
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22cfdd4d-658d-3127-a0f0-c84d301a62b3.roa
File: 22cfdd4d-658d-3127-a0f0-c84d301a62b3.roa (raw, json)
Hash identifier: XPSwsoFTls+dQj5AAOOAbp0NCCZCv5DqgY/JU0/NY4s=
Subject key identifier: DA:B2:15:70:3B:4C:A6:87:0A:01:2C:A1:9F:06:69:B2:B0:28:FA:85
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5D846DF83F41B411A20000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22cfdd4d-658d-3127-a0f0-c84d301a62b3.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.170.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:84:6d:f8:3f:41:b4:11:a2:00:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=a1bcdd97-9216-4b0a-9d2a-8f10249798a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e0:b6:7e:ab:fb:21:d1:87:73:12:69:83:a2:
b2:89:47:bc:1b:70:9b:21:5b:88:a8:de:c2:f7:8b:
77:6c:1f:78:bf:ef:31:54:90:02:2f:8c:a0:26:02:
6b:85:42:1a:59:cb:96:14:68:1c:67:f4:ef:c5:72:
f9:ea:79:77:eb:87:61:e0:9c:91:35:84:3e:70:6b:
e7:3b:e5:f3:22:f4:45:da:60:f2:7c:1e:5e:31:ca:
ec:75:96:0a:d1:f8:88:0d:88:89:30:3d:97:ef:ac:
33:73:51:2b:89:60:6e:1a:02:e5:96:df:92:2c:c2:
ba:64:b8:d6:53:7d:b3:a7:29:db:62:2d:38:55:57:
5d:e9:fc:62:d3:29:e4:53:74:d4:67:80:c1:89:6f:
b2:57:ef:28:a4:fb:df:e7:b5:b0:08:98:b4:32:ca:
a0:c6:1c:6c:ae:5d:a3:1d:4b:27:98:ad:61:63:c8:
b5:cd:fa:c3:0e:3c:39:89:96:76:11:22:42:a7:bc:
7f:e3:e5:ef:3f:d9:20:dc:8a:91:7e:d0:2e:66:e5:
19:8a:54:fe:76:27:6e:6c:5a:6d:21:c7:2d:0e:19:
c0:4f:91:41:25:45:3e:57:82:64:b0:a8:c6:85:cb:
2a:7e:56:e3:e7:89:20:b5:cd:ab:08:fd:9a:e1:0e:
23:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B2:15:70:3B:4C:A6:87:0A:01:2C:A1:9F:06:69:B2:B0:28:FA:85
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/22cfdd4d-658d-3127-a0f0-c84d301a62b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:6d:e4:77:72:da:f5:27:ad:21:7e:ff:50:e7:ce:ca:8e:26:
5b:84:fd:cb:1b:f3:20:9b:ce:e5:6a:11:5f:b6:91:21:d8:d2:
32:ce:dd:90:1f:9a:3a:17:07:5a:fc:3b:13:dd:47:1a:f3:58:
d7:da:c4:eb:67:5e:c1:d7:73:31:98:fe:f9:84:39:e2:fb:ce:
bd:b9:57:02:b2:0c:8e:d8:91:73:20:29:1a:01:e6:62:11:cb:
e8:34:bb:92:45:c1:df:a8:f5:46:6a:67:b8:45:01:20:0b:76:
0c:cf:0d:fd:f3:a4:07:40:78:69:fd:9e:b5:aa:c3:69:ed:f9:
c0:6f:18:4c:df:b3:f7:fb:a6:b7:b2:d4:27:89:9f:2b:70:49:
06:4a:e2:64:09:92:60:97:5c:6b:dc:6e:f8:91:46:b0:06:43:
54:06:aa:78:85:ed:83:34:53:77:ec:72:e4:63:8f:21:5a:50:
d5:cd:4d:a7:d8:36:82:d8:83:0b:9c:fe:fa:93:3e:3a:aa:99:
61:fe:3a:9f:58:65:bd:5e:ab:9d:35:f4:40:82:b0:7e:79:63:
d1:4a:5a:cb:27:11:55:54:8c:73:7f:00:cd:14:8c:15:54:14:
5f:87:98:95:ed:3a:dd:f9:71:34:bc:21:f9:6f:1a:66:61:ae:
5e:fa:89:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:37:50 2026 by rpki-client