
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b887676-2986-321e-ad97-09bea7e57cee.roa
File: 5b887676-2986-321e-ad97-09bea7e57cee.roa (raw, json)
Hash identifier: enLDqgx9uefpv75VPeyieA70+odz9V4yF5duRLrSdg8=
Subject key identifier: 2A:14:B3:F6:EF:99:CA:37:39:6A:57:0B:B8:6B:F7:05:0F:E2:9C:54
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA72B0B27579FBC0E34240
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b887676-2986-321e-ad97-09bea7e57cee.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33490
IP address blocks: 73.96.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:72:b0:b2:75:79:fb:c0:e3:42:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ffc5585e-cf11-4ffb-aed9-a1501292771c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:d2:f8:6f:81:54:7c:30:e2:8f:93:87:f0:57:
cd:98:b6:2c:92:32:6a:46:e1:db:9a:a9:f7:df:a6:
4b:da:a7:34:63:8a:a9:2b:2a:a1:66:c1:17:96:f1:
42:10:aa:5d:2f:e4:8a:44:f3:1e:38:7f:da:29:ce:
1f:5e:8f:4d:52:17:31:79:ee:6a:79:6f:3c:a3:09:
53:d7:07:37:47:bf:34:bb:f9:de:fe:2e:78:e1:5b:
87:0c:52:81:fc:ff:b8:fd:58:2b:0f:e6:e5:12:ad:
2b:63:b0:44:35:28:4d:fe:87:9b:a2:09:58:79:b7:
25:76:16:ac:88:fa:45:df:c9:c6:a5:7b:d4:c9:4d:
a7:c1:2e:0d:2b:d1:07:3e:bf:11:74:a7:53:d1:60:
05:b0:1f:4c:d2:f9:28:e1:fd:d5:88:12:96:9b:e4:
61:c2:c0:ac:63:3e:4d:b9:de:da:5b:f4:41:50:83:
44:43:15:ed:c3:bd:f5:4d:d3:2d:3a:07:6d:e4:47:
ea:11:de:1d:70:a3:e7:05:f0:ee:90:a6:9f:96:70:
26:47:23:fd:8f:f8:54:39:f3:77:9b:26:cb:08:4b:
0b:5d:d3:80:8c:5b:c5:f2:ff:e0:2f:02:17:67:ae:
f3:97:ee:04:54:c5:69:dc:6b:0a:ff:f8:76:04:db:
a1:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:14:B3:F6:EF:99:CA:37:39:6A:57:0B:B8:6B:F7:05:0F:E2:9C:54
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5b887676-2986-321e-ad97-09bea7e57cee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.96.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:f8:c4:24:15:60:99:72:ab:c8:72:31:2a:7d:e7:7e:fd:8c:
dd:60:43:bb:fa:a6:56:83:d8:a7:1a:32:18:fc:08:8f:94:44:
c7:c3:78:1b:77:dd:63:80:16:18:1d:2d:af:e6:db:c2:be:51:
84:e7:93:8a:09:a9:ad:e0:36:99:62:84:ea:63:cc:3b:26:46:
1c:38:00:78:3c:75:af:38:fa:cb:42:ce:be:1e:d8:29:cd:aa:
75:da:14:cc:76:c6:18:a1:b3:e2:2d:d9:60:ad:8b:b0:6c:41:
10:cd:ba:95:15:ff:e2:93:aa:0f:80:8b:28:9f:f6:ca:6e:e2:
9f:c0:d4:7c:e2:2e:ba:a7:e9:b0:01:1e:cb:02:ca:21:6b:68:
f1:51:f2:00:2f:09:dd:1c:f2:c6:8f:89:df:ec:5e:22:65:c3:
a6:e0:ef:98:9f:89:3b:cf:0b:6a:d9:03:43:6f:97:d9:09:e9:
11:b8:6b:ad:ec:43:cd:e5:07:3a:70:a0:73:6b:be:b9:25:a9:
4b:6f:e4:91:cc:b7:63:39:30:ad:dc:80:77:d8:6c:ca:19:de:
a1:66:e2:fd:b3:d5:a2:53:a0:eb:c7:07:b6:8e:42:04:26:2d:
a5:58:f5:b0:bd:20:84:86:e1:75:c8:e8:f2:03:3f:a0:1c:38:
d7:02:bb:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:19:51 2026 by rpki-client