI
OHvxDYxDAbY+PdU23f+QnwysNoMKItZCAufm2rXq5rEIR5hvR+I6FCWPqKjr12gd
oWrs7lLysR44IwZfGY1J2ImZmtCnrddLgPOOYugat2P25NHxOOKr+AbJeQIyaQG+
Lv+DrslCg8FGfxXfNAC9mjSz2LMnIGipqxsy2Qv1F6Wm0gAFGIyh7Kl4IcnS+yrU
kC9piFCR2oKWeMRllX0YvmOQVlK4zjettF3FzKordjP7jS2dMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGrz+sL3SQEyTHlxPd4tL4PNql08MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y1OGU2NWItMjcwMC0z
ZGY5LTgyOTEtM2EyYmU0ODBmNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASfD+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADvblt4eIG+Qt/Lg3tkXwVnTt9/qmvqgL1+KZ3UzF8mOBcPD/PAUa9ta
wI8jYRh5vlPUDS5o41ERp/LzUkG4YRfmQi7lHbiI4IRB8Xw4Ht6AuLRBet61Mszq
MS0olbYOkoa4DrHTeb5+ap/q/zArWQrqE+b3JqXhWWPgR/xYY7gRFg8/6DO7xFyW
3dN/hzt3vUIO+29R3bAh18WCF9Z19IDJi9qtJVEN/7pGgNrJmlm8kSSWYkZUxCLn
Rng9CeH7Xolv/FoJJxiZxlGMhP0sOh4tPUK3vPAzsEHfd4b1Y9MabLpiasFvz6m0
BHFKgBuaJoNT+zXhy9Dhhbkr2484M14=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:20:09 2026 by rpki-client