
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a778b594-9351-324d-a748-5a2546ef7c21.roa
File: a778b594-9351-324d-a748-5a2546ef7c21.roa (raw, json)
Hash identifier: nYeXnvTti9kVhaC4ZqK8DysKWSgI2r16uhmjybY2WP0=
Subject key identifier: C9:22:5A:68:5E:4E:D4:A0:EB:6C:26:77:BF:1C:95:72:C7:47:91:8A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78BF70B4E9B58A13CE41D40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a778b594-9351-324d-a748-5a2546ef7c21.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 22909
IP address blocks: 73.58.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8b:f7:0b:4e:9b:58:a1:3c:e4:1d:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=815d766c-dfc8-4c9c-8237-5caec26a398f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:7f:54:16:69:bc:9d:9a:98:43:39:37:54:a4:
0c:fe:b2:36:16:34:38:40:28:e5:5f:99:96:3d:67:
92:2e:ec:41:27:e7:bc:8b:ac:c3:78:54:30:aa:11:
a6:51:83:c9:95:f8:cd:12:b0:a2:1c:86:d3:db:2d:
35:98:b0:34:95:0b:46:31:f8:7d:e4:33:80:72:da:
73:76:19:c6:5b:82:0e:3b:a4:90:ef:cd:98:ca:09:
97:1c:7a:ab:19:3f:07:ff:98:6e:76:3f:cd:5e:0b:
81:03:d3:d7:f5:bf:02:ae:fa:d4:9c:f1:c2:d0:c9:
b2:8c:3d:c5:21:8f:bc:41:52:9d:ae:da:b8:66:74:
f0:5d:bd:e6:a0:9a:96:82:78:e0:21:42:e2:0b:4a:
ef:6c:d5:8c:c7:5d:1a:d6:82:a3:3d:74:35:63:02:
5c:e0:de:a8:77:c8:2f:0d:09:9b:52:8b:b7:4b:8f:
7b:89:17:46:1f:4c:d3:33:1e:42:42:b7:d9:22:ca:
03:09:21:e6:79:0f:77:eb:e6:d4:83:4f:37:4e:67:
b7:13:c3:f5:11:62:0b:a6:90:89:ed:3b:5c:3e:1d:
c0:55:a3:34:5b:fe:f5:67:2d:4c:2a:a3:3d:41:54:
96:15:95:20:b4:8a:98:b9:aa:a4:d7:fa:55:cd:0d:
c6:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:22:5A:68:5E:4E:D4:A0:EB:6C:26:77:BF:1C:95:72:C7:47:91:8A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a778b594-9351-324d-a748-5a2546ef7c21.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.58.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:25:b5:f9:3d:42:a8:05:b9:63:47:a5:28:e3:f2:80:12:86:
7c:29:cc:85:68:93:2b:54:24:16:f2:e4:3b:16:af:3d:3c:47:
17:cd:bf:9a:b9:17:cf:21:a3:af:61:81:8c:de:b0:8f:75:1e:
76:43:6b:68:5d:5b:dc:ca:54:e8:2e:13:99:83:cb:c2:19:7c:
bc:11:66:11:25:4c:7b:e3:68:32:45:60:54:db:6f:16:8e:9b:
b1:26:42:b7:9c:c4:ef:87:70:54:29:93:47:86:ee:14:89:db:
aa:a8:37:7e:dd:12:20:f5:32:bb:08:14:d3:4a:b3:89:0c:94:
cf:37:37:f2:2d:9c:bd:23:37:b2:4e:67:79:26:d8:ad:44:78:
79:f3:16:54:86:22:31:1e:33:ee:2f:96:69:45:1e:4f:8a:c7:
40:ae:0c:a2:0f:9b:32:19:22:e5:ca:23:88:e4:91:22:db:f0:
46:fb:43:92:9a:a3:0c:16:72:90:6b:44:f0:73:46:10:01:bd:
6a:52:3c:8a:89:1f:75:cb:77:22:09:06:8c:68:8b:74:32:8a:
05:ae:16:64:42:25:cf:45:14:53:44:30:25:1e:66:c7:5a:b8:
1f:89:6a:b0:92:95:bd:9d:70:af:c3:91:cb:f6:5e:43:3d:09:
48:e2:a6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:41:11 2026 by rpki-client