
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa
File: 90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa (raw, json)
Hash identifier: 2Xg+tejJt+y8rMExSn3v5vi4W6a/yCoP8dLWQ9f0gac=
Subject key identifier: E1:F1:2E:E5:FE:57:EA:BE:30:BB:77:53:B1:69:DF:37:DD:7E:B8:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5D8969000C777F9BA95D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.189.128.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5d:89:69:00:0c:77:7f:9b:a9:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=10a6095d-37e5-405e-af8a-28f9a8d08e76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ea:3c:b1:58:16:d1:3d:25:c4:da:2e:6c:72:
2f:5e:d8:b5:50:62:bc:3c:62:cc:1a:f8:dc:d2:c7:
2b:8f:18:74:52:85:02:6f:4b:9d:eb:88:97:8e:47:
ac:47:32:95:f2:4f:0e:99:8b:b4:3a:da:df:ee:ba:
d1:91:d9:bc:9e:d0:04:6b:38:57:50:3c:a9:9a:03:
5d:c8:59:cb:6b:01:52:94:e6:fc:4d:52:22:9e:95:
b0:c9:30:4b:c6:81:84:64:ba:4a:57:7f:ec:4a:3f:
cb:16:a2:18:84:2c:b6:46:3c:87:c8:2a:a7:31:62:
eb:39:e9:e9:9c:14:0f:e4:b6:fb:ab:9b:c4:93:82:
d6:c9:4e:37:b0:28:7b:0f:a5:6d:2b:2e:be:d8:92:
56:c0:a9:d5:7d:1d:01:a3:7c:22:2e:41:62:a6:d8:
e7:ef:d9:cd:5a:8f:a5:1e:85:ab:55:16:8b:8a:59:
1e:e7:e8:8d:1b:97:15:9f:28:59:35:80:72:3c:91:
cb:bf:74:a9:d1:3f:9f:d5:b7:3d:a2:fa:e0:79:3c:
7c:58:91:c8:7f:57:ce:81:90:ae:00:92:dc:18:cc:
33:64:ee:af:8d:64:a2:96:46:1e:d8:28:38:e1:88:
d9:3a:da:1f:0c:0b:1a:40:00:3a:76:3d:d8:f1:95:
16:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:F1:2E:E5:FE:57:EA:BE:30:BB:77:53:B1:69:DF:37:DD:7E:B8:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90efab25-1ef6-31e6-85e2-2f2eb349ab3e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.189.128.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:d7:bd:45:63:7e:1b:7f:30:a1:53:87:e1:5e:0f:40:cf:da:
71:49:3d:2a:2c:23:58:3b:05:e1:c4:49:14:f8:e6:a1:e2:21:
05:dc:99:77:01:4f:ef:85:16:5d:21:ed:d1:cd:f2:a3:dd:ac:
c3:d5:e7:90:b3:49:ad:92:df:c3:aa:eb:4e:33:dd:71:16:2a:
2d:e8:36:c2:97:16:3a:6e:fb:19:0c:52:36:ea:33:e5:c9:e4:
dc:16:d0:00:b6:54:6a:eb:15:09:7d:51:3c:71:be:98:7a:86:
cf:f8:7e:8f:aa:ea:7d:34:d3:71:0c:9b:e5:98:88:5a:fa:b7:
31:ef:c7:5e:fe:d4:c9:7a:26:21:c5:ad:ed:8e:15:15:04:40:
bc:e6:a2:92:c4:6a:61:b5:55:fd:b6:67:04:ea:7a:1a:f1:a8:
f1:d2:9c:fb:28:0c:8e:2f:ce:f2:85:c4:b6:ac:13:14:19:12:
52:d5:9a:34:96:94:20:ca:39:89:09:50:ea:be:c7:9f:0b:ad:
f9:7b:38:0d:4d:8a:96:bd:f9:a6:34:79:0c:0e:f0:08:e3:e9:
d9:77:d2:39:1a:a0:d7:ec:30:fd:1a:e8:e6:38:93:a9:60:fc:
85:a3:8f:ef:52:de:c4:bc:22:a9:56:fa:57:f3:ea:96:42:74:
e9:50:26:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:10 2026 by rpki-client