
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d482c43-28cd-3bc2-8131-7a772e2a8740.roa
File: 3d482c43-28cd-3bc2-8131-7a772e2a8740.roa (raw, json)
Hash identifier: 6BiaLATlwStWWlvnGh92UHXjxJve6uSry/Qbd4N1oHk=
Subject key identifier: 00:40:38:44:7C:52:37:A9:9F:55:C1:0A:13:7C:EF:67:84:2B:6D:A5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A80DA5DF58C20AB1D8A3E1
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d482c43-28cd-3bc2-8131-7a772e2a8740.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 71.56.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:0d:a5:df:58:c2:0a:b1:d8:a3:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=2921ff61-737e-4efb-8cc3-65d44bdd75fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:cc:db:f5:0a:f6:e5:b6:02:ff:8e:b2:5d:b0:
fd:b2:9a:7d:05:8b:7a:21:f3:e5:95:2c:f3:2f:61:
89:25:de:c4:ea:ac:e1:35:eb:41:a6:c7:44:2c:58:
58:be:9c:d6:e9:63:80:37:55:c8:2b:72:b4:41:b3:
71:8e:87:74:8a:22:9a:e6:e9:95:de:a8:1d:cb:de:
2b:28:04:d9:15:15:05:8d:eb:b9:db:d4:65:e7:70:
c5:b0:a9:53:bd:27:dd:53:17:91:e1:b9:e1:41:2c:
5d:d9:b1:86:25:5a:c3:a3:c8:86:21:b5:07:19:00:
ac:a8:ff:55:bd:96:7a:26:cf:c4:68:11:e6:1f:2d:
9a:95:4e:4e:07:d1:a2:c5:18:c5:e1:2a:4a:9a:15:
76:44:17:d3:1f:3d:85:cf:d0:a1:23:65:49:de:a8:
ac:9c:64:d0:b9:21:c8:c0:a3:c8:0a:1c:21:2d:41:
98:2e:44:ad:26:ac:84:ec:f8:6a:37:a1:25:a8:8a:
5f:0f:8e:e2:e5:f2:85:21:66:39:62:39:47:1b:97:
90:03:e5:e5:bd:20:10:9c:2a:90:59:f9:5b:28:cb:
4d:6b:87:7a:ee:c3:ff:08:be:44:5e:6a:b7:a1:05:
b8:6d:47:f0:94:11:50:0d:32:74:7f:90:6b:1f:1e:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:40:38:44:7C:52:37:A9:9F:55:C1:0A:13:7C:EF:67:84:2B:6D:A5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d482c43-28cd-3bc2-8131-7a772e2a8740.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.56.20.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:fe:bd:e0:de:df:92:3b:1b:66:46:de:7b:43:3e:4e:99:83:
ef:83:8d:71:85:0c:a9:82:8c:18:9d:f0:eb:6c:ba:82:b1:f3:
b0:f4:c9:53:1a:c5:82:e8:db:6e:44:b7:59:67:80:89:c3:9f:
99:a4:3f:95:fe:fc:6a:81:e5:6a:bf:5b:3b:fd:f2:50:be:64:
53:22:b2:c0:33:35:30:df:6f:cb:e4:43:59:85:ea:43:ab:8f:
d1:61:34:6d:69:94:e1:06:28:0a:ac:24:2b:a8:d6:c4:e4:d6:
9f:59:11:a4:08:68:63:fc:db:6c:49:0d:20:02:40:26:7b:32:
65:98:58:59:cc:6e:a5:5a:b3:e1:35:58:19:58:67:19:ef:e6:
04:02:80:ea:9a:be:e3:87:97:ac:50:22:28:6e:05:f5:34:1f:
8f:8d:a4:bd:12:62:77:10:26:79:c4:90:7d:18:a8:d0:0c:80:
0b:2c:a7:34:d0:80:46:66:80:95:d9:14:53:a8:6e:ad:60:0e:
4d:2b:25:b6:b9:22:6a:1c:e2:ee:fd:62:ff:fc:5c:6c:6d:b6:
43:7a:ff:7a:8f:6a:2d:71:c5:a4:c9:56:e3:4a:62:3d:b9:60:
f3:56:53:e3:7d:ce:58:de:eb:44:2c:d8:42:17:a2:dd:cb:f0:
e3:b6:fb:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 23:45:09 2026 by rpki-client