
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a78c05-d230-3835-8f6e-b7f229160002.roa
File: 23a78c05-d230-3835-8f6e-b7f229160002.roa (raw, json)
Hash identifier: J7KRxBNg2fAPMdXL/RHBWK4p6TJpA2e2r3Gso3wV2xI=
Subject key identifier: 1F:A7:08:72:9D:5F:32:B7:24:E6:BC:7B:61:DA:48:38:0A:2A:43:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE579F3A869A336C22B71A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a78c05-d230-3835-8f6e-b7f229160002.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 73.248.30.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:9f:3a:86:9a:33:6c:22:b7:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=bef5b053-fa90-4f38-958c-c5da58e45cd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:13:8c:9e:70:81:7b:9b:7b:34:1a:62:2d:49:
91:31:65:3c:3f:0c:06:ad:ca:9a:8a:93:d8:a9:0f:
77:c6:ef:dc:97:a6:d1:5b:36:f2:38:30:18:03:1b:
b2:de:ad:6f:05:81:1b:35:de:b5:f1:e6:8f:f3:c4:
01:dc:40:64:2d:ec:c9:41:b3:ef:42:76:cc:c1:26:
13:4f:30:4a:97:23:57:3b:fa:12:63:42:88:b5:4c:
0d:28:13:a2:ff:64:82:93:94:05:af:ee:f0:2c:ce:
d6:cb:b1:6d:c5:34:30:25:ab:0b:4a:75:b1:e9:22:
70:23:d5:a1:c9:40:ec:53:49:e3:c5:96:69:20:23:
78:05:52:c0:71:fa:d9:5f:87:99:7b:c0:da:c2:69:
91:5b:43:e3:27:9c:08:26:d5:70:74:50:dc:29:a9:
9c:0a:b5:a2:85:55:6b:6a:71:58:a2:7e:7b:1a:6e:
85:fc:7d:15:89:90:e7:32:db:be:b3:6f:8c:44:ec:
d4:61:1f:50:81:50:71:62:7b:6f:b4:8b:df:e9:2e:
cc:d8:13:43:81:e4:0f:ea:53:46:13:63:72:a6:c7:
e0:de:f7:c3:fb:67:21:e4:c4:74:dc:69:6c:f8:95:
19:16:4f:87:d7:bd:73:e9:76:25:91:3f:10:e5:62:
9f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A7:08:72:9D:5F:32:B7:24:E6:BC:7B:61:DA:48:38:0A:2A:43:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/23a78c05-d230-3835-8f6e-b7f229160002.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.248.30.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:6d:b6:6e:1e:6f:d0:33:a0:91:95:ed:a3:99:d9:5c:f4:35:
2a:b7:c0:c9:de:9d:73:60:25:61:8b:a4:86:0d:8c:0a:75:a9:
45:85:9c:8f:38:68:6a:10:94:31:b0:74:54:7f:68:f8:c7:31:
20:53:e0:07:51:3a:91:91:14:2c:ba:03:cc:f6:3e:1d:7e:36:
f2:03:89:e2:85:23:75:23:87:36:fa:a3:cd:6c:ac:2c:82:a9:
10:67:88:32:05:eb:b2:be:f6:60:ca:0c:7d:c3:1b:9b:da:39:
1c:72:f7:b2:81:f3:6b:a5:79:f9:4f:f9:94:ab:9d:c0:f9:f6:
c2:e5:07:b4:62:c1:68:c5:31:d3:58:a2:81:98:b0:20:b7:af:
62:e8:85:fd:8d:e4:74:12:3f:b7:7f:0e:ab:e3:6f:8a:3d:10:
83:6a:e7:d5:e4:6d:99:ab:c8:62:84:d3:4d:63:3b:50:41:a3:
35:46:3b:24:bc:92:34:63:38:31:66:e2:4f:03:69:a5:83:80:
e1:fc:2d:93:95:29:06:6a:c5:68:41:e1:57:a8:c9:04:1a:f0:
1a:de:80:6f:b6:11:2c:07:95:5c:a3:d7:66:3e:59:92:b4:27:
ac:76:75:e9:e5:44:58:71:91:e4:40:66:a0:73:5d:03:83:44:
f6:f6:06:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:24:31 2026 by rpki-client