
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/945a6e6c-b5c3-30dd-91f1-f8d4a7f77986.roa
File: 945a6e6c-b5c3-30dd-91f1-f8d4a7f77986.roa (raw, json)
Hash identifier: Tqpq7LkjEmL/byOIa4c2/fphRv9/yZZqfFP+bsDJDbQ=
Subject key identifier: E4:9F:7C:85:58:89:2B:A2:C3:57:3B:BF:FB:4C:9B:02:0A:5A:D8:FF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BBE183D1E1541C9F27DE00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/945a6e6c-b5c3-30dd-91f1-f8d4a7f77986.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 73.143.196.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:e1:83:d1:e1:54:1c:9f:27:de:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=bffdbcf9-4a7b-4dac-981b-86bd169b5491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:0a:4b:ca:fd:6f:ea:2d:0c:2b:7d:21:75:ea:
88:43:93:b5:ff:e1:62:62:35:49:cf:5d:d1:87:43:
3e:70:ac:f8:3f:b4:07:c9:d8:e0:5e:d3:63:b3:0f:
af:cb:f1:12:03:c6:4b:59:48:39:2e:2c:c5:f0:8d:
96:c3:9f:9f:a9:cb:03:0e:1d:25:87:24:b8:b9:0d:
06:92:25:5a:15:53:2e:d7:a5:3f:3a:f8:bf:ce:b9:
c3:e9:e3:27:5e:34:f2:11:cf:cb:1a:c1:13:d5:c2:
f1:52:20:77:d9:f4:81:67:88:f5:29:90:24:14:05:
2b:7a:c1:97:df:03:c4:fa:6f:4b:90:62:94:95:c0:
65:4c:9b:79:7a:7b:71:d9:de:14:09:37:c5:64:57:
0d:dd:50:d2:da:d2:5c:08:4b:89:a9:c0:1e:1d:92:
74:45:fb:8f:97:5f:17:70:7a:63:58:c1:c1:08:77:
b4:5a:e4:9e:b9:63:24:30:31:a6:82:39:b0:25:32:
de:09:96:5a:f0:79:a5:05:dd:49:7e:3b:6a:95:05:
ae:5b:81:45:48:e0:fe:8c:14:17:f4:e9:b7:35:b8:
c3:a4:db:71:83:88:11:d9:94:0d:16:1f:a6:d1:92:
f7:2d:ac:e6:57:3c:88:c6:70:f2:9d:08:cb:52:f7:
20:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9F:7C:85:58:89:2B:A2:C3:57:3B:BF:FB:4C:9B:02:0A:5A:D8:FF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/945a6e6c-b5c3-30dd-91f1-f8d4a7f77986.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.143.196.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:d3:4c:fb:e8:3a:af:f4:29:9e:3c:f9:78:6b:a9:2a:39:b5:
e8:b4:95:cb:70:2d:d9:62:d6:0c:37:b4:1b:ac:3b:73:18:2c:
a9:4b:55:eb:76:c2:79:e7:0b:5a:21:22:af:65:0b:87:2b:74:
1a:86:c8:de:eb:72:8b:e3:6e:7e:a7:ab:15:aa:6a:2b:4e:1d:
98:c1:af:c7:81:74:4c:a1:4f:6f:7d:0e:88:7d:19:29:52:50:
6d:37:39:b9:6f:10:24:c0:49:67:db:c7:3d:36:43:1e:dc:fa:
7e:1a:d5:fc:32:12:55:c0:cd:ad:c9:21:de:60:d6:60:30:e2:
fe:ce:df:c8:b1:8b:47:28:2f:53:dd:55:da:13:5e:87:80:e9:
03:16:c6:d7:83:d3:8b:05:3f:2d:eb:1b:48:7b:a9:c8:2b:90:
32:8b:93:ef:62:4c:3f:d8:b5:4e:a5:03:eb:a8:a8:29:2b:88:
75:50:62:f6:4c:84:09:e8:40:80:dc:40:f2:b7:c3:5c:46:21:
36:50:bf:a5:53:96:48:3c:05:55:2c:ca:5f:2e:19:cd:ba:35:
1e:8c:09:63:37:2c:9f:63:b1:94:dc:0c:d2:a0:05:c1:83:cd:
06:63:7c:07:e1:bd:c4:32:d0:40:5f:06:e6:b3:89:b4:4c:1c:
a9:ce:9a:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 18 00:03:16 2026 by rpki-client