
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bafe442a-e590-3c43-bafc-f2689c5f0bba.roa
File: bafe442a-e590-3c43-bafc-f2689c5f0bba.roa (raw, json)
Hash identifier: OxO5/SOjdryvVLpdeh2068VUdYELIQzy5DONbh9Nvrw=
Subject key identifier: 04:43:BB:FB:61:2D:BB:70:62:AF:F5:39:78:97:EE:E9:EB:C6:5F:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5C3B09090D8A8E45EBFA70
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bafe442a-e590-3c43-bafc-f2689c5f0bba.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 73.246.44.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5c:3b:09:09:0d:8a:8e:45:eb:fa:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=e0b658c5-9283-4698-a694-3390b22d1de6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5b:5d:78:d5:d7:a8:dc:bf:86:60:8b:92:74:
5d:36:f7:ce:a8:4c:02:30:57:c9:91:72:6e:0c:5a:
84:da:fd:e8:51:cd:29:35:fd:98:28:a4:dc:3c:dc:
0f:78:07:c4:2a:8b:59:f5:5a:07:e7:23:43:c6:d5:
1a:dd:e3:d0:f0:c5:8e:21:b6:c3:3a:46:98:5c:d4:
69:cb:67:8c:f8:95:9d:79:ee:6e:6e:cf:c3:11:19:
a3:33:f7:f4:15:07:8d:56:49:b6:b4:d3:38:c4:41:
74:a4:74:7f:cd:4a:70:6b:c7:85:b1:b8:9b:05:6f:
d2:ed:ff:f2:0b:62:90:76:40:46:2b:5a:a8:47:91:
8c:eb:5d:5a:02:08:69:4f:1c:5d:55:45:3c:0f:0a:
ad:e7:73:6c:76:ff:83:ca:46:14:46:17:c1:b6:97:
c7:29:a0:10:90:14:90:92:4e:13:19:92:ed:a7:0e:
48:a5:95:53:a1:f0:55:8d:da:ca:b7:15:1c:66:b8:
28:f7:09:7b:f5:94:5f:dd:e5:dc:29:5c:86:b9:c2:
ae:d2:91:00:bf:10:88:5a:c0:15:d3:34:be:23:10:
7c:72:9e:52:af:62:c8:b7:42:cd:98:ff:09:dc:71:
ec:bc:d7:5f:97:5f:57:cb:36:3f:b3:14:81:49:f4:
18:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:43:BB:FB:61:2D:BB:70:62:AF:F5:39:78:97:EE:E9:EB:C6:5F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bafe442a-e590-3c43-bafc-f2689c5f0bba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.246.44.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:c7:6c:36:ae:c3:0a:78:f5:8b:c1:c7:9a:8c:d2:33:bd:88:
19:ff:65:13:ac:63:aa:f8:e1:3b:ca:20:82:39:6f:3d:59:9f:
ad:8f:b3:1d:6e:0e:1f:15:09:38:2e:24:33:53:f2:76:ab:d6:
99:32:f9:19:bb:a5:ce:6c:b3:b7:4f:31:70:46:5f:c2:c1:e1:
00:18:46:40:c4:68:40:75:7c:6d:9c:f4:ea:76:6a:51:82:90:
21:02:e0:94:41:73:8f:c5:20:5d:7d:68:86:54:eb:3a:63:56:
aa:dd:77:e1:48:2b:3d:12:2a:35:9a:51:c0:f0:c9:00:f9:0b:
e6:2f:8b:02:61:64:bd:ae:ad:34:ea:e2:73:29:ef:2c:46:7c:
95:37:84:78:a1:ec:f3:dd:77:6b:01:34:99:b9:a6:85:5c:74:
87:e3:1b:0f:6c:ba:52:08:f3:69:11:e1:7c:83:9a:15:34:b3:
05:d2:59:64:18:bd:21:76:a4:67:b1:ca:d7:51:3a:ed:75:ae:
da:96:81:db:17:a4:d3:aa:55:e2:22:bc:fd:61:33:c0:f6:d0:
92:60:d5:c9:3a:20:67:88:c4:59:7b:b1:38:4d:6a:57:f2:ed:
6c:45:f2:d2:bf:da:3e:ed:e0:77:8b:e5:b1:0f:66:7a:0a:13:
3d:64:86:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:30 2026 by rpki-client