
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdd49868-7f62-32bf-a718-4bef4059bf5b.roa
File: cdd49868-7f62-32bf-a718-4bef4059bf5b.roa (raw, json)
Hash identifier: olZ2P7mZwKdTLUnL+pzuqmYS+laBcSqJ8/GDmpVcid0=
Subject key identifier: C8:66:F3:A1:6A:5D:40:80:37:E4:92:7E:3F:91:3E:48:E8:39:71:F1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58DF7281BA51DB6C03F700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdd49868-7f62-32bf-a718-4bef4059bf5b.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.222.144.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:df:72:81:ba:51:db:6c:03:f7:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b77d8b04-2aa6-48ba-afea-e6f201753d19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:52:c1:19:2f:13:04:f0:de:b1:ac:a3:ae:a1:
df:0d:fe:fc:d2:87:c7:86:6b:24:d6:13:04:cb:c1:
4b:25:d5:c0:6e:6b:ae:4a:a8:bc:f3:e3:64:7d:22:
b4:19:37:92:47:be:80:2f:ee:20:3c:3b:f9:aa:18:
b0:00:32:32:6b:b5:48:2e:9a:ae:13:c0:af:b2:39:
85:78:e5:ab:15:24:5e:3d:52:90:40:d7:35:c2:d9:
0b:98:eb:c1:47:89:79:25:cc:8f:a4:48:ef:ff:c4:
c6:dc:07:59:f7:f1:8c:df:09:20:0f:f3:00:96:34:
9d:d4:a2:d8:ca:80:cf:1a:04:62:13:41:35:d6:79:
29:46:fa:bf:ed:96:fd:b6:71:66:78:37:b7:46:b0:
1b:eb:41:87:02:1e:eb:d0:80:a4:df:e7:b9:ac:99:
e9:b5:a6:f5:57:f8:72:0c:63:49:01:78:94:f7:f2:
82:15:71:d2:8e:9d:0a:9a:61:de:7b:aa:f8:4c:1c:
bd:4d:b7:49:c1:4c:7b:a3:74:57:37:95:29:80:9c:
1a:1f:7c:65:50:9e:30:63:ec:59:e6:71:e9:30:af:
44:a7:83:b8:da:1b:22:6e:f8:e7:88:79:f8:a5:07:
0f:97:19:4f:85:53:51:b4:7d:c6:1a:d3:37:29:8a:
75:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:66:F3:A1:6A:5D:40:80:37:E4:92:7E:3F:91:3E:48:E8:39:71:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cdd49868-7f62-32bf-a718-4bef4059bf5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.222.144.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:69:82:01:3e:50:19:37:ae:3a:10:b2:7b:74:17:7e:8f:26:
7d:22:10:d2:49:c3:31:fb:8a:97:49:68:49:81:3d:8c:ae:47:
a1:41:a4:53:7f:5d:fd:d9:a1:bd:a8:e3:6d:63:b0:dc:fd:6a:
cd:53:2d:08:2e:44:b3:6d:58:71:2b:a5:51:bb:f5:ec:2f:0c:
5d:9b:97:1b:06:81:4c:7a:4c:d4:d6:1f:72:14:96:a6:08:63:
66:c4:3d:33:a9:ac:83:a0:5b:d4:31:53:7d:57:c7:5d:e6:a1:
14:eb:5e:98:ef:fe:df:69:1e:68:a0:cd:a0:4b:24:85:b8:5e:
47:9e:34:8a:cb:41:b8:f6:c6:c5:7e:04:08:e6:92:fa:fa:4c:
50:a1:85:24:46:7a:8e:d9:c9:26:f2:c3:a4:a4:b8:c3:eb:5a:
f6:88:f0:c3:8a:70:04:e7:db:a4:d4:57:66:4f:22:ff:dc:dc:
e3:7d:34:9b:e2:fa:1c:1e:d2:25:c6:1b:df:10:c5:ae:ac:fb:
7c:cb:30:4f:70:8c:11:d8:25:f4:00:19:82:3d:c7:64:7e:22:
a8:13:46:ca:7d:5b:20:72:13:12:f8:56:12:3e:c2:25:60:b0:
f8:d2:24:8c:00:3b:33:bc:71:4e:21:7a:f6:10:37:77:4d:d9:
0e:60:f7:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:44:56 2026 by rpki-client