
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c9ac9a-5bd6-359f-b699-46b13efd7e3b.roa
File: 35c9ac9a-5bd6-359f-b699-46b13efd7e3b.roa (raw, json)
Hash identifier: KwJEHN3vBlZjL7m9AQeryS0JTF3HY4ew9gsVFyoAYa0=
Subject key identifier: CF:B7:E8:38:C6:3D:C7:12:4C:68:6F:39:7A:88:FB:0A:C6:42:43:1A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5836A8B63C529CD4FF1880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c9ac9a-5bd6-359f-b699-46b13efd7e3b.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 73.110.232.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:36:a8:b6:3c:52:9c:d4:ff:18:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=381a66fe-db87-4e87-b093-37eefa3b1426
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:c4:a9:b1:d8:79:33:00:5a:f7:71:22:85:
dc:a5:7b:83:74:ef:a6:e6:bc:50:bb:32:c6:3d:ff:
7b:f5:0b:4c:43:03:89:17:76:d3:c9:3a:c7:e9:76:
94:f1:ef:af:c7:a4:b2:49:98:bc:77:34:bd:01:17:
fd:e7:a2:19:b5:14:24:87:02:e0:93:40:65:d3:cb:
b3:c2:5f:77:9d:82:34:ba:10:25:36:8e:5c:26:b4:
58:34:08:9a:ca:78:37:89:99:a3:df:a4:43:84:21:
b7:05:76:37:6f:6e:f1:e8:ba:39:12:26:24:ea:5c:
70:7e:2d:58:4d:3c:4d:c8:0a:90:2f:c8:2d:77:57:
1e:d5:bb:51:01:7f:5f:68:dc:cd:15:87:fc:4c:c2:
ba:21:62:88:16:16:7c:a0:b8:9a:fb:be:96:87:a7:
9c:e7:87:ca:37:a6:1d:c0:0d:2e:66:ab:be:72:e5:
bd:b5:ab:0a:3e:69:e1:12:11:ad:f8:48:63:15:df:
13:7f:e6:0e:ce:7b:31:27:02:06:2f:89:81:ea:c8:
4a:3a:b8:78:dc:50:26:69:b9:59:0b:b6:ff:79:dc:
31:ae:f7:9d:81:ac:55:06:b5:14:8d:92:be:83:3c:
f5:f0:f9:73:ef:dd:19:e1:9a:a0:5f:ed:45:85:43:
1f:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:B7:E8:38:C6:3D:C7:12:4C:68:6F:39:7A:88:FB:0A:C6:42:43:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/35c9ac9a-5bd6-359f-b699-46b13efd7e3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.110.232.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:90:d0:b5:e0:22:24:fc:1d:3b:e9:53:50:a9:5a:33:14:8e:
75:3f:39:07:11:4e:6a:0e:ee:01:35:93:08:3f:73:ff:09:b3:
84:a6:10:cb:fd:cf:ed:77:e9:eb:e0:c9:dd:35:84:5e:3a:08:
f8:31:4e:57:69:8a:a8:ac:47:8e:d1:07:68:45:d8:df:0a:98:
34:99:85:f4:cd:97:5c:02:cf:a6:53:6e:44:c6:78:1a:3e:52:
b0:f4:75:12:6f:64:8e:93:17:b0:83:0f:b8:73:16:87:74:44:
2d:8a:aa:cd:cd:ba:87:49:e6:ea:c3:8a:f1:e0:5d:77:47:8a:
5c:ff:47:a3:b4:5a:64:ad:7c:10:d1:60:40:74:82:e9:ed:45:
08:a2:24:b5:06:2d:63:77:5f:f9:57:cb:39:e4:59:80:15:83:
95:57:f1:70:25:ff:6f:6a:57:ef:e4:31:47:2c:52:66:63:0d:
ba:db:89:fe:52:de:7d:04:9f:86:91:44:4d:9e:48:1c:b3:9b:
95:ef:a4:d0:45:a7:2a:6a:ec:53:28:f6:0f:ed:6e:53:f5:5e:
de:63:55:c9:ea:7a:a7:94:1f:55:a0:f7:f8:2e:23:85:30:a0:
97:d1:5b:5d:c7:85:be:7d:0b:f6:b4:db:53:b6:d8:e6:5e:72:
3b:32:f9:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWDaotjxSnNT/GIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MzgxYTY2ZmUtZGI4Ny00ZTg3LWIwOTMtMzdlZWZhM2IxNDI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvkDEqbHYeTMAWvdxIoXcpXuDdO+m5rxQuzLG
Pf979QtMQwOJF3bTyTrH6XaU8e+vx6SySZi8dzS9ARf956IZtRQkhwLgk0Bl08uz
wl93nYI0uhAlNo5cJrRYNAiayng3iZmj36RDhCG3BXY3b27x6Lo5EiYk6lxwfi1Y
TTxNyAqQL8gtd1ce1btRAX9faNzNFYf8TMK6IWKIFhZ8oLia+76Wh6ec54fKN6Yd
wA0uZqu+cuW9tasKPmnhEhGt+EhjFd8Tf+YOznsxJwIGL4mB6shKOrh43FAmablZ
C7b/edwxrvedgaxVBrUUjZK+gzz18Plz790Z4ZqgX+1FhUMfrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM+36DjGPccSTGhvOXqI+wrGQkMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMzVjOWFjOWEtNWJkNi0z
NTlmLWI2OTktNDZiMTNlZmQ3ZTNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSW7oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACOQ0LXgIiT8HTvpU1CpWjMUjnU/OQcRTmoO7gE1kwg/c/8Js4SmEMv9
z+136evgyd01hF46CPgxTldpiqisR47RB2hF2N8KmDSZhfTNl1wCz6ZTbkTGeBo+
UrD0dRJvZI6TF7CDD7hzFod0RC2Kqs3NuodJ5urDivHgXXdHilz/R6O0WmStfBDR
YEB0guntRQiiJLUGLWN3X/lXyznkWYAVg5VX8XAl/29qV+/kMUcsUmZjDbrbif5S
3n0En4aRRE2eSByzm5XvpNBFpypq7FMo9g/tblP1Xt5jVcnqeqeUH1Wg9/guI4Uw
oJfRW13Hhb59C/a021O22OZecjsy+QE=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:49:33 2026 by rpki-client