
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2924fef7-08ab-35d7-a2b4-2b3188ac658f.roa
File: 2924fef7-08ab-35d7-a2b4-2b3188ac658f.roa (raw, json)
Hash identifier: /Vgw+urwZArP+u9wC+RRG7paI0WAswhT7T652D9M9sA=
Subject key identifier: 48:B0:D6:A6:AE:7D:01:84:F7:11:01:3D:EB:A5:71:C3:5A:B7:ED:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F11A041A7E0551AEF806E7A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2924fef7-08ab-35d7-a2b4-2b3188ac658f.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 71.198.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a0:41:a7:e0:55:1a:ef:80:6e:7a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=1e5d0ccb-3227-4dac-a62f-2a71fd9708b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:49:dc:93:c6:3a:46:0d:1c:8d:2b:a1:90:19:
87:ab:47:56:7e:99:15:19:77:6b:56:aa:94:c5:75:
dd:11:9e:4f:a9:22:50:5d:c5:a2:5d:69:c5:12:e0:
39:0a:69:a3:58:d8:12:8b:9c:40:3f:5b:1a:ec:25:
e4:61:3b:af:8f:66:56:95:85:4a:03:c4:f3:08:0a:
69:1d:e1:f4:cb:00:f2:fc:8a:eb:0d:91:1f:f3:9e:
bf:2d:66:f3:83:8c:97:bb:b2:f5:fc:4a:7c:32:71:
6d:15:54:33:77:02:b0:67:ce:e2:9a:b6:6f:dd:b1:
50:ab:07:2b:22:d4:3e:10:3b:6b:a6:50:aa:7b:15:
97:28:93:91:e5:cb:c8:e1:75:f2:a1:91:68:f8:af:
db:5f:9e:b0:72:82:72:fc:c5:e8:46:9e:cd:a5:8e:
b3:40:85:27:b7:e9:36:fd:57:dd:5c:91:ab:48:04:
07:e3:8c:15:e5:7c:65:3c:d3:24:9a:4f:cb:cd:00:
9b:3d:cb:45:97:0d:30:1a:ce:75:f2:9d:1d:cf:5e:
fa:b7:99:fd:b5:0c:b0:48:82:6d:97:b2:b1:f2:71:
e5:4c:bb:84:78:90:e6:d1:e7:96:47:49:29:16:02:
40:46:f0:c5:a6:d2:0f:6f:ce:a2:3d:e3:8c:e5:2a:
4b:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:B0:D6:A6:AE:7D:01:84:F7:11:01:3D:EB:A5:71:C3:5A:B7:ED:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2924fef7-08ab-35d7-a2b4-2b3188ac658f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.198.114.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:2e:f4:10:94:1d:4f:14:f8:04:f2:25:4e:92:e7:02:c8:64:
41:eb:d9:7b:dd:60:03:f9:98:7b:9d:a5:ff:7f:e4:18:dc:4e:
28:7b:0b:27:e3:5a:45:87:94:69:09:9a:1b:27:c2:e2:53:01:
b4:b8:72:d2:6e:b9:32:4f:3b:cf:05:7f:67:fa:55:e1:92:3f:
0f:58:eb:97:9e:fe:3b:2d:7a:77:f9:63:87:89:e3:f4:7a:c7:
bc:73:75:33:d4:e4:91:9a:18:29:a7:9b:08:fe:4b:8c:ab:6f:
7b:14:87:d7:08:19:79:32:68:d0:00:30:73:e0:74:2c:33:04:
c6:82:cf:1d:51:f3:53:cc:bf:93:57:9c:64:fd:94:5c:12:53:
5e:83:72:2b:15:6c:50:d6:65:a4:9b:42:94:24:8e:84:74:83:
b1:94:f8:a4:48:25:82:2a:13:f2:62:f8:22:96:b4:d0:c1:92:
73:e3:2a:73:13:1a:8b:dd:f8:b6:ed:ba:a8:ca:34:90:7c:71:
d2:4f:0a:36:f5:0e:ed:49:39:ee:a3:87:37:44:01:88:4e:3d:
2c:14:1b:33:21:ee:7a:25:d4:93:0c:8a:66:b9:cb:9a:06:1d:
74:ca:fe:72:b2:3d:db:62:e5:a8:ce:41:5b:9e:90:c9:6d:7a:
3e:0d:b6:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 17:10:48 2026 by rpki-client