
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3cc5d0-7d1a-366a-803f-e891fd236616.roa
File: bc3cc5d0-7d1a-366a-803f-e891fd236616.roa (raw, json)
Hash identifier: wt/iUEzT+Qw2yrQKR+6r9hwzyriwhGogrSA8LXyUWV4=
Subject key identifier: 11:A7:B0:83:B6:02:3F:00:E7:42:D3:65:79:FA:06:53:3F:5A:31:D6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BADCF839BDEDB4979B3300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3cc5d0-7d1a-366a-803f-e891fd236616.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 73.61.152.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:dc:f8:39:bd:ed:b4:97:9b:33:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=fb173157-f1c2-4b6c-9be8-3da86b9c03f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:de:01:f5:da:72:91:05:f4:d1:75:9f:48:2d:
42:7b:49:f9:13:fc:7a:64:43:58:78:f8:57:73:5c:
f6:1d:31:c5:51:d4:be:5a:87:7b:a7:52:81:58:9b:
0b:92:1d:94:3b:0c:ac:89:bc:e1:ee:a5:c5:57:59:
41:61:db:62:a2:9b:2b:85:e5:20:71:35:53:e8:c9:
02:9f:af:aa:47:99:33:7f:df:f4:a0:cd:89:09:75:
c7:a5:41:8e:cf:83:bd:8e:34:a0:ec:67:25:f2:cb:
a7:dc:ec:7c:8f:48:7c:7c:96:6e:15:98:da:b3:79:
85:cf:a2:a6:85:a7:39:3e:1d:91:15:29:21:0c:4a:
71:d2:0b:93:17:bc:43:90:70:56:63:5c:a0:3c:51:
cb:f8:87:fb:c6:59:26:d1:63:04:d6:e0:00:e2:81:
c9:4d:41:bf:9e:69:05:7b:90:6a:f7:7e:b5:23:3f:
48:cb:75:4b:2e:54:cd:ca:1d:ce:24:96:28:5a:17:
bf:b2:f1:b0:de:7c:e0:40:c4:fd:21:f6:68:d4:88:
eb:27:d8:df:d2:3c:3b:a4:52:01:7b:32:2e:7d:f6:
62:bc:b6:e4:63:db:f8:56:1d:a5:a4:c1:cc:ad:be:
ad:b1:48:f2:2a:c9:fa:26:8e:0a:4f:fe:38:2d:3f:
6f:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:A7:B0:83:B6:02:3F:00:E7:42:D3:65:79:FA:06:53:3F:5A:31:D6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bc3cc5d0-7d1a-366a-803f-e891fd236616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.61.152.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:11:48:79:e9:25:a1:7d:b5:c2:88:cc:f0:67:0f:c9:ff:66:
02:9f:49:5a:1a:52:5b:63:d3:9c:69:95:19:ca:04:20:41:43:
16:c0:e4:87:5f:75:cb:ac:fe:5e:9d:a8:5e:ea:ea:31:de:cd:
11:64:de:e5:5d:33:17:f1:38:f0:92:23:92:5c:d4:bf:7e:f1:
4b:32:b5:49:21:32:c9:94:f4:8d:af:cc:03:87:95:65:93:78:
3d:84:2e:89:6f:27:5d:09:e5:61:6c:26:f0:c4:08:4a:16:55:
d9:6a:9a:25:06:d8:10:80:0c:61:c1:b3:ca:82:96:88:09:6c:
71:91:2b:22:ff:e6:16:a3:c9:47:3e:1a:54:f8:94:5e:77:5f:
46:99:87:55:eb:0d:62:21:32:bf:fc:c9:c7:c8:27:7a:f2:4f:
db:40:32:ce:13:33:73:ad:fa:d0:42:a5:ba:a2:52:b2:b6:45:
00:1d:50:95:6a:2d:bb:ca:ff:84:6c:b7:2c:63:79:3d:ba:14:
c2:08:49:d1:36:c1:e2:26:9b:9d:96:1a:a9:fc:ab:1d:f3:01:
28:b6:4c:a7:8e:07:cf:67:6d:60:0e:7d:da:53:33:c1:e3:f0:
eb:ae:e3:f6:7f:81:c2:40:51:84:af:d8:0f:98:e0:de:af:a7:
75:3e:3a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:00:37 2026 by rpki-client