
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58ea707a-a062-3971-901e-dec226d0cd4a.roa
File: 58ea707a-a062-3971-901e-dec226d0cd4a.roa (raw, json)
Hash identifier: Biif9DmWbznud+sqPyIzsXKPCcoukuWh3XjFHs8TlWw=
Subject key identifier: CA:8E:45:7B:3A:DF:D0:4E:68:6B:AF:32:4F:AF:5D:F5:A9:91:89:1E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57E181341D9258F9F4E380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58ea707a-a062-3971-901e-dec226d0cd4a.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 174.173.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:e1:81:34:1d:92:58:f9:f4:e3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=bfb544c6-c9fe-4281-b009-4083c7607b74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a6:4d:b4:a1:96:d5:e9:88:17:75:27:91:38:
54:be:77:3d:22:55:b1:7a:dd:d3:cb:ba:24:5d:63:
5b:10:13:54:90:5e:22:18:10:52:b3:fb:1e:61:d4:
4c:e3:c5:3e:7a:fd:b9:c9:e0:2c:e7:6a:11:b7:d1:
77:b3:0b:30:23:96:c7:b2:dc:60:ce:a3:e9:47:2f:
42:4a:3c:36:29:82:81:63:48:d6:12:a2:a6:66:bd:
68:7e:9f:3f:c6:c9:8f:35:43:db:70:c4:c9:8a:20:
2a:5b:0a:28:6c:5e:2e:5a:d7:8f:6a:69:ee:d5:c2:
87:79:5d:cc:11:95:0e:f4:bb:01:45:ee:f3:0a:bb:
1c:ff:90:f3:9a:51:7f:c2:80:40:b3:6a:2f:ce:1a:
e4:cb:8d:fc:c7:d1:bb:72:c5:3e:e5:a1:a3:a3:94:
c3:6e:36:25:15:c4:b4:86:31:7d:9f:e4:9e:1e:49:
d6:8c:87:93:a2:9a:17:8c:5a:a1:0b:e2:07:a3:2c:
95:13:8d:12:0c:76:b5:e0:5f:8f:4f:a5:8c:64:a8:
37:7a:db:c4:e2:b1:ea:38:7f:46:86:09:18:18:3d:
66:99:2e:f6:19:7e:30:25:0d:49:86:e4:86:0b:0d:
2f:03:6d:d2:51:6f:71:e5:19:0e:6c:1c:b7:6d:6a:
ec:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:8E:45:7B:3A:DF:D0:4E:68:6B:AF:32:4F:AF:5D:F5:A9:91:89:1E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/58ea707a-a062-3971-901e-dec226d0cd4a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.173.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a9:f6:70:73:a3:48:37:33:1b:d1:97:0d:0a:a3:f0:d7:c2:34:
37:95:c0:e6:e0:e6:01:1f:2c:0f:c0:d1:e7:c4:fa:77:f1:05:
72:50:59:16:54:9a:54:f4:fb:05:d7:56:25:a9:93:c4:33:37:
f4:f1:2c:fe:37:7f:75:74:f1:35:51:78:e1:25:1d:1b:7d:f5:
0d:2f:71:2e:1d:7a:d5:cd:06:e2:2d:36:d4:4e:92:2e:5d:20:
f2:cd:39:0b:c2:65:3d:37:11:5c:0c:ef:2b:39:d9:b3:cb:5c:
c4:a9:1b:d5:db:c4:ad:fb:4b:63:b1:7c:f4:f0:ef:38:71:f3:
1d:ef:1b:f8:51:b5:92:c2:da:3c:08:17:79:32:0b:39:74:66:
4b:c3:00:62:89:94:89:92:1a:35:a3:3f:42:aa:4e:aa:fe:1b:
bf:1c:f8:12:0e:a2:ba:91:7e:23:dd:c3:ff:c6:ab:fc:1e:10:
0f:e5:9b:fc:90:09:9f:64:3c:4e:b1:0c:60:ba:45:de:71:2e:
85:f2:5a:11:66:62:14:ae:6d:8f:d5:a7:96:c8:67:aa:fe:98:
85:b0:c1:c9:3f:9f:ec:d2:22:98:9f:da:2b:2b:4f:66:89:7c:
cd:26:56:50:5c:8d:33:ae:d1:8e:8c:bb:34:a9:97:b9:73:dd:
cf:cd:28:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:42:53 2026 by rpki-client