
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6c59c95-bfd0-3e38-a37b-25c2cdfa59b0.roa
File: d6c59c95-bfd0-3e38-a37b-25c2cdfa59b0.roa (raw, json)
Hash identifier: q/hNMo+AKzi2lGxKmTvbFzIAhhxn3f9YU6HSFK6plEI=
Subject key identifier: 8E:81:1C:84:0A:50:77:54:4F:85:E2:69:75:FB:BE:60:88:0A:71:7D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58D80E02E32FF676D82F60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6c59c95-bfd0-3e38-a37b-25c2cdfa59b0.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 73.170.80.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:d8:0e:02:e3:2f:f6:76:d8:2f:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=89daf9dc-80c4-452b-bf0a-08707fbebb8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:5a:eb:1d:7f:52:a1:40:39:04:db:62:b6:de:
04:8c:a4:1f:43:da:e9:49:46:ad:f3:c6:ca:8f:88:
6f:1c:df:fe:fe:d8:4a:bf:b3:01:21:a5:04:3c:e6:
86:5a:99:0b:28:95:d2:f6:7e:f2:46:9f:8b:2d:01:
73:bb:74:ac:f5:fa:3c:0b:18:42:e8:69:c8:38:30:
3b:c8:ce:9e:02:c2:cc:44:6d:82:8f:9b:6e:0a:76:
96:b8:23:fb:fc:61:d4:3b:18:dc:73:e7:1b:71:36:
22:82:54:36:93:51:b5:04:ab:62:e0:fc:c1:f7:50:
2c:37:66:2d:5f:d8:b6:0c:b9:c1:30:91:b2:33:3d:
f1:bf:bf:20:9f:7f:ab:74:cc:85:d3:0a:d8:d9:1a:
e8:1d:9b:65:4c:dc:b7:d6:60:af:eb:56:71:a5:58:
b1:83:e8:60:2f:c4:41:b9:12:95:8a:0b:7b:12:cc:
06:dc:dc:98:ef:97:80:a7:56:01:44:88:99:93:32:
21:08:b5:3e:e0:69:ac:92:6d:99:ee:f3:a9:7f:08:
0f:cf:80:19:ef:4b:85:9a:de:29:14:89:a8:2d:6e:
d9:5f:34:93:13:65:ea:59:4a:df:4f:2d:f6:8b:df:
16:91:99:0d:e3:91:8e:0d:b2:fc:b2:6e:7f:9e:ad:
a1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:81:1C:84:0A:50:77:54:4F:85:E2:69:75:FB:BE:60:88:0A:71:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d6c59c95-bfd0-3e38-a37b-25c2cdfa59b0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.170.80.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a6:28:2a:0c:f7:7f:cb:88:24:fb:3f:36:b5:88:3c:f5:15:67:
df:a6:f3:e0:f0:bf:7c:ad:60:8e:92:1a:aa:7d:4b:02:97:1c:
29:59:0f:5c:d4:2a:7f:cf:7e:09:cd:14:f4:cf:81:2c:9a:a9:
23:bf:f3:e4:2b:65:59:81:d7:cd:f0:4a:01:df:fd:ef:6b:7b:
22:1c:69:42:71:fa:3e:c5:30:0e:32:ea:e9:8f:40:e9:cf:ba:
01:3f:1e:4e:e7:47:a8:e6:38:ef:1c:a9:38:f1:da:cd:48:f1:
d2:26:50:16:90:82:b2:04:81:d2:e6:b3:50:ff:63:e8:0d:14:
24:47:14:aa:b4:db:80:71:b5:4a:96:bf:0b:cd:93:57:65:f0:
da:82:de:88:c8:f8:4d:50:4a:80:b8:81:ed:29:76:42:b7:4e:
fd:59:bf:75:ff:39:c9:0a:0a:3d:a6:eb:d2:44:70:69:ef:5f:
c3:9a:be:76:3c:eb:11:21:10:ec:74:ea:52:c5:ed:10:c4:15:
f7:c0:f5:db:21:8c:16:39:f0:3b:66:71:26:78:f1:a4:ed:1e:
8e:69:1b:a3:f2:a3:6c:30:21:8a:96:7d:aa:31:1c:6d:77:8e:
e6:7b:88:5f:a7:1c:97:90:cb:a5:4c:3d:e3:f5:d4:ad:88:9e:
48:d9:fe:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:35 2026 by rpki-client