
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e42183e8-1e17-3043-9ec3-3f3f697b4738.roa
File: e42183e8-1e17-3043-9ec3-3f3f697b4738.roa (raw, json)
Hash identifier: RspZgD/Hxf+xLJOf8/kd+tKrWtdZe/BWxAGYZoyacOU=
Subject key identifier: 0C:A8:C0:75:AC:2A:CB:16:0E:41:95:5D:24:86:CE:45:A3:E5:B7:83
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5BCB5F89B0897722AADC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e42183e8-1e17-3043-9ec3-3f3f697b4738.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 71.228.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:cb:5f:89:b0:89:77:22:aa:dc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=0b66aa39-44be-4104-a623-bba9c12d484b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:02:9f:57:df:ae:87:da:64:a8:5e:ba:2c:bc:
48:d3:0e:7d:1d:8b:e9:13:aa:9e:7e:e3:3f:b7:3f:
46:ab:8e:0d:0b:a1:07:aa:6f:80:2e:c4:45:7c:19:
81:dd:d0:b5:4a:df:09:4a:c6:2f:48:78:b3:ec:c2:
01:5c:11:f7:14:b8:00:75:f3:49:cd:f4:00:f8:02:
95:c6:61:af:c7:81:05:62:4d:50:10:16:81:89:59:
6a:24:f8:e0:1c:0b:39:f2:bf:ab:98:dc:0d:cf:82:
d5:34:2a:fc:bd:42:4d:55:e6:22:65:3f:3e:ff:b6:
5c:26:48:1d:3c:eb:d1:26:a2:fb:79:15:c7:07:49:
90:74:6c:b3:4a:6d:93:bd:52:68:f2:3a:73:ee:c7:
ae:d1:54:a4:18:ec:e7:c3:41:87:12:49:a6:f0:d7:
b3:10:26:8c:bd:17:e4:bd:66:23:16:d3:a6:af:00:
47:b7:a8:81:bf:3f:b5:21:5f:9a:e5:f9:cc:61:e5:
91:8b:63:32:fb:4f:c3:1a:5e:26:59:6b:34:62:ef:
c1:3b:0d:71:63:d8:46:e3:4b:2a:32:6e:a1:58:bd:
8e:95:1f:1f:87:dd:87:16:df:a4:60:62:28:65:d5:
15:21:5e:84:ca:a4:f5:45:66:3b:87:1c:d1:e9:48:
d6:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A8:C0:75:AC:2A:CB:16:0E:41:95:5D:24:86:CE:45:A3:E5:B7:83
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e42183e8-1e17-3043-9ec3-3f3f697b4738.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.228.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:7d:2d:ed:ac:ba:f8:18:06:a2:0a:61:96:d7:e4:61:f3:8d:
83:ed:52:13:5a:41:17:25:5d:21:db:85:3d:5c:35:b9:86:70:
1a:1d:79:46:e0:c2:8a:be:c7:0e:84:6e:ca:82:22:a0:10:ae:
6c:8e:dc:68:fd:7b:e8:a2:11:da:37:75:f7:4e:4f:62:cc:d9:
21:d3:44:ff:6b:11:42:49:37:2d:2d:b9:6d:1f:cd:9d:a5:f9:
dd:5d:d2:00:21:e8:64:93:6b:ab:90:4c:1c:3b:50:01:16:e1:
90:c3:a6:e6:a8:ea:e9:ae:eb:d1:38:c5:d0:ab:63:b3:f9:83:
36:ac:5b:20:f9:a0:73:c3:d1:c5:68:ed:d9:8b:9a:40:92:c4:
dc:8c:3c:d5:f7:86:be:23:35:72:c2:4f:24:b4:9e:b7:26:81:
e8:c8:d5:1a:bd:1a:ae:73:09:1d:72:ac:34:3a:2e:0e:b8:de:
88:7d:75:d4:2c:f0:97:e3:b6:3d:51:53:18:4b:f6:28:f0:9a:
1b:7f:af:c3:d9:1b:73:1b:94:d2:eb:96:14:eb:ff:34:9c:42:
28:a5:fb:82:2f:ad:61:e1:07:f1:f9:39:e8:66:8f:0f:2c:59:
81:8f:70:02:d3:38:90:86:54:f8:d2:7b:8f:20:2a:31:08:e4:
6f:e3:64:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:43:21 2026 by rpki-client