
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f253009-44c3-388e-b705-561d2e187eff.roa
File: 1f253009-44c3-388e-b705-561d2e187eff.roa (raw, json)
Hash identifier: GfghQAcgDcMhWAKlyXP+ngW62GRZ7iqEIzDkqL0v918=
Subject key identifier: 2B:AB:60:1A:C7:5F:6A:A6:BA:52:D6:86:7F:69:76:3B:B3:6D:AC:71
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5C59A2F53BFD553D3EC980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f253009-44c3-388e-b705-561d2e187eff.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 73.45.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:59:a2:f5:3b:fd:55:3d:3e:c9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c21d9811-d662-4a91-b43c-30420e7f167a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:66:ec:d1:5a:91:0a:ac:5b:49:ed:7f:df:f4:
c4:03:3c:f0:1b:27:8c:de:0d:71:b8:9e:b2:db:a2:
89:ae:c9:ff:33:1b:08:1b:65:93:09:16:01:a0:c7:
62:3c:35:1f:04:e4:1a:d5:8d:95:26:09:5e:ca:a0:
d5:6c:3a:ad:ad:0c:1b:ba:eb:66:17:2b:e8:56:b9:
fd:eb:32:b0:86:9e:60:e6:e4:ff:35:13:8e:63:d7:
a5:74:34:31:36:55:5f:f4:6d:49:e5:d0:dc:b3:d8:
16:d0:f8:65:74:eb:fa:02:51:40:01:fd:f0:21:e7:
c0:c6:43:54:ea:45:ee:d2:af:86:35:64:5e:c3:8f:
50:3e:12:93:b2:0b:3b:15:97:3f:3b:df:41:4b:84:
bf:95:83:c0:00:59:9b:73:11:20:8a:a2:27:4e:b5:
dc:77:dc:83:14:98:2d:3e:3a:15:33:f4:43:04:b6:
6e:04:1e:04:5d:3a:c1:4c:8d:dd:bd:cc:41:b0:54:
61:c4:d6:94:07:13:bf:cd:a6:4d:85:63:76:4f:d7:
b4:3c:4b:cf:d1:3c:b5:0c:94:b6:3f:78:43:a0:d7:
86:83:07:b5:23:6f:c7:07:b7:85:45:a2:a4:ee:31:
bf:c2:ae:d2:d8:a3:ae:8b:5e:6e:15:f2:19:7c:de:
c8:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:AB:60:1A:C7:5F:6A:A6:BA:52:D6:86:7F:69:76:3B:B3:6D:AC:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1f253009-44c3-388e-b705-561d2e187eff.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.45.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:69:0c:5b:6a:34:7c:c1:27:82:7c:46:43:72:0f:e6:85:ca:
ba:57:f2:8f:aa:d3:10:a6:44:55:0d:8f:8a:54:da:00:c1:30:
01:06:28:ca:06:cb:46:2a:56:73:d9:7f:0e:e8:9e:7b:f5:5d:
c8:5a:f9:89:4f:ee:65:3e:aa:0e:2d:b1:9f:bb:6a:e3:60:a6:
f2:75:ec:b3:12:88:b3:cc:b1:9e:f7:f0:19:aa:b9:78:e8:d1:
ac:4b:31:4c:c2:19:d7:13:98:ce:6d:67:77:12:7c:30:57:32:
7e:5a:38:dc:4d:b7:b6:f4:e6:6c:a5:d9:d7:ae:b2:69:d2:cf:
49:b0:48:0b:77:e0:d9:67:be:e4:0c:0f:6c:73:bc:58:6e:42:
a1:46:a2:fa:76:24:08:3c:87:d5:d8:4e:45:b6:2f:31:09:b3:
df:68:0d:33:dc:fc:c6:bf:3d:6f:16:d1:70:f7:49:03:b7:46:
89:a6:dd:23:1f:5e:62:7f:12:70:e7:dd:55:75:e1:b9:51:d4:
ba:5e:c5:3f:88:86:b9:2f:e1:e1:0d:97:79:e6:3a:18:00:7c:
61:98:2f:95:9a:70:3c:19:6f:9a:94:ed:d1:e2:5b:8c:cb:7d:
5a:6e:c6:33:9d:8d:47:b7:38:db:75:48:44:75:1b:9e:81:41:
96:0c:52:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:02:42 2026 by rpki-client