
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38fd81d-8a85-3abe-aee2-ccdc07eeedc5.roa
File: c38fd81d-8a85-3abe-aee2-ccdc07eeedc5.roa (raw, json)
Hash identifier: ERZxqwUjTuDm018OCgZQxwhC7K0Fo0fapermQBzuGbE=
Subject key identifier: D4:BB:8B:E3:62:A8:1A:FC:DF:FD:EB:44:44:7B:91:CC:38:A6:97:C5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58E17F3D84FB25CE4D2380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38fd81d-8a85-3abe-aee2-ccdc07eeedc5.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.222.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:e1:7f:3d:84:fb:25:ce:4d:23:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=35855d98-5edb-44f7-b748-258be23ff1e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:81:3a:e7:eb:a3:b7:a5:c0:11:b5:30:1c:
97:e1:17:ff:0c:b4:e5:99:82:d9:de:0f:ea:1a:f7:
8f:d7:e8:63:96:15:c8:a3:17:07:9a:c6:45:f0:83:
9d:71:91:73:97:9d:81:d3:c6:4c:43:1d:ce:ab:d9:
a9:f7:a3:99:3d:fb:0f:a7:94:58:43:d7:20:de:7b:
0c:0a:80:8c:b1:88:52:54:d1:2e:09:6b:77:0c:3d:
b4:2d:35:3a:c8:56:c9:83:be:fc:62:3b:eb:91:d1:
fe:73:8b:5e:c0:c0:49:f4:49:6c:7d:45:a1:ca:25:
8c:ec:11:bd:58:d1:c7:4c:54:0d:f7:07:2b:71:64:
96:10:fc:5b:55:a9:5c:e8:56:b7:45:1c:5e:06:ff:
5b:3d:4c:b8:d4:b9:76:12:4f:25:73:0e:49:e9:e4:
03:fd:f8:fd:4c:76:13:4a:9a:08:b4:63:c5:d6:6a:
f3:58:6d:3d:33:bd:7e:cd:65:10:df:73:39:d5:98:
26:f4:96:18:eb:0f:cb:0b:36:de:37:87:e3:6f:30:
da:f6:31:97:d5:57:ab:47:06:ee:50:96:a9:09:95:
56:42:47:a3:66:96:37:8e:00:35:85:8b:97:12:17:
d2:d4:01:35:9a:da:8a:8a:b2:b7:f1:1d:c2:67:5d:
db:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BB:8B:E3:62:A8:1A:FC:DF:FD:EB:44:44:7B:91:CC:38:A6:97:C5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c38fd81d-8a85-3abe-aee2-ccdc07eeedc5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.222.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:71:d3:7c:d5:04:ba:5e:0b:fd:01:4f:a5:53:3e:50:cc:da:
95:b6:50:40:02:cf:1f:47:de:c6:8f:76:91:eb:b8:86:66:3d:
87:e3:50:f4:9d:81:cc:bc:67:04:ff:0c:48:9f:aa:45:b9:f5:
59:b9:b8:83:a0:be:5f:ad:4a:7d:4b:e3:3d:cd:21:2c:d1:81:
78:0c:b1:ce:c3:f9:c1:da:cb:f1:09:25:df:1d:59:c3:9b:94:
20:61:97:2a:8a:18:04:f8:30:70:96:bd:59:f4:78:fd:27:46:
a5:05:50:9e:96:0c:d2:6d:51:a5:76:2b:b3:df:62:ec:d3:2e:
77:97:c1:bc:06:d4:83:da:67:5e:43:16:71:27:72:54:e6:03:
c4:7d:04:70:8a:cb:e0:c7:c4:7f:ca:54:f6:81:bf:50:25:a5:
9c:eb:0e:de:1f:26:d9:2a:cd:92:27:30:45:50:db:32:90:75:
53:58:b2:71:59:2c:fe:ea:62:c0:62:5b:2d:a0:85:81:c7:75:
30:a1:6f:01:d7:86:18:54:06:bd:62:eb:4e:cc:48:25:60:c4:
b8:8a:3d:a3:21:59:14:4c:e1:1e:dd:87:75:72:07:8d:fe:9d:
5d:d9:e2:1e:e3:86:c4:b3:8d:56:59:64:0c:75:4a:cb:8e:03:
94:aa:38:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:45 2026 by rpki-client