
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa
File: cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa (raw, json)
Hash identifier: kGnNKqq+5LurjWu5VU8aVwvxMke+ovIEjWgZQSk23Ng=
Subject key identifier: E5:D1:97:56:6E:E9:2E:95:C3:33:96:F7:8A:C1:86:76:C2:34:6E:55
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BBD6782F6E44B087E13140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 73.100.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:d6:78:2f:6e:44:b0:87:e1:31:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=218d80d1-372e-40f5-99cc-477ea6194e12
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:b6:38:5f:db:19:4a:50:75:ef:b2:95:04:c5:
02:f7:2d:15:c5:4e:e5:20:33:a3:a5:7a:43:31:04:
b7:69:25:82:c8:f9:08:e1:7b:bb:8a:af:23:5f:1f:
51:2b:68:85:f6:d0:c1:ac:85:04:be:0a:d5:e3:b4:
53:81:ab:6a:7b:a4:04:8c:e9:8c:ff:80:31:c7:44:
97:b0:e6:fb:e2:c4:26:9c:b7:43:ee:d0:0c:2e:93:
06:31:92:53:32:78:58:30:3c:fe:5c:29:24:b1:3f:
21:f7:43:5b:70:cf:db:ce:9c:11:1a:d6:89:a7:ea:
96:eb:6e:ab:5b:71:9e:57:4e:21:c3:79:40:82:45:
80:e1:f8:35:e9:4b:12:7d:25:48:83:fe:cb:6e:02:
fc:73:ac:ce:fb:91:87:47:68:b1:e1:75:33:18:94:
d3:20:81:16:68:d0:ff:6e:eb:78:99:9d:47:09:17:
89:b8:f2:2b:fa:58:7c:f7:37:40:19:25:ef:a2:dd:
9c:23:f1:53:3b:88:d4:1d:dc:ac:34:c3:7a:76:70:
92:73:05:05:dd:29:a3:f9:ca:dd:14:35:48:48:a8:
17:64:7d:50:02:00:e1:0e:d0:42:be:3d:44:a4:5c:
db:04:85:de:b9:0d:52:08:9c:78:6e:28:be:11:bd:
1b:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:D1:97:56:6E:E9:2E:95:C3:33:96:F7:8A:C1:86:76:C2:34:6E:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb7a7be4-facf-3ef1-bb9c-064f43f39bf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.100.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1f:e3:e2:20:94:93:dd:2c:43:00:fb:d0:34:ac:8d:2e:38:
e6:6a:ed:3f:e3:1c:37:be:c7:f9:43:e3:05:47:60:e8:a3:52:
4f:f1:de:b2:b5:b0:68:3e:91:ac:46:a9:ee:ab:08:d6:a1:6b:
f8:29:7d:df:88:d4:dc:61:7b:ca:8e:38:1a:58:b0:06:9a:41:
ee:fa:95:e8:04:e2:2c:fb:8b:33:73:97:45:76:e3:5e:74:61:
17:03:43:5c:73:5b:ab:bf:70:61:40:0f:bd:73:d3:14:4e:eb:
f8:c9:fb:9a:ab:e4:f9:47:6b:d9:8a:69:6e:58:bb:f0:3e:7b:
5f:39:64:9d:4a:93:b5:4b:94:22:41:76:90:8c:19:b1:ac:69:
ca:31:2c:50:be:11:aa:b1:6c:23:b2:32:2e:36:14:5e:ed:c3:
a2:06:72:98:06:44:1f:7d:ba:b4:89:ea:93:6f:c2:31:d2:89:
87:f7:4d:99:b1:b4:85:05:1b:8a:e0:da:a4:b4:0d:dd:d1:53:
01:73:cd:c3:eb:6c:05:c2:bd:7b:6f:5c:f2:c0:2b:77:62:bb:
49:f2:2a:03:3d:11:5d:c3:34:7e:af:fb:67:1a:1a:59:e0:30:
bf:32:bd:5d:99:3a:19:d1:ad:c9:b1:6d:8d:28:10:a4:18:c2:
ee:ae:2d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:33:26 2026 by rpki-client