
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8731e885-f290-3d64-82ae-df38b3b0f7c7.roa
File: 8731e885-f290-3d64-82ae-df38b3b0f7c7.roa (raw, json)
Hash identifier: zuG5UhAY5XOh2bNyWpu9C9AmhPum5uNuyBU5iWy26Mg=
Subject key identifier: D5:86:34:A2:B5:C7:35:E1:4F:39:36:92:EC:27:26:F8:01:4E:F4:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CA0620B1F0DB8151FD4CDF290
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8731e885-f290-3d64-82ae-df38b3b0f7c7.roa
Signing time: Sat 24 Jan 2026 02:00:31 +0000
ROA not before: Sat 24 Jan 2026 02:00:31 +0000
ROA not after: Fri 24 Apr 2026 01:00:31 +0000
asID: 7725
IP address blocks: 73.43.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a0:62:0b:1f:0d:b8:15:1f:d4:cd:f2:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 24 02:00:31 2026 GMT
Not After : Apr 24 01:00:31 2026 GMT
Subject: CN=21754016-ed4b-4f44-9aed-034f45a91f65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:80:77:33:64:61:e0:a2:32:74:5f:ef:38:19:69:
73:70:65:c3:e3:4f:11:cf:72:18:83:fc:ad:4a:c5:
63:b5:10:99:48:78:71:39:e1:d8:dc:d7:95:06:5b:
cd:9f:d9:d3:af:d1:94:30:cf:2f:ec:ab:42:59:5d:
6d:22:52:04:8a:df:1c:59:73:d0:be:db:99:3f:ec:
06:29:e5:36:b8:cc:4b:81:5e:b6:76:4d:e6:16:1b:
c6:72:72:76:2c:8a:95:1d:ce:59:6e:b2:83:7a:64:
2f:62:65:a2:29:4f:7f:58:23:7a:62:c4:a8:a1:1e:
14:e5:0f:4b:35:e2:20:0f:12:c2:3b:84:ae:55:17:
4b:4a:03:59:a3:cf:51:32:bf:5f:54:c0:14:3a:a5:
ac:b2:36:95:73:ca:0f:95:4f:7d:11:5c:08:49:16:
65:2a:43:a5:02:d9:ee:de:22:69:58:38:6f:f4:a4:
73:7d:4b:e8:26:52:05:2e:71:12:f9:26:aa:45:bb:
3e:5e:33:de:47:8c:d6:49:5b:55:ca:6f:c4:92:bc:
81:e7:b6:fb:20:78:7e:0f:2d:24:b8:ba:23:98:12:
bb:b1:9e:3d:03:32:90:7b:f1:9b:63:62:aa:68:37:
26:ac:c0:85:de:41:00:96:9e:95:ea:fb:41:d3:d1:
f9:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:86:34:A2:B5:C7:35:E1:4F:39:36:92:EC:27:26:F8:01:4E:F4:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8731e885-f290-3d64-82ae-df38b3b0f7c7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.43.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:d2:dd:f3:1b:c0:3c:fc:d4:48:a2:17:99:c3:86:87:27:9b:
0d:1f:f7:11:e8:21:1e:fd:e1:ca:cb:10:96:13:df:56:de:67:
a0:05:9c:4f:f9:2e:3b:d7:be:89:6a:cf:85:6c:5a:76:dd:82:
9c:a1:78:4a:3b:80:71:eb:0d:56:48:e6:24:83:39:32:b3:9e:
53:80:d2:cf:78:8f:66:25:a2:ac:38:7a:36:8d:d2:39:ac:13:
23:48:a0:60:2c:82:6c:4c:61:72:e6:4b:74:2b:fa:6d:3d:99:
a7:58:25:eb:7a:03:6c:2b:22:30:5f:83:37:e2:6f:6f:0b:61:
14:ff:26:5d:2d:97:d6:20:39:a8:d9:59:ba:53:3a:e5:d2:59:
22:c2:17:66:09:f2:13:70:91:df:fe:75:c1:40:9b:03:6c:a4:
ed:b5:17:53:12:c1:7e:b9:f1:be:ad:d8:4f:d8:0a:48:ce:d3:
da:d8:aa:74:a6:f0:4d:e7:21:b8:06:c5:b4:e6:0a:90:bb:56:
2f:4f:0a:4b:7b:45:8f:72:b8:ac:93:85:02:d2:54:81:0a:f9:
f9:c3:13:82:61:b4:06:02:6b:7e:a2:9d:12:71:45:7d:29:6b:
f6:a6:44:17:33:b9:00:a3:27:02:09:69:57:40:ef:94:89:c1:
d2:b3:13:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:56:57 2026 by rpki-client