
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86798da0-4513-33e3-9e9c-0da0cb59098d.roa
File: 86798da0-4513-33e3-9e9c-0da0cb59098d.roa (raw, json)
Hash identifier: afc4fzyQwwt7KFMGOvmOJtFxsiz/GllmLTppbX/zUk0=
Subject key identifier: A6:81:83:D8:C0:B5:A2:A4:91:2C:E2:6B:85:05:32:F4:EC:E1:E7:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58EF02F3896F25A29E3380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86798da0-4513-33e3-9e9c-0da0cb59098d.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.70.126.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:ef:02:f3:89:6f:25:a2:9e:33:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=3d90c414-47ea-40ff-b7c9-c99b44b3f730
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:1d:d7:14:2a:9a:2f:3e:51:4c:7c:66:38:7a:
f2:5f:66:48:8c:db:b8:87:77:9a:8c:ee:61:29:95:
5d:67:cb:cc:1f:8d:0a:d2:22:44:1d:ce:1c:63:60:
05:61:5d:12:5c:e7:08:f7:0d:ed:27:4b:26:42:97:
37:63:48:c1:e0:7e:fa:fa:c7:05:2d:5c:64:d5:cd:
6c:0d:74:45:ff:1d:a9:a2:70:cb:77:eb:6f:e2:83:
cc:9d:65:fc:bc:27:b9:8f:84:15:5f:d2:5b:1a:8d:
bc:80:a7:41:88:19:e1:52:35:20:37:95:c1:21:f9:
23:c6:7c:88:7d:e8:a6:f3:9c:f7:64:d0:68:39:9d:
a1:d4:d4:8e:a2:a9:6a:7e:6f:71:ff:56:30:01:63:
68:1d:2e:34:45:5c:27:e3:b0:0d:53:cb:7a:20:f0:
8a:20:ed:b9:8a:fd:f9:89:19:e3:b0:be:53:0c:69:
e1:35:cb:83:ed:17:07:d3:0a:53:3d:81:0f:96:f6:
a2:d0:d1:5d:68:86:36:31:d9:c7:f9:54:24:db:9a:
be:5c:76:5b:7d:45:ce:e5:97:44:41:2b:af:82:1e:
d3:16:2b:48:60:90:71:19:de:c5:ef:c4:08:82:6a:
aa:a3:bc:b7:13:24:93:b9:e3:f9:78:45:f1:f6:00:
13:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:81:83:D8:C0:B5:A2:A4:91:2C:E2:6B:85:05:32:F4:EC:E1:E7:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/86798da0-4513-33e3-9e9c-0da0cb59098d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.70.126.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7b:02:1b:b9:9c:d6:7b:14:d5:75:2d:93:64:97:68:83:f9:1b:
50:37:41:56:45:20:18:bf:0d:47:2c:24:fe:3b:64:7a:67:12:
65:da:70:dd:c6:8d:1d:a1:fa:e0:0c:c7:1c:33:ef:12:3e:eb:
57:25:33:7b:fa:06:79:e3:d4:e2:87:26:f1:35:e9:b3:2c:58:
91:70:58:6f:42:ca:44:a0:50:af:2d:67:63:af:ef:62:01:a8:
45:9b:10:32:94:19:7d:73:14:b8:9d:e1:72:63:58:20:dc:fc:
53:26:a1:88:49:b6:16:cb:d4:7a:6d:1e:10:5c:11:f0:75:81:
cd:83:f8:77:7f:c7:4e:3e:27:b0:a1:7d:6f:12:c8:b3:71:eb:
3b:95:c7:a0:d1:eb:38:40:37:40:9a:af:bc:17:fe:60:15:0d:
49:c2:a7:c8:2e:5a:90:b6:6c:c2:52:13:60:a1:90:31:e3:5d:
72:c6:b7:51:f2:c8:57:5d:9a:30:98:ec:c9:4e:d1:a8:43:03:
95:ce:5c:f7:68:e0:80:d4:e4:e0:5c:91:40:7e:b1:6a:81:9d:
86:6f:33:f5:d8:5a:18:35:ab:e2:a4:3e:2d:4b:39:8c:42:a5:
69:cb:c1:1e:13:9d:98:01:3a:ed:f9:03:f6:df:32:3d:f1:11:
4a:8d:e9:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:57:04 2026 by rpki-client