
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c00fdd-b057-3005-967a-6f0601783d47.roa
File: 21c00fdd-b057-3005-967a-6f0601783d47.roa (raw, json)
Hash identifier: biGCHihzY2xXDEoo0DQwnhpng17vahLume+C+hAw8ng=
Subject key identifier: D6:90:40:24:BE:25:F6:33:23:AF:CC:2F:5E:56:10:AA:41:12:12:BE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119D3FDC8A9B6942696AD3E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c00fdd-b057-3005-967a-6f0601783d47.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 73.29.124.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:3f:dc:8a:9b:69:42:69:6a:d3:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=1c40a53f-d608-4245-894e-954d72d9d411
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9c:5a:8c:cb:c3:90:5c:32:99:fa:b6:18:0c:
1f:58:fe:61:a0:09:f5:38:66:99:b2:f8:73:eb:ae:
f9:eb:b8:2b:63:1a:4b:d3:6f:8c:69:7e:8f:be:b3:
78:b9:76:a4:55:c8:33:2d:e3:2a:5b:04:cc:69:5d:
60:e0:15:5e:77:99:e4:90:0d:1c:01:e2:38:6a:ab:
30:5d:58:4e:61:0e:d7:82:05:b2:61:c4:23:1f:fc:
29:b3:e8:9d:d8:b1:95:a8:85:64:b5:ab:d6:71:81:
b9:bd:a4:41:56:f3:95:ff:5a:28:b5:59:10:8c:7b:
09:5e:00:8b:fe:a3:4b:75:54:06:5c:d6:49:57:38:
57:7e:36:00:5d:0e:9e:af:47:0c:5e:9b:d8:5b:b4:
53:35:c4:2d:ba:38:45:26:82:b4:78:c6:9f:01:6c:
c2:a6:b1:b1:e1:84:50:fe:a4:67:18:10:e9:01:d4:
62:f7:09:89:c5:1b:b3:f2:08:62:80:12:7a:6f:7d:
8a:aa:a8:86:b5:4a:cf:74:0a:02:50:10:42:65:16:
a2:c4:43:72:b9:8d:38:62:62:4d:2b:5d:cc:98:31:
7d:8b:10:de:b7:d9:75:2d:a1:a7:ae:a0:f4:c0:88:
1a:6d:bf:22:c8:9d:a2:56:4d:1d:95:b2:63:80:66:
9a:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:90:40:24:BE:25:F6:33:23:AF:CC:2F:5E:56:10:AA:41:12:12:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c00fdd-b057-3005-967a-6f0601783d47.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.29.124.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:f0:1b:71:a9:4c:9b:45:fa:2a:b7:79:4d:52:13:b0:31:4c:
51:9d:0e:b5:b0:33:59:7b:78:fa:1f:29:64:41:38:70:5e:8e:
4c:cc:8d:80:09:c9:e9:7c:07:f7:36:ef:a1:d5:c9:19:3c:0c:
6d:47:c7:c0:cf:a7:a4:ff:55:01:cd:8d:c4:bd:a6:9c:a3:19:
c1:cd:f0:0a:f6:4b:f6:52:09:a0:b5:83:67:3c:28:2c:c3:72:
31:5d:a2:a8:64:84:fd:09:8b:c8:85:2e:c5:93:ea:5b:cd:e5:
ed:4f:53:63:e2:74:68:46:45:da:49:1f:ce:04:15:4b:ff:48:
c5:15:9f:48:72:3a:bf:43:2d:07:92:e0:81:bc:4a:5c:3c:71:
46:31:64:bd:5a:35:19:54:45:07:df:7e:72:32:0d:e9:73:0e:
a4:df:8c:c1:55:63:ae:36:15:5a:a1:f6:05:67:42:d3:2e:5c:
60:be:73:56:f5:01:c3:a4:82:3e:46:d6:82:8c:53:8c:df:80:
db:ba:86:65:a0:e0:c0:d5:fd:a1:2c:9e:c7:26:0b:bc:ef:30:
43:50:e4:07:b0:b4:c0:07:68:4d:ac:6a:45:49:fe:f3:8d:2a:
cc:c4:28:9a:31:b0:e5:c2:fd:aa:bf:91:bd:2e:60:4a:72:8d:
d4:b3:b8:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 19:01:54 2026 by rpki-client