
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33584029-265f-32b7-aded-461a1627a68c.roa
File: 33584029-265f-32b7-aded-461a1627a68c.roa (raw, json)
Hash identifier: EOzAKlyRkJeQMP/1J5OpMBdUu2303x2WGPYhFbApqqc=
Subject key identifier: 59:1C:EC:E2:97:DA:E6:14:F5:46:CD:30:58:14:A2:9A:D1:9C:44:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE593064E190447A6E791B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33584029-265f-32b7-aded-461a1627a68c.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33660
IP address blocks: 73.228.72.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:59:30:64:e1:90:44:7a:6e:79:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=dae625b4-0369-4f3c-84f1-50a03e830f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:77:eb:09:77:85:5a:1c:7d:8f:e6:61:2a:
9c:c1:83:f6:65:9d:30:27:5d:03:24:4d:6e:6a:a0:
7d:e1:3f:4b:4a:36:c2:3d:cd:17:51:a4:ad:39:7c:
f7:b0:eb:d1:61:39:e5:c0:e3:3e:21:20:a3:f7:70:
60:79:32:38:1b:9b:53:6c:01:19:93:3d:60:43:d7:
1a:32:62:5c:2d:c0:90:75:87:15:37:53:f7:81:93:
0d:f9:e7:58:66:60:80:a5:d9:1b:ca:03:44:c9:c3:
76:3b:28:18:f1:97:59:33:aa:a1:25:27:df:35:9c:
68:5f:8f:af:54:3b:5c:71:a3:91:70:af:5d:03:08:
96:28:69:31:b2:b0:de:06:b7:e2:db:46:cb:96:3e:
a0:fb:80:96:25:dc:1c:3b:58:9c:61:6d:5f:38:27:
b2:ff:7c:00:19:a4:61:9a:15:c7:17:fc:e3:79:78:
47:7a:6d:cd:fb:21:57:a3:45:03:e8:6f:0f:25:84:
69:2b:89:4f:d0:ef:1a:63:51:e3:cd:59:7a:81:4e:
54:31:a2:a0:23:b5:7f:3a:21:57:16:cd:63:be:4d:
9f:66:e9:1a:4a:74:d3:1c:72:c5:ca:f2:4a:ca:f5:
73:4c:b3:09:8c:13:7c:49:f9:d4:45:6f:bc:b9:a3:
6e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:1C:EC:E2:97:DA:E6:14:F5:46:CD:30:58:14:A2:9A:D1:9C:44:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/33584029-265f-32b7-aded-461a1627a68c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.228.72.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:e7:86:2e:fe:ef:9f:31:35:71:c6:04:24:f8:3e:24:0f:cb:
fd:8c:96:8b:be:e7:40:08:6d:0b:98:43:d7:6b:95:ff:c7:60:
fc:3f:46:6d:60:66:44:a2:f7:12:23:cd:ed:7d:7c:e2:d8:8c:
46:f1:c2:37:0d:e2:2a:fe:af:b3:b6:58:57:db:84:31:8d:01:
66:64:9c:e8:3f:60:db:57:aa:73:3b:5a:84:4f:8c:75:0b:41:
0f:67:ba:29:a7:87:4f:87:1a:3f:b0:6b:a5:ec:26:96:1d:88:
e1:df:ca:61:46:06:6c:76:88:a4:4f:7e:58:3a:3f:75:9e:2f:
8e:8a:62:40:f4:cd:4d:50:40:34:66:44:77:1b:d8:47:75:4e:
21:5c:24:66:2b:03:b1:d5:ed:72:e9:01:ff:91:9d:4b:63:34:
ad:1d:c6:4e:f3:6f:97:e2:cc:4b:14:7e:00:9e:ca:26:bd:21:
9b:45:d8:c4:e2:d7:05:2d:fb:8b:12:1f:5c:71:0b:6f:40:f1:
d6:b9:ec:13:36:4e:a0:66:77:3b:e4:fe:79:8f:04:de:31:21:
ae:51:5e:8c:90:ee:f5:82:4c:fb:c5:be:3d:0b:ad:9e:f5:de:
c8:0c:37:f4:23:a1:b3:17:35:29:6a:40:36:b0:ef:98:c8:3d:
c7:88:cb:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:25:32 2026 by rpki-client