
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dfd2dfe-e46a-3c02-86e7-3bf0505efe7a.roa
File: 2dfd2dfe-e46a-3c02-86e7-3bf0505efe7a.roa (raw, json)
Hash identifier: zQm0Vrwxsy48x7fR8VeDtubljPK4m7BXniLPZIeot8g=
Subject key identifier: 4D:5A:4B:F0:8C:6A:1B:67:D9:99:1E:96:5F:1C:93:F5:46:CA:35:46
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E4B1D7B028AC0BD91EE50
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dfd2dfe-e46a-3c02-86e7-3bf0505efe7a.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 73.222.244.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:4b:1d:7b:02:8a:c0:bd:91:ee:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=496ab2c1-fd0b-4aeb-adb0-c44f2cc9be30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ab:96:77:55:9d:f5:99:ae:99:b7:0a:25:dd:
61:8e:87:86:18:dc:d6:50:08:2c:69:17:7a:2e:bd:
98:50:f5:f7:cc:7e:9a:02:34:1b:87:6a:cc:2d:8a:
a9:60:8c:ac:db:91:ab:6d:a6:75:55:f8:1b:f2:dd:
19:dd:4f:50:f5:3f:69:01:bf:63:30:e5:2a:1b:db:
48:6b:10:5d:18:0c:f3:32:31:1e:44:ff:17:c9:69:
4c:f6:60:a9:5a:bc:f2:db:13:a3:7c:9a:fa:f7:de:
c6:bd:d5:b8:31:91:73:17:33:1a:c1:e5:dd:dd:85:
5f:d8:e7:35:98:83:9f:f5:38:db:26:cf:04:be:ad:
f4:02:34:65:6f:bc:58:aa:e3:1a:25:6b:82:94:98:
db:d4:6d:b4:33:f1:7b:1d:44:e3:1d:b3:aa:cb:36:
24:c6:ba:93:08:a3:ea:40:5a:95:f4:9a:99:e9:46:
1d:a6:82:4c:f9:11:27:cc:0a:04:39:b5:78:70:55:
84:62:b6:24:3c:41:11:e9:eb:d3:6a:92:63:ce:ed:
ba:9c:0c:71:f6:26:ed:4c:47:19:59:da:2a:72:bf:
83:70:21:11:c8:df:cc:33:a4:3e:e0:13:52:d2:1d:
08:67:9d:e2:1d:88:ad:0c:a1:95:a5:bc:55:0a:7d:
dd:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:5A:4B:F0:8C:6A:1B:67:D9:99:1E:96:5F:1C:93:F5:46:CA:35:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2dfd2dfe-e46a-3c02-86e7-3bf0505efe7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.222.244.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:54:28:3e:b9:92:66:ec:98:e5:f9:70:35:4d:a9:8a:c1:9e:
d0:78:80:2d:67:ea:a5:0c:24:1f:93:fc:70:8b:23:8a:27:8b:
4e:0d:e5:c1:1a:a7:83:af:ba:5b:b5:69:98:35:85:34:ed:d8:
61:7b:d7:89:ff:15:ba:05:ed:9f:7c:5a:d5:f5:c5:1f:31:94:
66:ea:c7:18:c9:1a:68:bd:66:35:38:17:4b:1c:02:64:9b:f8:
af:53:8e:72:c0:32:74:b3:1e:b5:ef:d4:1e:d9:0f:91:e0:5f:
ae:92:33:af:b1:0f:f7:6b:75:3f:fc:be:2b:42:22:3f:25:74:
64:c2:0b:6f:e7:ff:fd:07:c9:0d:0b:7f:ef:d1:73:40:ea:52:
e3:91:b3:e9:e1:e7:d4:5b:56:b1:94:d8:6a:bc:c3:e8:6b:ed:
45:bc:1b:38:76:df:46:85:89:7f:12:87:bc:1b:b9:de:43:2d:
18:19:45:6f:8b:17:6d:d1:e6:64:59:50:5b:10:f7:62:30:ae:
f1:c9:91:78:d0:df:18:3d:a7:1a:99:e8:d4:9c:3e:1c:d3:31:
ea:e3:dc:95:be:ce:22:e5:c9:e1:3f:e4:1e:0e:a7:45:c9:2a:
20:c5:3c:49:93:bd:5b:1f:2b:2a:70:61:ca:a9:54:91:4c:88:
c1:8f:87:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 18:22:51 2026 by rpki-client