
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/214b06a0-101d-3445-bf34-dc8030fac555.roa
File: 214b06a0-101d-3445-bf34-dc8030fac555.roa (raw, json)
Hash identifier: yqaypC0U42y4L4rprdHkVKgtu1S1odNQzWS7RsMpTko=
Subject key identifier: 27:77:B4:59:CE:BE:CD:F7:80:E1:F9:B4:03:C7:CD:DE:3C:E5:86:0F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57C48D9339AFC931AFC1C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/214b06a0-101d-3445-bf34-dc8030fac555.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 73.30.112.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:c4:8d:93:39:af:c9:31:af:c1:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=85aa07ce-0f11-4bdf-b2ce-060210f46fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:d9:2c:c7:05:ba:54:31:21:f6:13:19:57:82:
46:bc:2e:04:e8:e9:52:9c:e7:b8:05:ea:2c:32:e4:
56:90:2a:98:46:37:4f:3f:7f:1a:12:09:4e:6c:8c:
de:60:89:78:40:1f:5c:f7:25:ff:61:cf:6f:25:36:
e4:35:37:83:cb:52:6f:1c:d8:e8:63:0e:7e:4a:36:
60:9a:19:2d:5b:be:ed:53:c9:ef:d8:86:29:6f:7d:
3b:69:00:4a:6e:67:0e:1f:4a:89:8d:16:65:8d:40:
f1:21:96:c4:eb:e3:c4:1d:99:cd:ea:7b:07:6f:ed:
87:79:f1:f2:89:fb:6a:74:e8:70:78:78:b0:c3:ab:
0a:af:d0:30:71:09:be:0d:d8:a1:cb:ed:5d:54:55:
35:cb:62:b4:34:62:8b:0f:60:b0:bf:11:f9:1b:d5:
ae:50:e6:3c:cf:2e:f7:53:61:22:df:e3:59:d3:27:
1a:8e:8b:e0:aa:14:7f:f7:1d:72:6d:e1:40:6a:34:
96:1c:eb:9c:f2:72:8d:93:f5:e8:e6:9c:bd:41:b4:
bb:52:af:41:64:4d:c9:ea:73:cc:7b:be:07:3c:63:
f7:b9:8c:58:c1:62:05:13:ac:5a:29:4e:df:a2:c4:
b5:40:01:2a:d2:90:3e:8a:98:2d:89:18:ae:ff:b6:
76:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:77:B4:59:CE:BE:CD:F7:80:E1:F9:B4:03:C7:CD:DE:3C:E5:86:0F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/214b06a0-101d-3445-bf34-dc8030fac555.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.30.112.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:74:60:af:f8:f5:e3:3d:8a:69:39:52:29:e3:ac:1b:d2:86:
36:85:90:26:b0:00:5d:3b:5b:c5:be:64:ad:ba:b4:8b:98:63:
e9:24:cf:37:63:a9:fa:bd:80:7b:31:7d:1c:5e:ff:a9:de:c9:
21:4f:42:03:1f:36:d8:0a:65:f3:e1:57:22:46:ec:5c:a9:6b:
dd:a5:73:c6:5c:ba:05:3d:59:e0:77:48:d1:bb:4b:c7:32:e4:
36:24:25:5c:70:cd:b9:20:34:8b:fb:16:60:24:9c:e6:fe:5b:
15:9a:6c:db:77:0c:5c:68:24:1b:9a:ae:e1:0a:f3:76:a8:61:
a0:a2:4c:d2:31:45:dc:fe:df:e3:2a:ff:ea:9c:31:5c:1b:de:
91:69:63:9a:af:0b:93:be:7b:f9:77:1a:e7:df:65:67:7d:cc:
f0:d2:56:08:23:3c:9a:4d:8b:95:65:86:0b:39:c2:fc:aa:47:
aa:b9:4e:cc:79:c1:83:8a:68:7f:62:4d:fc:0a:46:04:b0:45:
3b:86:a9:76:1a:cc:d6:ea:e5:94:6e:d6:ce:ba:69:da:e2:78:
a4:8c:52:6d:b8:e5:9c:79:f3:e6:e0:46:1b:aa:31:d0:61:38:
f1:a7:a5:79:8e:94:77:17:0d:da:83:5d:97:1d:23:0c:7f:92:
b6:ce:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:33:23 2026 by rpki-client