
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa
File: 47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa (raw, json)
Hash identifier: NNn0MPiW6j7DST1cSkbSqJ8MJ/1rKnojJ4iNDRQSMc4=
Subject key identifier: 87:E2:70:E5:9C:D1:21:FE:35:67:2A:38:80:EE:72:1E:59:9D:99:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5753C544768E4EF71ED990
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33660
IP address blocks: 73.131.202.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:53:c5:44:76:8e:4e:f7:1e:d9:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=e210424d-71ef-448a-b8a5-cd3edee6de82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:50:10:da:3b:e4:22:16:b7:de:36:c8:8a:bd:
41:2b:59:d2:0a:49:e0:47:26:be:e4:4e:d6:2d:15:
b6:2b:4c:5b:f9:26:c7:eb:fe:32:75:d3:2d:8f:20:
ef:6f:a3:e4:0c:bb:d8:44:73:39:12:82:d9:f2:7f:
c1:f3:c5:bf:d4:cd:84:0c:5d:47:dd:68:78:50:dd:
4d:59:1f:ca:08:65:4f:03:1b:89:f2:e1:a4:97:53:
99:8b:2e:87:6d:ab:b1:02:98:19:c7:cd:d3:6b:6e:
54:14:83:84:21:1e:47:fd:62:b7:1a:9d:0f:26:ba:
ce:f4:bc:df:45:e0:70:4b:c7:34:03:f1:c7:d9:7a:
9b:bd:21:36:a5:77:7f:70:3f:0e:3b:5a:3b:17:db:
85:29:72:c5:5b:fe:65:29:21:ea:f5:d1:f5:f7:2f:
b2:60:7a:52:7b:6f:af:68:5b:c5:28:a8:a3:c0:5c:
f1:28:e5:39:5b:3d:6c:bc:e8:2d:74:8b:d5:79:1d:
66:2f:62:97:64:49:9e:90:a4:0f:1d:0d:01:e0:b9:
39:f4:be:23:18:d3:ca:65:77:8f:6b:58:aa:f1:24:
6e:d9:29:99:1c:d6:ed:39:58:0d:3e:c8:c2:01:95:
5d:a2:53:6b:96:81:d7:90:7e:7a:01:fd:a1:03:6a:
d4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E2:70:E5:9C:D1:21:FE:35:67:2A:38:80:EE:72:1E:59:9D:99:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/47c25af7-8d22-3678-9fd9-1f4f9d69a977.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.131.202.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:38:0e:97:e9:e8:f2:39:33:df:62:df:95:b5:c9:e7:3a:80:
92:23:8a:95:52:9a:15:23:7f:18:1b:cb:8e:61:a7:df:6f:42:
66:49:36:53:3d:3b:d6:59:b4:0e:bb:b9:db:a5:2b:22:d8:4b:
1c:e7:77:e5:06:37:45:f0:db:c3:f9:b3:68:05:a9:30:01:5c:
95:89:d2:17:f1:a5:84:c5:9c:75:cb:e5:26:eb:32:8c:ca:12:
d1:fc:76:e7:77:2e:21:1f:b8:fe:96:10:e3:3d:42:86:34:1c:
ab:c8:2b:0c:f5:3f:7a:00:71:4c:f2:30:1b:39:64:f2:64:1c:
50:30:e8:84:e0:e6:e6:e4:8c:13:59:7a:03:ee:c4:5f:47:d2:
e3:e3:dc:46:0b:b5:8b:7e:e7:1d:97:d6:f9:36:06:69:a6:ba:
50:8b:95:e8:5a:d3:5d:cd:2d:9d:40:54:05:8b:3b:98:1f:76:
1e:0b:79:bc:d9:7a:98:f5:e8:ab:38:83:13:0c:ad:97:e8:f3:
51:f8:e8:f4:b8:8f:40:4a:d4:cb:bd:a2:77:ac:58:52:ef:77:
fb:a0:48:e2:e7:03:7d:47:74:a1:e5:2f:47:2e:59:a0:cd:a2:
d1:17:8a:d7:22:4a:78:0c:d7:17:f1:4a:a2:b4:e2:bb:b7:2d:
37:cb:5c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:48:29 2026 by rpki-client