
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5f7a63-3814-3a94-a9cf-31785b96745e.roa
File: cf5f7a63-3814-3a94-a9cf-31785b96745e.roa (raw, json)
Hash identifier: hFxnzcEO/r6wZjkTDlYGISDq548Kr2Cp730n3U6HL9s=
Subject key identifier: 78:77:0F:37:EE:9C:41:1A:87:9F:A2:CA:48:94:A3:94:E3:14:4C:20
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BAAA66DC00FF3490132600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5f7a63-3814-3a94-a9cf-31785b96745e.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 73.123.208.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:ba:aa:66:dc:00:ff:34:90:13:26:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=12d44f32-3159-4d00-8c4e-a6e65cdd888d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:c1:b3:07:22:83:5b:7a:7d:e2:eb:cb:f7:22:
c2:ef:ab:32:ae:96:98:02:dc:c9:12:29:3a:f0:d4:
44:56:e0:01:cb:41:58:36:87:65:25:96:be:4b:8a:
e1:2d:70:9b:4d:e2:e3:c1:ce:2e:45:22:7d:8e:9f:
6c:cc:13:44:80:a2:5f:71:06:77:81:73:0f:92:a7:
15:31:59:7f:2a:ee:b5:a6:cb:1d:cf:83:17:ed:bc:
c8:78:0b:01:3d:15:80:b4:84:a4:2b:84:1b:84:8a:
56:95:c7:e8:67:20:45:e4:0f:2b:4b:ca:81:ca:d8:
7f:d6:13:7f:eb:d0:45:1c:30:70:2f:dc:4f:c1:f1:
75:16:44:29:2f:2c:3b:70:7e:d8:f1:d3:f1:f0:92:
0a:8a:44:d8:ac:50:3a:78:1b:07:13:b1:bb:ef:be:
2c:73:10:c7:e1:25:e8:9d:df:f2:d6:00:41:5a:8a:
1b:ee:97:de:5f:d3:b2:b2:f3:8c:ec:8b:63:0f:68:
03:91:ab:c9:e9:c7:f5:3c:52:d2:10:1d:18:42:c3:
83:ef:86:2d:6a:5a:fe:1c:39:81:65:55:91:cc:3f:
17:27:4b:49:c4:c7:70:03:28:5c:c8:d3:31:c7:e4:
61:f4:57:28:38:0e:51:1b:cd:54:3d:d7:68:4c:91:
31:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:77:0F:37:EE:9C:41:1A:87:9F:A2:CA:48:94:A3:94:E3:14:4C:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf5f7a63-3814-3a94-a9cf-31785b96745e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.123.208.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:96:51:11:73:7c:d3:f0:d9:bf:e7:7e:6c:c6:c7:81:28:d7:
ae:ec:8a:0a:1b:9b:58:cc:d2:53:37:ad:a3:a5:8a:7b:2c:f3:
89:9b:03:e4:57:36:b0:04:78:6e:8e:73:07:45:05:04:0e:ba:
46:b2:5b:fc:08:69:77:43:95:fa:57:40:89:93:26:59:3c:0c:
85:6f:f2:95:a8:23:df:de:29:b4:37:26:1f:71:e8:f3:18:78:
93:02:af:a3:6d:c9:93:3f:33:dc:fe:5c:eb:c3:ec:40:a8:73:
b2:0c:15:93:6a:62:8d:36:9e:6e:27:ae:4d:15:e7:2f:3f:65:
83:17:f1:3c:12:5f:ab:10:ac:22:41:95:77:e8:8b:a7:c3:c2:
e8:62:1e:62:85:2e:74:12:88:e5:26:4e:8c:38:f0:91:8c:09:
cb:e8:35:00:95:06:03:bb:d6:1b:cd:09:93:cc:95:ff:7f:ac:
c8:ce:69:25:ad:89:53:94:11:7d:67:2d:5e:3a:b4:55:58:d5:
db:02:d6:05:6a:c5:7f:74:49:84:8f:9d:c3:7d:fd:16:d6:43:
2e:c5:8d:2e:4d:7b:a2:7f:8c:bd:78:f3:3b:cb:69:59:b4:a5:
b7:49:ef:c5:72:dd:28:4c:43:32:8b:b7:c1:7b:1a:2e:5b:3f:
d6:1a:6f:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 03:47:59 2026 by rpki-client