
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb8a4f21-e745-3e57-8152-dcfbecbdfc44.roa
File: eb8a4f21-e745-3e57-8152-dcfbecbdfc44.roa (raw, json)
Hash identifier: EtG/q2hv1Swkt7bJeYh+lBGXsyNiwQHGLs4NMcZBm38=
Subject key identifier: 4B:2F:C5:5A:CD:40:2A:3B:AD:E7:9C:1A:5A:A5:15:B4:7C:CD:E4:E3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5829A351DC258CAC805080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb8a4f21-e745-3e57-8152-dcfbecbdfc44.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 71.194.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:29:a3:51:dc:25:8c:ac:80:50:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=9fc3bf42-382d-4b34-a38d-2342b34fc262
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:e7:70:fa:60:70:ed:22:5a:7b:15:24:91:f4:
df:52:9b:63:54:3c:4f:2d:fe:23:6b:68:0f:ea:e8:
96:c5:fe:d8:26:c2:e4:ef:86:ad:0a:bf:26:fd:48:
4d:a7:e1:e9:84:ea:0f:97:fc:c4:13:7e:77:48:6a:
24:55:d7:83:66:ad:c8:f3:15:ca:1f:f5:ea:ac:b3:
5f:26:fb:78:0f:f1:2e:b6:65:e0:b5:a1:af:4f:ef:
fd:c5:47:c5:43:64:69:60:8c:46:89:92:4a:13:5a:
b4:ca:82:ed:18:2e:b4:36:cb:2e:73:76:be:b6:1e:
d0:22:2d:df:54:7d:88:c3:19:af:31:d6:df:bf:72:
ee:c5:a8:b0:0f:65:2a:70:bb:d7:1b:64:74:d0:0c:
ce:85:d3:3c:9e:3c:f5:fe:b4:69:32:cd:e2:1b:b4:
4a:0c:84:5f:57:3f:dc:0a:18:f9:e2:6b:5c:37:07:
a6:2e:6d:ae:21:01:4b:cd:74:38:22:19:45:90:1e:
72:da:ed:81:05:71:38:d5:05:a8:ca:0f:93:dc:8f:
db:e5:81:30:70:c7:05:65:8b:40:0e:1e:45:2d:11:
06:a1:21:04:ed:6e:99:40:12:ca:4a:e1:49:f6:e9:
77:08:34:10:8f:2a:72:48:c4:d8:3c:44:6a:ae:42:
ec:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:2F:C5:5A:CD:40:2A:3B:AD:E7:9C:1A:5A:A5:15:B4:7C:CD:E4:E3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/eb8a4f21-e745-3e57-8152-dcfbecbdfc44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.194.20.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
08:7a:20:b9:58:a6:d7:65:ab:d7:ce:4d:cc:73:c6:ea:ac:86:
13:66:4f:b4:cb:18:87:21:f7:84:a3:21:dc:1d:41:cd:7e:76:
41:a1:50:b0:38:01:b7:a3:19:c4:62:90:80:23:8c:ad:d2:53:
95:30:07:b8:70:ea:58:fd:b9:88:77:a1:cd:17:8e:18:92:99:
2f:59:1d:46:c4:a4:e6:c6:8f:ab:8b:bd:db:bf:ff:55:d2:74:
b9:1e:b6:6b:0b:68:80:75:77:5d:9a:c3:88:4d:c0:77:29:18:
73:be:bc:d3:ef:6a:07:02:b5:70:49:f1:bb:a3:2c:34:96:8d:
73:b6:ea:85:b1:4e:d3:aa:c0:ce:d5:38:df:e7:e4:60:ba:9f:
18:ad:22:2d:d3:05:15:14:59:21:57:d6:00:6b:40:32:1e:fa:
21:9e:30:a1:b0:95:d6:b4:bc:e4:d6:05:79:b4:83:87:52:11:
06:3b:29:2c:97:b5:c8:a1:cd:4f:d2:79:19:9f:0b:05:5d:e9:
51:d9:21:c0:1d:90:8c:11:22:ef:18:2c:fd:84:58:ae:e2:a5:
0e:91:e2:7d:a5:21:90:04:a3:aa:99:a8:0a:2f:eb:65:31:38:
9f:9b:88:70:11:70:50:71:43:84:67:2e:e3:f7:ef:fb:30:9b:
73:2a:64:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:33:43 2026 by rpki-client