
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca5e76-56de-3621-af00-436664e41e3a.roa
File: 40ca5e76-56de-3621-af00-436664e41e3a.roa (raw, json)
Hash identifier: l137tseACrZviH7MCuQqElT7yuIMKyyRraTTICN85EU=
Subject key identifier: 56:70:07:AF:F4:F2:5A:EF:2B:D3:88:2A:7A:CA:7A:11:FD:0A:77:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57D5B4A370B8148A4AAD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca5e76-56de-3621-af00-436664e41e3a.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 73.233.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:d5:b4:a3:70:b8:14:8a:4a:ad:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=e500b770-b394-46d2-8533-56d233443f68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:52:ae:b3:eb:33:51:41:36:4c:f4:0d:63:c7:
b5:0f:1b:31:a0:20:86:58:68:03:e6:02:f8:ba:04:
84:ae:bc:f3:57:af:43:f2:2d:ab:91:65:0b:ec:b9:
25:d9:3c:ce:06:dd:bc:37:73:6d:f0:a3:e7:ac:2c:
e5:6a:3f:ea:01:d0:c0:d2:b5:03:19:25:9f:ca:e2:
f8:a1:64:27:56:08:b7:94:2e:f2:43:1a:dd:f1:30:
22:e3:49:d4:ff:58:20:65:7c:f0:20:22:69:47:c0:
e0:f2:cf:31:03:55:43:44:19:c8:f0:e6:60:1f:39:
54:30:d6:79:b1:ae:3f:43:da:c1:50:0b:9e:68:01:
6a:c7:5c:42:6e:82:d9:b9:09:14:80:63:0e:de:e7:
d0:2e:69:9b:d4:03:8c:61:7f:37:de:f9:60:96:6f:
7f:57:84:01:1d:c5:6b:b1:47:5b:94:4b:1d:b0:f9:
78:0f:97:0d:8f:7d:57:0c:1a:3b:4c:62:34:bf:cd:
fa:e0:c5:82:e3:d8:11:ba:b2:66:4c:47:e5:c2:d8:
14:f3:50:ac:ca:58:a4:ed:af:66:37:28:d6:4b:45:
d5:2c:e8:85:80:fc:80:21:d0:2c:2c:8a:50:9b:79:
68:c4:4f:10:d0:de:27:ad:3b:a1:0b:44:8f:8c:c0:
71:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:70:07:AF:F4:F2:5A:EF:2B:D3:88:2A:7A:CA:7A:11:FD:0A:77:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/40ca5e76-56de-3621-af00-436664e41e3a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.233.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:47:8b:59:af:35:92:f0:fa:1e:20:25:f0:43:fa:46:07:45:
92:f0:52:fa:eb:c1:f4:a3:6e:c4:73:d6:19:de:35:08:0c:69:
0f:7c:48:90:ad:b8:da:65:2a:7a:62:b3:03:27:33:7d:0b:a7:
f0:4a:8a:ae:50:18:ef:c5:aa:28:8c:fe:52:15:db:d1:ef:33:
06:22:9f:8e:7f:a3:d2:12:09:1b:db:ac:a0:4a:96:09:4a:35:
18:43:8e:4e:d9:91:13:74:94:94:3b:af:68:68:f1:db:d0:e5:
0c:42:52:89:d5:24:47:f9:6a:1a:2a:ac:42:d3:91:61:6f:ae:
9f:29:47:c7:97:7e:7d:a1:6b:b2:a9:62:19:a9:19:7b:57:69:
f1:4b:15:89:a6:00:e9:be:68:48:10:e5:ec:1e:2d:e2:f0:06:
f3:a2:a6:a0:a9:d6:3c:05:84:42:fe:4a:9c:8c:d1:16:56:bf:
06:db:83:5a:b3:d7:33:ca:0d:48:09:50:2e:7f:4c:32:17:12:
5f:bb:a9:5c:a1:ab:31:c4:6c:0c:58:19:0f:dc:b7:43:02:7a:
45:e6:24:8a:21:10:82:27:d4:dd:b3:e3:e8:d3:fb:a2:e2:fa:
5f:ba:ec:0d:f8:41:72:ba:d4:13:5a:09:2b:e9:97:67:a9:76:
db:b8:ac:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:45:11 2026 by rpki-client