
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa
File: 2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa (raw, json)
Hash identifier: xDe4wvbBNS2E5Gs0o0355JqbAm51OVhXU1JAlTRIbV8=
Subject key identifier: 09:60:81:24:2C:03:70:26:EF:5D:72:46:B8:4A:5A:32:A5:DA:EC:8F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE585EEEF0980B5FAEF83300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 73.44.10.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:5e:ee:f0:98:0b:5f:ae:f8:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=47d7a8d4-f1bf-407a-a6aa-d11f8ba4d1ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:11:1e:54:64:b5:a1:45:23:a7:70:28:be:a6:
9d:3c:5a:83:4e:69:2c:28:a5:20:61:a5:d6:58:ac:
ef:69:b2:76:64:c4:fc:5b:75:b6:a8:03:8f:6a:19:
98:56:6e:00:39:d6:72:fb:5b:85:04:72:5e:40:fd:
5f:de:6a:0f:34:f0:d0:90:3c:13:bb:6b:d5:20:84:
ac:17:08:65:3b:c2:92:0a:61:01:ec:64:27:77:66:
da:80:40:22:5f:f4:32:67:f6:5b:a3:43:d4:3f:04:
e7:63:a9:42:ec:af:27:64:89:0f:c1:ff:2d:5a:77:
9a:a1:2a:fd:63:ed:b8:86:73:ad:87:07:c4:b2:a6:
e4:81:fb:cc:a8:9b:7a:ee:60:89:15:3d:27:3b:18:
7f:89:1b:77:7f:73:ae:6b:1a:a1:dc:36:e5:78:a0:
7a:85:b9:f5:d7:c4:0c:27:c0:50:93:89:24:e1:b0:
2a:db:ad:63:6d:63:8b:ce:1c:b6:f2:77:c5:50:55:
aa:81:90:d7:e1:2b:f5:3e:2c:3e:90:46:09:e2:47:
18:51:10:a1:7f:d9:8f:9f:ad:ba:1d:77:c8:d5:e8:
b7:66:31:ce:9e:75:f2:e3:c1:99:e0:ad:08:37:cb:
ba:be:ac:5e:15:5c:d7:5f:bf:fa:ba:11:d5:72:c7:
08:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:60:81:24:2C:03:70:26:EF:5D:72:46:B8:4A:5A:32:A5:DA:EC:8F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2217d1a8-bd7b-3d5e-b1e5-1c8e924a8a01.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.44.10.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:89:54:a5:f5:5e:3f:ea:c2:d4:a3:c5:7c:9b:73:fb:cf:87:
f1:6c:6d:02:8a:d0:6a:b2:2e:d0:fe:b9:ca:89:00:98:ea:3c:
8b:c3:88:b3:13:c5:ea:76:f1:92:37:86:26:05:9b:fd:cf:b9:
f1:71:82:00:b1:c1:b1:7f:a1:05:0d:17:d9:6a:89:27:d7:ba:
10:ee:42:1e:28:69:7c:5a:7c:2d:4c:89:26:59:1c:39:60:93:
eb:07:d5:1c:75:33:2e:ff:f2:98:2d:8a:92:95:1d:95:65:32:
c0:91:1f:58:38:f2:95:71:37:12:04:73:78:e6:91:92:f5:a3:
be:ce:69:07:3a:97:d2:41:97:e1:51:c4:d5:45:e0:6f:ea:ed:
ab:fc:7a:6a:7c:2d:03:04:50:11:05:49:16:fa:d8:70:df:83:
99:81:95:06:e2:3a:76:70:14:f8:d0:44:f4:7e:16:cc:36:7a:
06:b8:27:21:dc:93:30:bf:5f:43:d6:f6:bc:9d:cd:93:b2:58:
12:6b:5e:e1:9c:6c:3b:3c:15:85:22:15:da:a3:ca:89:90:64:
12:97:f4:3c:7d:53:2c:06:fb:5a:36:56:36:d3:fc:61:af:b4:
81:99:87:af:67:29:c0:4d:af:b8:9c:98:da:01:b4:65:44:ba:
f2:c6:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:59 2026 by rpki-client