
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd892dfa-6038-31c7-a020-66cf99ca6698.roa
File: cd892dfa-6038-31c7-a020-66cf99ca6698.roa (raw, json)
Hash identifier: acDEzR93TdWId1v47N54/nCa1kQIv9jTLiWBkmhObOQ=
Subject key identifier: 8D:0D:8B:33:18:57:5F:77:38:DE:58:9C:C4:83:AD:FB:04:EB:06:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F11A0899932862E120D1DF680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd892dfa-6038-31c7-a020-66cf99ca6698.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 73.222.238.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a0:89:99:32:86:2e:12:0d:1d:f6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=03d8f613-53c6-435d-9cab-39261cc8e621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:19:9b:ea:4c:f9:6e:20:56:a8:a2:9f:6a:23:
d9:e0:e3:41:2c:8d:2c:5d:8b:b3:67:7c:d4:47:9d:
1e:c1:c3:34:a1:6f:2a:cb:3d:35:6b:81:4e:b2:99:
1c:bc:e7:37:5a:9f:20:58:e0:ab:53:4f:d9:97:47:
f5:c4:3a:95:55:54:9a:31:0c:71:37:9a:a9:58:57:
19:8c:74:17:35:ec:fc:59:70:2a:51:bc:9f:31:bc:
53:a3:bb:66:73:72:a4:e7:65:1d:9f:b7:96:50:c7:
60:1c:2b:24:fc:76:fe:15:c1:b6:48:06:c9:d1:a8:
14:b4:8f:69:bc:9b:74:99:a7:d5:a5:93:68:5e:4d:
0a:2e:8c:34:0a:96:aa:ea:a3:d7:97:14:47:ae:fb:
7f:0a:49:6f:8b:61:8e:e2:f3:a4:36:80:25:92:0e:
7f:c6:c6:4b:fa:58:aa:9f:24:3c:4c:3b:08:2b:ee:
0f:1d:98:51:ef:34:93:09:4e:47:0d:82:13:c8:7c:
48:90:65:05:b9:3e:91:b8:44:71:50:e5:ca:f8:87:
c8:c5:4e:16:82:ba:5c:a6:be:a6:3e:a5:bd:c3:07:
af:50:a7:91:2c:6b:2e:69:d0:d4:9e:f9:72:a0:f0:
60:b1:5d:27:3d:25:65:dc:4d:fe:1f:b4:b0:10:af:
d2:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0D:8B:33:18:57:5F:77:38:DE:58:9C:C4:83:AD:FB:04:EB:06:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cd892dfa-6038-31c7-a020-66cf99ca6698.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.222.238.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:a3:e6:27:8e:51:36:50:33:2c:7c:96:ff:fb:9f:f8:74:44:
0e:7b:5a:3e:c9:74:d9:75:21:e6:ed:4e:47:99:d9:17:dc:0c:
f0:f0:52:e0:5d:aa:85:2c:11:37:9c:35:3a:69:26:19:b9:21:
f5:b2:70:26:43:42:29:94:44:93:1f:fb:a1:75:27:df:10:56:
34:c8:1b:20:59:4b:c3:f9:4c:e5:bd:10:a8:d0:7e:e8:bd:c1:
5f:10:38:93:e5:25:58:8c:a3:84:8e:e9:bb:d2:e2:fd:45:81:
8c:b1:45:37:45:0b:dd:fe:26:4c:bd:26:61:51:36:ae:f7:79:
3a:f9:c2:49:4d:0f:f9:e0:a8:71:9a:d1:e4:01:21:ec:f8:df:
7d:c5:87:73:92:8a:77:5b:46:a9:68:2b:38:37:dd:cd:5c:27:
ea:90:58:37:78:1c:96:82:12:79:b7:d3:70:67:dd:d6:40:f9:
86:75:f0:a7:c1:64:4c:43:60:9e:00:57:83:a1:42:25:cf:7e:
63:d0:30:0a:f6:47:be:0a:02:d1:0e:d9:cf:6f:51:24:01:b4:
93:48:54:f9:1c:d4:0e:a1:d2:a1:30:19:c8:f6:88:e4:0b:72:
6c:29:e9:4a:4d:49:4e:f0:cf:89:4e:f5:1c:f1:65:36:0a:c9:
93:18:de:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 06:18:55 2026 by rpki-client