
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc38cc4f-6721-34cb-8244-9ea8dbb8bc7a.roa
File: dc38cc4f-6721-34cb-8244-9ea8dbb8bc7a.roa (raw, json)
Hash identifier: gZsYizQfAk3OKRuEXbZRQkHlJ3QCmRSTp4t40PsqW84=
Subject key identifier: 8D:EA:FE:71:B2:E1:50:C2:17:17:66:9F:00:CD:C6:CA:14:3D:1E:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE579600904A319732B9EB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc38cc4f-6721-34cb-8244-9ea8dbb8bc7a.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 73.199.34.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:96:00:90:4a:31:97:32:b9:eb:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=6c74c76a-2b93-47a1-b0f8-d4fb39a2c439
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:da:dd:8f:f9:6b:4e:e7:ef:74:f3:d1:07:47:
f3:26:ff:60:de:a4:35:05:d7:cc:54:a3:01:53:4d:
ca:01:b5:25:04:25:c6:5d:2a:f8:35:07:4e:2e:4f:
e8:16:00:0b:1f:19:9d:2a:be:f1:17:6d:c8:8a:57:
f0:57:b0:0b:c5:4d:5b:ca:18:95:cd:0d:93:e5:44:
32:89:8c:c7:05:14:be:f8:f7:2e:8f:e4:41:83:7e:
86:7f:10:f5:be:b3:56:59:1c:ff:0b:12:4a:5a:38:
b8:70:e3:1a:30:c0:41:1f:3b:70:b1:25:c8:55:d5:
fc:1e:50:e4:1c:e4:e4:72:59:a2:6e:46:fb:90:8e:
a3:f8:46:aa:9d:fb:6c:a3:75:58:3e:3b:2c:76:99:
4b:44:25:33:36:37:2b:e2:e2:fc:40:18:2b:36:2c:
9f:b3:cb:4b:bd:4e:0d:55:75:ba:e3:44:70:5e:4e:
6e:8b:cc:64:76:ab:27:92:4f:b4:86:dc:40:aa:c8:
6a:9f:5d:0f:0d:7c:8a:de:24:8d:cb:b2:6f:e4:9f:
c6:38:ad:c5:fa:6b:26:10:55:6b:1c:0c:53:c6:b6:
b4:33:95:27:c8:9d:19:33:52:22:f7:35:5a:5e:e4:
c8:37:89:1c:ec:04:62:87:86:46:1a:2d:3f:79:83:
aa:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:EA:FE:71:B2:E1:50:C2:17:17:66:9F:00:CD:C6:CA:14:3D:1E:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dc38cc4f-6721-34cb-8244-9ea8dbb8bc7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.34.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:9b:13:aa:b8:97:51:cb:b2:da:6e:7a:dd:8f:2e:7e:c8:5a:
20:a7:d4:c6:93:b3:ac:02:56:ba:17:5a:f9:b5:9b:66:83:f9:
f3:3d:7a:e7:e8:a7:5b:1a:35:d3:55:2e:7f:a9:1c:e6:25:ea:
82:19:6a:d5:26:cb:60:5a:4a:a0:d4:97:b3:81:a7:a0:ae:f1:
20:48:69:01:df:13:e8:8b:3a:98:e9:6d:5b:2b:78:ca:81:1e:
81:4d:5e:09:c4:e9:9d:81:21:a3:91:f0:ae:7a:49:94:44:35:
65:30:e5:6c:d4:2c:0a:c1:32:36:6e:1e:d1:ee:38:ad:b9:ab:
e2:a0:d8:3b:ad:6a:37:83:ad:61:b4:89:e8:d6:38:1b:1a:5c:
b1:b6:05:dd:5d:7e:fa:7a:07:18:6b:47:ef:39:d3:4c:04:4c:
3a:af:55:fe:4e:d7:f9:26:c2:5b:11:c7:de:48:9a:68:39:41:
44:ea:ac:b6:38:ec:73:11:ca:da:96:3c:ef:74:91:1c:98:a2:
a3:61:3a:63:11:58:12:43:2c:74:61:cb:e2:16:99:a9:39:6a:
99:e2:8f:22:0b:9c:c5:8f:25:d2:15:54:7b:84:67:ac:cc:a4:
fd:7e:63:9f:b2:07:8d:f6:25:b5:63:58:f1:49:3d:cd:50:3f:
69:15:47:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuV5YAkEoxlzK564AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NmM3NGM3NmEtMmI5My00N2ExLWIwZjgtZDRmYjM5YTJjNDM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAydrdj/lrTufvdPPRB0fzJv9g3qQ1BdfMVKMB
U03KAbUlBCXGXSr4NQdOLk/oFgALHxmdKr7xF23IilfwV7ALxU1byhiVzQ2T5UQy
iYzHBRS++Pcuj+RBg36GfxD1vrNWWRz/CxJKWji4cOMaMMBBHztwsSXIVdX8HlDk
HOTkclmibkb7kI6j+Eaqnftso3VYPjssdplLRCUzNjcr4uL8QBgrNiyfs8tLvU4N
VXW640RwXk5ui8xkdqsnkk+0htxAqshqn10PDXyK3iSNy7Jv5J/GOK3F+msmEFVr
HAxTxra0M5UnyJ0ZM1Ii9zVaXuTIN4kc7ARih4ZGGi0/eYOq3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI3q/nGy4VDCFxdmnwDNxsoUPR4DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGMzOGNjNGYtNjcyMS0z
NGNiLTgyNDQtOWVhOGRiYjhiYzdhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBScciMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF2bE6q4l1HLstpuet2PLn7IWiCn1MaTs6wCVroXWvm1m2aD+fM9eufo
p1saNdNVLn+pHOYl6oIZatUmy2BaSqDUl7OBp6Cu8SBIaQHfE+iLOpjpbVsreMqB
HoFNXgnE6Z2BIaOR8K56SZRENWUw5WzULArBMjZuHtHuOK25q+Kg2DutajeDrWG0
iejWOBsaXLG2Bd1dfvp6BxhrR+8500wETDqvVf5O1/kmwlsRx95Immg5QUTqrLY4
7HMRytqWPO90kRyYoqNhOmMRWBJDLHRhy+IWmak5apnijyILnMWPJdIVVHuEZ6zM
pP1+Y5+yB432JbVjWPFJPc1QP2kVR5I=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:32:38 2026 by rpki-client