
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36a1d37-943e-31c7-9c88-55918b0459f7.roa
File: d36a1d37-943e-31c7-9c88-55918b0459f7.roa (raw, json)
Hash identifier: bmtbrP08k6QKkfKmeGhgN5MlUUcvEdJMFRhXsjPawMQ=
Subject key identifier: 68:45:52:58:1B:56:28:F2:02:91:94:67:AC:FB:40:72:E3:B0:3F:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584B95A7D85C1C4DAF856F68A480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36a1d37-943e-31c7-9c88-55918b0459f7.roa
Signing time: Mon 20 Oct 2025 13:00:38 +0000
ROA not before: Mon 20 Oct 2025 13:00:38 +0000
ROA not after: Sun 18 Jan 2026 14:00:38 +0000
asID: 33490
IP address blocks: 73.96.161.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 06 Nov 2025 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4b:95:a7:d8:5c:1c:4d:af:85:6f:68:a4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 20 13:00:38 2025 GMT
Not After : Jan 18 14:00:38 2026 GMT
Subject: CN=0c0c0adf-d708-4c47-9984-fd73e0a77415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:b7:ad:ff:9d:61:3d:ed:01:a0:d5:d0:f1:02:
f9:57:3e:dc:91:a9:09:dd:5c:d9:1a:8b:4f:3e:c1:
00:d2:3f:d0:1f:ff:64:31:29:44:d2:3a:dd:cb:b5:
e0:1b:24:62:12:c9:d6:b0:25:f2:63:9c:25:aa:f9:
72:ab:25:84:d8:0d:18:1c:57:4d:67:5f:85:43:5b:
85:ef:fb:d2:57:b2:9f:26:42:24:13:f1:30:58:6e:
29:c3:57:c5:2f:17:25:fc:a9:03:40:0e:88:18:3b:
18:da:a9:42:95:dc:60:cd:40:e3:27:a2:aa:f7:1b:
b9:79:39:1a:14:cf:4a:1d:8d:ea:21:26:b3:40:d3:
e1:5b:04:ea:4a:ef:1f:44:3b:8a:59:7f:49:32:2d:
b7:e4:3a:dd:82:b8:43:2b:c7:6e:19:a4:43:7e:80:
49:7f:5c:cc:c5:b8:0a:21:66:c4:5f:c0:25:d0:3a:
94:8e:ac:aa:29:99:85:75:aa:a3:1f:1d:fc:d7:ea:
4a:fc:33:f5:a5:70:af:87:32:35:46:fc:ba:48:d7:
5a:c9:f6:d2:54:78:dd:89:28:1b:17:ee:e8:3e:01:
85:e6:79:7f:94:ee:5b:5e:07:d7:e1:5e:3c:b7:ef:
c8:69:26:30:13:c6:7c:2d:9f:cc:3d:e2:3d:2f:86:
30:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:45:52:58:1B:56:28:F2:02:91:94:67:AC:FB:40:72:E3:B0:3F:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d36a1d37-943e-31c7-9c88-55918b0459f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.96.161.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:e6:b0:90:19:95:8d:3d:a2:bb:8a:02:62:13:fb:ee:a5:f6:
9d:7e:6e:60:4f:61:54:25:8f:bb:04:26:09:f6:ce:7c:8a:8e:
1e:86:c5:99:c5:54:48:f6:70:43:23:d8:67:94:32:c2:48:d8:
6e:f8:db:85:36:82:d3:f0:56:de:17:2d:11:c0:1e:66:6c:fe:
b9:e4:f8:6e:e7:5e:76:83:cc:f5:e9:e0:1f:db:c0:2d:58:32:
78:83:d2:5a:c6:83:6f:ca:3e:cf:38:b3:61:70:d4:3c:d7:92:
f7:ab:e9:47:ec:cc:f9:c2:db:ce:4c:a3:a3:0d:09:4d:18:aa:
70:7a:49:24:c5:af:21:8a:81:5c:4e:9b:f6:c6:02:fa:c2:ef:
52:ea:fa:a8:b5:61:b7:3f:e5:1a:53:c0:55:d4:e4:72:13:18:
1b:7b:e8:d7:2b:30:9c:ed:db:c2:b1:39:c1:99:8e:4e:ce:7c:
f4:f3:5b:eb:8e:c8:fc:40:b3:53:55:fb:3a:6e:8d:35:1a:db:
5f:05:d7:09:fe:b3:24:73:22:2a:62:0d:38:e9:fb:f7:00:8a:
74:3e:48:b6:b1:a5:b2:ed:40:66:f4:92:f3:30:16:25:f3:1c:
30:24:e7:97:64:dc:ff:8c:11:ef:c1:2c:f7:93:c3:f2:49:af:
d0:09:9d:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 07:19:02 2025 by rpki-client