
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/672d570a-7dc9-31c3-a85c-e24c7824a8b3.roa
File: 672d570a-7dc9-31c3-a85c-e24c7824a8b3.roa (raw, json)
Hash identifier: FFPxXRonCIbMmLSUVcOpGaLTgQv0RgB45IipHlhXtQA=
Subject key identifier: 18:74:6C:9B:3F:4F:DA:75:4A:DF:3C:A6:E7:B6:5C:07:F4:73:48:DE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BA6D668AADF9EF27CC0600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/672d570a-7dc9-31c3-a85c-e24c7824a8b3.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33490
IP address blocks: 73.25.74.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:6d:66:8a:ad:f9:ef:27:cc:06:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=8d1cad83-b6b8-496d-874f-9fb33f3b24e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:14:64:a1:6f:7a:8f:be:4d:de:a9:a8:15:ac:
91:30:61:bb:20:cd:71:7e:dd:91:be:02:2e:18:89:
f5:72:44:1d:7e:27:eb:c2:6b:85:77:6a:a1:dd:ba:
99:d2:2e:52:28:f6:37:e5:ec:b4:23:17:ee:73:94:
1a:ec:47:09:7f:12:70:0d:bf:8a:b0:39:cf:a3:d8:
ce:f3:6a:70:c4:dc:3e:96:99:c8:d4:75:1b:7f:a7:
9b:c1:6c:84:63:c2:fa:43:c1:6c:6e:ba:38:55:e1:
fc:56:a9:5f:27:ad:de:30:78:ee:a1:0f:4e:10:08:
65:ce:90:25:79:d1:f8:c3:f7:ed:1b:f1:a9:24:5f:
75:b5:1d:0a:5e:cc:d4:2a:57:9a:29:6a:8e:7a:3a:
3f:06:82:63:22:7c:37:ff:ef:81:05:62:e3:ff:b5:
8e:45:e8:7c:34:95:6e:c9:13:c7:79:83:26:47:08:
3c:5c:61:fa:23:06:62:04:20:e9:96:10:b6:ef:e2:
c7:dd:53:60:67:74:66:76:6a:a8:ea:90:40:0b:78:
52:b7:9d:bb:fa:fd:c8:4d:82:34:58:84:4c:18:91:
18:60:a9:76:a6:3e:77:87:7a:91:e2:f4:65:7c:6d:
97:66:04:23:aa:20:73:f9:8b:63:5d:d2:80:e7:9d:
a2:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:74:6C:9B:3F:4F:DA:75:4A:DF:3C:A6:E7:B6:5C:07:F4:73:48:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/672d570a-7dc9-31c3-a85c-e24c7824a8b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.25.74.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:29:e4:4a:ec:c6:d3:da:48:0d:d5:d1:2c:4d:34:75:63:d3:
da:6e:0f:ba:96:bb:8c:b6:78:6e:5f:3e:ad:2d:7f:76:83:10:
4f:a6:42:37:07:9e:c9:15:2a:3c:27:34:cb:93:1e:07:c8:f9:
54:a6:58:05:e6:84:ca:c7:38:bf:f7:8e:04:0b:b7:14:99:8c:
93:3d:0e:d3:e4:18:fd:34:24:d3:94:93:7f:93:a0:9b:0b:0c:
11:b4:cf:3d:cd:02:89:66:db:07:6c:5b:a5:e4:79:08:c6:16:
94:e9:ee:71:a9:5c:56:42:cb:7e:57:fd:58:5f:99:a3:91:a7:
de:2f:d4:22:68:b9:44:0c:ae:fe:ef:f1:46:a8:0c:3f:15:96:
b8:d0:47:86:ed:ce:da:f3:ce:21:89:f0:c3:bb:62:21:bf:83:
dd:31:70:83:cb:b7:5e:6a:9b:3d:fe:9c:34:8c:35:1f:93:06:
29:2a:9b:59:ea:0e:e9:5e:35:a3:36:89:fe:f6:dd:b9:e4:35:
21:37:46:49:5d:88:30:05:c3:cd:8d:4f:28:3f:73:d3:9f:b1:
fa:9f:3e:44:2e:3c:43:69:b8:89:3c:1a:72:28:54:fa:85:20:
35:8a:93:a9:26:b9:66:1c:92:d7:13:72:95:da:de:a2:30:58:
a5:6f:75:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:27:48 2026 by rpki-client