
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa
File: d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa (raw, json)
Hash identifier: a1D38E0QMs3D+E7yB9x1pQ2WyBNFzfjKsA2xI6KzF8g=
Subject key identifier: D9:44:D0:77:A2:4E:DB:08:2C:B3:28:53:B1:34:27:16:A7:F2:81:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58CE9B268638A4C5AD7140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.158.152.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:ce:9b:26:86:38:a4:c5:ad:71:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b9af4d78-7f27-4d03-bdbf-2581ace041ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0a:c4:cc:e3:1a:e0:7f:2e:1b:5f:2f:85:05:
ae:40:8b:20:40:33:48:45:68:e0:d2:02:d4:39:da:
ec:67:c8:3c:e8:aa:7a:b3:b3:0d:25:a1:0f:13:e8:
6b:e3:f0:43:95:f1:c1:93:5e:45:73:d8:11:e8:d5:
22:90:cb:94:27:ce:71:94:c5:94:3b:c3:7e:54:ba:
fa:ef:1c:a0:a2:fd:97:ae:e9:b4:c6:cb:8a:04:2c:
47:28:8f:8c:05:4b:5f:00:2b:17:22:f2:bd:fb:f8:
ad:df:ae:b0:b2:58:a8:e3:5d:ac:85:39:b0:84:ca:
0e:21:42:8a:5a:0d:58:dc:bb:fd:5e:b2:92:21:96:
2d:2d:4c:06:f4:30:38:51:47:7e:2b:12:67:6b:d0:
1b:46:e6:cf:fc:db:8c:cf:df:49:04:e5:91:74:8b:
4a:d4:a7:88:26:29:34:68:a0:38:93:ff:01:dc:b0:
a6:ee:61:5e:7c:99:43:a8:3e:d7:f2:a8:d8:43:72:
39:80:b8:b4:8f:c4:77:ad:74:e9:9a:8e:8b:56:f8:
4b:a9:be:70:bd:03:91:af:46:f1:c6:ec:b0:5e:8d:
78:a4:52:c0:fd:f5:ae:04:a0:af:24:7e:a1:c4:dd:
6c:b4:ca:f7:aa:3f:64:ef:6d:ef:a6:3e:98:3b:31:
43:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:44:D0:77:A2:4E:DB:08:2C:B3:28:53:B1:34:27:16:A7:F2:81:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f9c2fd-db2e-3207-8930-de18b83ef3f4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.152.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:61:e9:80:aa:af:0b:94:88:72:ac:39:a8:28:61:d5:65:db:
2c:91:9f:56:77:e6:ca:05:94:33:b3:7a:10:a3:07:8a:4d:53:
75:a8:a8:e0:04:8c:3e:a2:a7:06:64:8b:ee:da:f6:27:99:7e:
32:76:4b:b0:ff:1f:bb:f8:fb:81:e3:50:8f:e2:5b:4d:2e:60:
68:67:fc:d1:e7:d6:48:20:e9:d4:b7:c4:7d:60:dd:12:a2:26:
f0:15:d3:ce:0c:14:c9:5a:22:6f:a6:82:e7:0a:8e:2c:82:14:
d3:38:e2:0e:ab:0d:c2:61:f2:0f:54:41:a5:a5:95:b4:c7:f5:
3d:02:15:07:60:a3:18:47:7c:90:d9:41:6c:f5:4b:92:52:61:
49:44:3b:0e:43:2b:df:9a:18:75:51:be:4b:b7:8e:8f:ff:5f:
da:e0:ee:e4:f9:b2:2c:42:43:e8:97:69:25:8f:85:05:77:fa:
11:4d:5a:ab:cc:e2:00:30:d8:15:8f:18:01:b3:c0:57:bb:13:
1f:7a:1b:c7:c0:7f:c9:0d:4e:25:fe:cc:35:74:ea:5b:4f:1c:
e9:b6:47:d0:20:11:e7:ed:b3:5a:d0:63:4f:eb:af:54:a7:66:
b3:93:6b:9f:94:80:62:2a:7d:51:30:58:e2:9d:0a:d7:30:e0:
f2:37:6f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:56 2026 by rpki-client