
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdfe9e52-feda-3424-a5f0-a273e551761c.roa
File: fdfe9e52-feda-3424-a5f0-a273e551761c.roa (raw, json)
Hash identifier: /87hXAzGXRDcQdxXTHtT5NxhbWmVGJot7mbgLTpy9iQ=
Subject key identifier: A3:4E:4A:AC:12:E5:7A:90:25:A7:03:B5:0F:6D:03:10:1C:67:7E:AD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE8622C1531081AC5B672B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdfe9e52-feda-3424-a5f0-a273e551761c.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 22258
IP address blocks: 71.195.128.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:86:22:c1:53:10:81:ac:5b:67:2b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=5dc38e55-beeb-4476-be69-b9f0cfef6fe0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:4e:f7:d1:1f:11:1a:2c:03:eb:77:2a:2b:7b:
97:68:67:da:8c:1e:61:bd:fa:3c:59:69:a1:23:72:
a9:03:0c:97:95:9f:61:c6:92:61:90:17:d4:95:60:
70:d0:72:25:03:2a:31:78:71:a7:a1:62:34:a0:6e:
79:3d:7b:9d:24:9d:95:3a:ec:85:85:d3:ea:cf:7d:
bd:26:dc:c5:65:75:15:ee:44:54:97:88:d8:fc:7a:
f9:73:97:12:4c:a3:00:3e:71:d0:d4:a5:f4:37:71:
05:a4:52:4c:f1:2e:b5:1c:39:c7:d2:f3:19:5b:aa:
ad:76:84:77:05:6a:4b:ef:fc:94:4e:2c:97:6b:e3:
98:c8:a7:d6:62:66:09:24:82:20:55:28:67:fe:c7:
de:c4:49:62:51:b1:39:cc:79:b9:7c:1e:95:5e:15:
eb:dc:ef:d7:29:12:80:64:13:32:06:88:a8:30:6d:
15:2d:36:00:dc:24:b7:f4:2f:b9:8e:8c:9d:0a:42:
09:53:33:f3:56:4f:fb:a5:ef:87:6e:c0:79:e2:9c:
3f:a0:5e:63:33:e8:78:21:3a:5b:c0:c9:d7:9f:eb:
3c:3c:6a:1d:ce:84:07:7e:e5:16:94:24:7d:a1:8e:
1a:f6:3b:87:bf:f4:65:c8:fa:9c:47:19:7a:a8:97:
73:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:4E:4A:AC:12:E5:7A:90:25:A7:03:B5:0F:6D:03:10:1C:67:7E:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdfe9e52-feda-3424-a5f0-a273e551761c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.195.128.0/19
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:74:f2:19:bc:ec:d7:11:0c:e6:cb:c2:63:7e:32:92:4b:c0:
62:c1:df:53:33:32:78:9f:f1:67:52:02:9b:c6:40:10:10:bc:
26:c8:ce:87:22:6f:5b:7f:dd:7f:f9:2e:ca:15:81:b1:d0:be:
b0:53:16:01:98:e1:73:77:b0:28:66:19:42:f1:a2:54:dd:4b:
f9:2a:38:d1:84:d9:1a:8c:e5:9e:e5:3f:de:57:1c:ff:e1:93:
e5:81:7a:8a:d8:6d:5e:aa:14:be:d8:7c:dd:ad:79:bf:58:50:
26:be:0e:f5:03:e3:d3:6a:81:48:50:3b:e3:60:73:21:f9:df:
10:7a:f7:86:83:81:34:d5:9a:04:80:19:38:58:98:b2:9d:88:
47:9d:67:5a:79:1e:d6:90:ef:dc:d3:e1:10:aa:b2:45:f4:99:
2f:a4:57:46:53:e3:89:f6:69:9a:43:79:de:49:91:06:00:c5:
db:f4:18:fa:f8:42:b0:65:b7:07:34:6b:65:ab:1f:9b:ce:49:
67:d9:26:00:7f:ea:d5:13:d1:e9:5f:78:ce:f8:ba:a2:d4:1a:
30:64:c9:1f:d1:00:38:23:5a:a5:f8:fe:62:87:51:49:a7:07:
62:58:00:8b:ab:cf:c3:a5:e9:47:0d:71:3a:1a:64:ba:40:a8:
a1:c3:25:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:49:03 2026 by rpki-client