
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfb5d977-884f-3908-98b0-8fbec847ed1c.roa
File: bfb5d977-884f-3908-98b0-8fbec847ed1c.roa (raw, json)
Hash identifier: /YKXMjFLj8w0eGfw5QmC+YikgVWTOJ/bb9n5Catx6WI=
Subject key identifier: 32:F8:86:E9:D4:C1:F1:1B:6A:49:EE:51:A7:7E:F8:70:94:B7:6E:D7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862C973C23D5E03F73DFC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfb5d977-884f-3908-98b0-8fbec847ed1c.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 73.144.96.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:c9:73:c2:3d:5e:03:f7:3d:fc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=17e54e43-508b-479b-b11a-2525e8077c3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:3e:bd:8e:73:37:27:eb:7d:a5:be:ec:f6:b9:
2c:d8:2a:09:7a:e2:c6:a8:f0:32:ed:61:7b:06:b4:
7b:93:79:6b:3d:23:96:dd:9b:f4:da:ea:1f:93:99:
e0:55:43:68:67:d4:d6:5f:70:26:57:00:4c:33:cf:
41:82:f8:7c:91:ef:47:85:a0:d2:ef:a9:d8:3a:af:
2b:0f:13:71:a8:4d:29:ae:04:dc:6c:51:4a:5f:83:
02:1a:c4:92:74:d0:bd:c6:bb:24:53:3d:df:96:5a:
f9:c1:45:a3:23:02:93:52:b0:c8:42:91:bf:d9:a9:
47:aa:54:63:7a:30:49:72:e4:7b:38:a1:c0:86:af:
45:98:95:6d:b1:8b:0a:7a:b0:14:77:f0:07:41:ae:
04:28:e4:1a:21:47:f0:7a:f1:74:a4:36:6b:55:9c:
38:91:7f:e0:fc:82:f4:70:ed:5d:19:e8:ad:b8:b7:
4e:02:12:eb:4f:f4:1c:d7:b2:44:23:6e:3e:74:a9:
62:8f:e8:73:3c:bf:95:50:71:f9:f7:ec:35:1d:d1:
50:33:c5:64:e4:99:5a:1a:49:85:2c:ae:b3:de:d8:
8d:91:37:7a:5e:3d:a5:43:28:07:db:0e:ac:25:3b:
c6:33:ca:92:02:87:15:aa:16:a2:4b:b2:ee:71:f7:
b0:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:F8:86:E9:D4:C1:F1:1B:6A:49:EE:51:A7:7E:F8:70:94:B7:6E:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bfb5d977-884f-3908-98b0-8fbec847ed1c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.144.96.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:37:66:ab:14:c8:c3:37:b0:ef:01:86:2a:6f:94:5c:3d:cd:
f0:2b:42:a0:82:a1:04:18:d8:4a:26:85:92:84:a9:c3:df:3f:
be:d1:10:c8:c6:f1:0a:5b:55:19:a2:93:8a:96:4a:cf:ea:1a:
88:17:06:29:27:52:46:d1:21:a0:c9:bf:b5:43:86:29:0e:3b:
7e:56:c4:63:40:56:59:a6:b6:04:ed:a1:a9:7a:67:ab:1c:fd:
47:11:1f:c1:94:ad:fb:5a:5d:f8:51:8e:c5:ef:01:c3:e6:03:
e4:2e:a9:6b:70:31:e4:fb:97:52:96:5d:1c:a8:02:06:65:9b:
be:5b:ff:52:d2:c4:0c:72:49:f0:a7:a9:f9:1e:00:cb:a1:2e:
1f:ff:86:61:58:d8:38:f9:27:42:96:7a:7a:ee:0b:69:61:59:
66:c7:02:37:82:71:b8:a8:ed:30:5f:00:aa:69:8e:d9:c8:68:
b3:35:42:65:41:d3:32:ab:e5:cc:f2:73:53:d6:97:76:79:6b:
8b:b1:47:30:12:38:4d:8c:f4:0a:2e:4b:c5:a9:1a:6c:8e:2c:
17:00:f4:8f:b9:af:d2:fc:69:ac:a0:76:f0:71:36:f8:7a:02:
15:9b:ce:41:2b:d6:bc:57:83:33:85:86:1a:c6:fa:6d:50:b1:
2a:c3:22:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 05:33:08 2026 by rpki-client