
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d3de59-4952-32ba-9798-e5cfc1d1a510.roa
File: e3d3de59-4952-32ba-9798-e5cfc1d1a510.roa (raw, json)
Hash identifier: SAAJaqtwY80sv/yX6rN8QdK18mDHHA6bFYzfPqdIouM=
Subject key identifier: 72:A9:E4:C5:05:81:B0:D5:C8:98:03:D9:89:29:A0:D4:F9:18:BA:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A80D29BF8865E868E62B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d3de59-4952-32ba-9798-e5cfc1d1a510.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 71.207.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:0d:29:bf:88:65:e8:68:e6:2b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=9676da82-74f4-43bc-83b9-aa8e32a328ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:dc:a9:f3:24:8e:8c:8b:4e:38:9a:08:d8:52:
25:89:ad:f4:b0:e3:46:80:9b:0a:43:2f:eb:3e:9c:
c7:5b:7d:ba:22:4f:47:64:23:92:2d:e7:5a:19:95:
02:eb:06:d1:67:48:e6:e9:db:c1:64:70:08:ad:ce:
ba:b0:17:d8:82:bd:45:97:d1:46:45:4a:e3:a5:6c:
b3:c2:6b:f5:a8:a2:10:e9:1c:4d:2a:d7:5b:42:02:
82:a2:0f:0d:7d:34:83:c7:88:da:76:c8:a7:31:ed:
02:54:6c:eb:47:25:a1:ff:12:27:62:4d:65:30:43:
a4:82:c5:aa:e0:b2:76:41:86:46:7c:02:eb:df:6c:
0f:b7:c5:4e:5b:84:f8:db:c3:22:46:e9:af:8a:6e:
77:fd:13:5e:c7:b0:36:5f:55:84:00:43:ba:f4:a6:
a1:c1:e5:2a:b4:f4:de:8b:9a:46:6e:09:d0:98:96:
09:ca:c1:c8:b1:87:3f:49:8d:60:28:e2:24:f3:c3:
b6:d6:b1:03:62:e5:ed:c1:40:65:cb:20:f8:9e:9c:
a1:cf:fd:e8:23:fa:29:8e:68:95:7e:35:29:4c:36:
8e:67:4e:69:7e:5c:43:47:c0:de:28:42:40:d5:fa:
8c:4e:6c:0c:d9:d1:be:98:33:5d:f3:34:35:ba:39:
38:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:E4:C5:05:81:B0:D5:C8:98:03:D9:89:29:A0:D4:F9:18:BA:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3d3de59-4952-32ba-9798-e5cfc1d1a510.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.207.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:57:c7:12:20:ff:e2:4a:06:ff:4e:36:08:7d:88:44:73:12:
ec:39:2c:6a:5d:51:cc:30:65:8c:bf:31:fb:d8:dc:16:90:8a:
c3:cb:bf:70:5b:c9:cf:b5:01:21:9b:2d:cf:f0:9a:f4:b2:3b:
04:7e:4d:67:24:8f:77:86:44:7f:dd:92:82:b3:2f:75:a3:51:
99:b4:18:ed:56:37:a2:5d:b9:32:b6:83:e6:27:66:6e:b9:79:
3a:bb:77:19:30:7b:21:d5:c2:63:3a:d6:ec:85:70:38:0b:ac:
b4:93:4e:fc:49:93:f5:59:4d:78:d0:54:0a:39:8e:b3:7c:20:
2d:4b:99:56:dc:27:ed:59:a3:e2:e2:a7:4c:49:6e:ad:3f:5e:
e3:34:fa:b5:84:9e:8b:1a:67:83:43:d2:49:41:38:34:97:4c:
64:90:18:20:d2:d3:0a:43:8a:e2:02:28:d6:67:ac:8f:5c:4e:
7b:81:10:ff:83:61:7c:8a:c9:87:00:ed:32:a5:ae:d2:f8:e2:
3a:ef:4e:07:41:00:82:cf:e4:07:28:13:d9:72:23:40:69:ce:
84:e1:fd:88:6a:1c:d5:5a:68:4f:11:00:91:fc:3e:5e:71:19:
d2:49:fe:40:57:8c:f5:d8:71:fb:25:d9:e9:40:b6:6e:42:83:
a9:5e:8a:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 12:58:58 2026 by rpki-client