
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ff10436-a6f0-3511-9546-50fc88cca711.roa
File: 9ff10436-a6f0-3511-9546-50fc88cca711.roa (raw, json)
Hash identifier: na8BVgpEebYrSRxZwWCQyoJXRSwtCZVqcZoMshNzFog=
Subject key identifier: 36:77:75:44:71:03:70:17:10:D6:96:0A:07:2B:19:77:AE:08:12:FB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E3DF5F64DDF566C987DC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ff10436-a6f0-3511-9546-50fc88cca711.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 73.158.216.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 16 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:3d:f5:f6:4d:df:56:6c:98:7d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=656a73da-1fcb-4134-89c2-2c867238913b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:97:10:2f:32:4c:53:fb:96:54:5b:a0:12:
b9:07:67:d5:f5:4d:e6:05:8b:db:58:26:f4:ea:7c:
ed:c2:20:87:b2:27:09:38:f6:e2:bf:94:5e:71:7b:
4f:84:c4:37:3a:be:15:6f:2a:d7:a0:28:2a:71:14:
07:f1:f2:8a:9c:c4:45:2c:0c:5b:67:0b:35:99:bc:
a3:61:05:69:2c:a3:8d:0a:6e:57:b0:5e:8a:02:12:
8a:9a:36:37:e0:e0:d7:b0:4f:06:56:7d:91:ea:d6:
15:a5:62:fd:9e:44:10:be:aa:13:3b:8d:1c:bc:cc:
e0:89:ef:44:f4:17:db:75:46:c6:50:6a:07:b9:64:
c4:57:9f:03:2d:e2:b9:e8:5c:e9:4a:a4:1f:34:4c:
59:54:53:fe:5d:3f:7d:2c:60:cb:21:84:a0:71:71:
ca:62:58:01:e0:f2:40:97:36:83:29:08:1c:34:b4:
7a:f4:06:1f:85:6d:b2:a9:36:11:76:db:70:6b:57:
d9:4a:17:da:61:3e:04:0a:6b:92:72:97:0f:52:2a:
99:8a:0e:d0:cd:b6:b9:9d:89:8d:d7:cf:4f:4e:67:
f0:db:12:19:44:27:7d:1b:fc:db:1c:02:99:21:03:
a1:57:6e:bf:f9:4c:02:5a:b7:8d:41:9e:3e:42:9d:
e5:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:77:75:44:71:03:70:17:10:D6:96:0A:07:2B:19:77:AE:08:12:FB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9ff10436-a6f0-3511-9546-50fc88cca711.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.216.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:66:8b:88:0e:d8:61:60:fd:ca:50:12:e8:1b:60:39:83:a7:
7e:a5:42:bc:fc:f3:b2:1e:05:75:a4:e6:e6:c8:75:b9:83:af:
60:11:bf:10:94:ec:6b:e9:85:33:f4:2b:ef:a3:0a:99:b5:a1:
cf:ab:d6:a8:52:e1:37:04:24:51:30:63:5d:70:9d:0f:66:79:
bf:3a:fd:43:a7:63:1f:95:dd:84:4b:cd:83:89:ba:e0:eb:4a:
df:71:2f:e2:98:1c:bb:ec:bd:19:91:5b:7f:73:37:0e:13:df:
c6:03:1b:1c:fb:1f:40:49:76:1a:41:26:73:41:e3:06:b5:c0:
9c:74:74:74:cd:34:df:f5:d3:9c:82:6d:06:12:b2:2f:fe:d7:
24:f0:7b:82:6a:16:a4:3f:26:34:3f:78:e4:c1:36:da:75:38:
34:ba:c2:94:04:2b:a5:82:28:e3:af:ec:ba:95:9a:e3:25:11:
85:04:1b:ea:ca:a4:49:9d:32:e9:f2:79:bb:3d:ea:f7:ef:15:
7f:ff:88:3a:8d:4a:3b:52:e9:d3:a4:c2:1b:bc:b9:dc:53:64:
4b:22:3f:63:89:ab:db:5e:30:d0:8f:a2:e5:c3:f0:46:e7:e1:
40:2f:1d:b4:27:2d:4e:bc:98:7f:e9:d6:55:80:b3:a9:40:56:
cc:30:ea:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 14:14:41 2026 by rpki-client