
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/437c3596-c39f-3ef7-8c6a-10f0e78bc0f3.roa
File: 437c3596-c39f-3ef7-8c6a-10f0e78bc0f3.roa (raw, json)
Hash identifier: PWnJu3N3wPSeaL5y+pmacN81ToBE/TDsx6atRsfy68w=
Subject key identifier: D9:FF:6C:9E:AF:19:76:8A:9F:65:37:81:01:5B:2D:F2:AC:CD:7E:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5DDF3B4248E7AA49E96E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/437c3596-c39f-3ef7-8c6a-10f0e78bc0f3.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.93.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:df:3b:42:48:e7:aa:49:e9:6e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=95f049d3-d6e5-472e-b129-b5211d8a427e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b5:c8:3f:24:2f:b7:3b:09:28:f8:18:1a:b3:
4a:1b:78:90:fb:97:d8:64:a3:a8:ec:3a:0f:80:d2:
03:1d:a4:93:0f:5e:36:7c:70:1d:c6:08:18:78:03:
ca:a8:c2:ad:f3:b9:bf:91:d1:e3:da:7f:98:a5:4a:
ba:9c:da:1c:89:d0:e0:40:75:4c:d1:21:b8:f3:05:
5f:77:68:af:65:ff:03:d8:f6:1e:85:55:a1:f2:a6:
24:4b:86:aa:83:ec:a6:5b:33:07:8d:68:14:da:46:
ca:e9:60:71:72:90:dc:89:20:e7:2e:d3:b4:8b:77:
cd:34:36:79:fb:ca:1d:7d:56:35:58:a4:1f:b3:0e:
f9:ef:89:8a:52:b8:7e:03:92:5a:31:1f:8d:5e:1d:
25:95:1a:a5:a8:d7:3b:3d:e1:f1:f2:2a:0d:31:54:
fd:1a:10:4e:f7:12:7f:03:b9:94:4d:ec:43:dd:d8:
49:9d:d5:83:5f:24:c7:76:47:f3:80:26:e8:30:d8:
31:cb:58:20:e3:c0:ab:1a:53:7f:ac:48:65:55:99:
b4:f4:74:8f:ed:a0:4a:b4:9e:ac:78:ac:98:ef:2e:
22:2b:a8:17:39:a7:f8:86:a7:71:73:f4:66:e0:9a:
95:5a:91:8b:ab:d8:6b:7f:76:8f:75:e5:7d:a1:ff:
23:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:FF:6C:9E:AF:19:76:8A:9F:65:37:81:01:5B:2D:F2:AC:CD:7E:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/437c3596-c39f-3ef7-8c6a-10f0e78bc0f3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.93.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:72:a2:aa:f6:f3:b3:de:7e:4c:28:1b:e1:8e:d8:4a:c7:c7:
69:31:92:ec:7c:85:a6:d1:e7:61:e3:88:12:f7:cb:24:05:e0:
50:89:3e:2d:d9:27:b2:80:b7:2b:f0:b6:84:f1:68:2c:0d:38:
cc:67:b4:31:9d:59:04:19:d2:1c:d9:fc:ae:ec:43:53:48:ad:
a7:96:03:b2:a9:0e:e3:95:24:17:45:41:ec:f9:d2:82:8e:df:
77:2d:a7:16:5a:36:df:ce:f9:e3:c7:e3:be:bf:61:34:1d:d0:
4d:01:fb:f3:54:57:14:14:e2:04:bc:96:50:46:52:89:f6:4f:
b3:6c:9d:fb:a8:c4:8a:ca:c6:b4:15:45:24:ce:87:66:2d:6a:
02:4f:e4:e7:56:23:57:3a:f9:5d:16:7e:92:82:33:7b:34:1a:
65:4d:d6:2f:47:28:7d:72:59:7b:46:ce:1e:19:03:c5:54:eb:
78:4e:10:f0:cd:5e:09:df:e9:73:33:9e:22:f9:61:17:19:53:
7f:50:9a:99:1b:2f:99:99:67:06:62:2a:e4:44:87:b0:b8:3d:
c4:94:5f:f4:20:61:9c:58:55:11:34:66:3e:54:1f:70:cd:95:
2d:f9:0d:fb:ae:88:33:30:6f:e2:9e:d2:6d:c0:bc:32:ff:a4:
9e:46:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:45 2026 by rpki-client