
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1675150-7978-35f3-8773-d0de3cbe4d96.roa
File: e1675150-7978-35f3-8773-d0de3cbe4d96.roa (raw, json)
Hash identifier: Du7/2QdPTPf2H1OxHaeDMs1dKVYNk6SRO7N+fto0pnw=
Subject key identifier: AE:BA:97:5E:A1:C6:13:1C:27:21:45:A0:02:34:ED:71:98:17:08:E9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5D5AB8C36BE9A1E665EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1675150-7978-35f3-8773-d0de3cbe4d96.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 71.198.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:5a:b8:c3:6b:e9:a1:e6:65:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b8aeba7b-a081-4752-9092-3650e370c65b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:d4:af:ca:2d:2c:51:6b:3c:d5:45:21:88:f1:
52:44:3d:ff:b9:75:41:bd:0a:54:83:e2:aa:cb:be:
3a:5c:56:48:1e:49:ad:7d:f0:c6:de:33:a0:b7:00:
d1:56:bb:9a:06:f2:ca:d1:bb:92:c6:78:30:d2:23:
73:b9:3c:86:82:b7:f8:5e:bf:19:cf:31:88:3b:68:
eb:a1:b2:95:0f:36:4d:ac:e3:1d:a9:35:b9:0c:e8:
fc:ca:8a:b4:68:b1:6e:ea:2a:88:0d:80:a5:ab:33:
3e:a1:04:da:87:b5:14:50:c7:c7:e4:cf:40:e6:aa:
db:05:8a:e6:c3:29:0a:f4:a6:2e:e4:a7:14:ab:95:
1b:5e:b0:05:61:8e:5c:1a:7d:9f:97:a7:e8:af:7b:
76:c2:7c:a5:7d:e2:c5:78:91:b4:b6:67:e9:d9:75:
95:3f:9d:84:af:bb:4e:24:51:a9:34:68:44:09:82:
59:aa:fc:16:c1:30:83:d4:0d:1e:47:bf:e9:fc:eb:
11:45:9a:69:c8:1f:99:47:62:bf:43:cf:99:d9:17:
d1:3c:fa:94:a2:6f:8d:7e:6f:c2:ce:99:7d:9c:61:
73:6d:ed:b7:13:10:a1:45:c0:4f:5d:f0:23:3b:76:
a7:25:74:06:f6:9b:c3:e9:10:3f:b7:25:b9:83:42:
86:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:BA:97:5E:A1:C6:13:1C:27:21:45:A0:02:34:ED:71:98:17:08:E9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e1675150-7978-35f3-8773-d0de3cbe4d96.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:af:89:7b:c4:54:3f:52:3e:1c:5a:a3:42:a4:fb:3d:58:53:
60:7f:bf:06:40:8b:bd:72:24:cf:f9:32:ee:a4:3b:54:bc:05:
6b:09:10:57:44:45:12:2e:22:b4:31:ca:d8:c2:29:fc:8e:c2:
6e:17:57:0c:91:62:78:e6:84:d4:3a:f6:18:9b:b9:c6:f0:32:
84:7b:68:10:b1:30:d2:18:48:fb:45:89:a2:4b:2d:2a:d4:63:
55:0b:b0:4e:b6:f4:7d:3c:04:80:2a:2b:eb:ef:38:86:72:65:
42:90:08:70:51:03:d5:c2:d0:4a:9f:79:d6:70:41:d6:82:68:
fd:03:da:24:20:20:fb:0f:74:47:64:69:b1:84:da:aa:32:3e:
76:f0:6d:02:e5:ff:c4:18:a8:47:c3:f5:3b:f1:1c:7b:6b:80:
55:2f:9d:f5:81:9d:b7:a7:52:bd:82:04:07:0b:21:d3:d5:40:
83:a1:86:9d:ea:e2:7c:d7:cc:ae:89:e2:1b:4f:4a:59:00:08:
2f:d4:7a:62:67:5f:3a:67:06:39:66:f5:a9:b9:2e:60:0f:f4:
5d:47:7e:29:65:11:d3:a8:57:ac:b1:18:77:b3:f5:31:6b:5c:
bc:af:87:f9:aa:07:6a:cd:76:b5:65:fb:52:bb:44:11:6b:82:
3c:29:a1:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:58:10 2026 by rpki-client