
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcf48a57-5031-3ab9-be81-5caf54bd7bb6.roa
File: dcf48a57-5031-3ab9-be81-5caf54bd7bb6.roa (raw, json)
Hash identifier: 4ZlUUOjp4KsxyW+2XmoCg0HAq1J17FIit2wge3zYf3s=
Subject key identifier: 2A:C0:A3:5C:D0:67:50:13:7C:66:B9:91:99:6C:03:F5:E6:55:04:19
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F49779FCD9D7D8EEC99CD5E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcf48a57-5031-3ab9-be81-5caf54bd7bb6.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 73.108.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:9f:cd:9d:7d:8e:ec:99:cd:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=aa908b22-37b9-4422-a78c-0c51985910c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:62:bf:66:fc:6e:b2:29:03:5d:b8:01:b2:09:
a3:ac:b1:99:3b:7d:43:37:7b:cf:eb:50:d3:35:18:
a7:5b:b6:42:44:32:81:9f:f2:19:43:f5:74:ff:6d:
ee:9f:4b:c0:4f:5e:8d:d9:cd:65:87:39:22:43:4b:
23:63:8c:83:84:a9:a1:8b:90:b8:e3:75:4d:08:20:
93:2e:4f:5d:05:78:10:3a:c1:7a:1a:df:f4:4b:b9:
da:22:42:11:c7:5e:27:dc:48:45:ac:f4:2a:c5:52:
ae:22:3c:38:45:e1:92:ba:f8:26:e3:53:28:a7:b0:
25:01:dc:33:2e:26:ca:c7:c2:b1:a1:2e:9f:d1:98:
7c:00:9c:27:38:82:6f:15:37:c8:dc:69:88:c6:3c:
91:71:37:f2:74:c1:55:39:cc:6f:80:6d:e4:01:bb:
7a:a5:9b:ef:59:09:d4:17:3e:be:1c:e4:23:1f:fc:
7f:85:a8:bb:51:13:43:a2:64:ac:b6:e2:2c:d2:ab:
77:28:3a:ea:5b:3a:b7:65:37:30:f8:73:4c:82:c5:
e5:1a:b9:86:44:72:9b:ee:0d:bd:2b:98:dc:32:ec:
65:da:48:90:ef:8d:1d:bc:02:72:80:07:08:af:7f:
ab:4f:d1:98:d1:0a:35:25:08:7e:ef:4a:6d:52:77:
c2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:C0:A3:5C:D0:67:50:13:7C:66:B9:91:99:6C:03:F5:E6:55:04:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/dcf48a57-5031-3ab9-be81-5caf54bd7bb6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.108.40.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5d:74:15:20:ac:69:e4:22:f7:88:3a:7c:66:a4:90:90:94:a6:
42:25:3f:e7:d1:e5:7f:d6:ca:eb:9a:e9:ea:3f:61:e2:4a:37:
59:03:69:0c:08:3a:ca:03:b6:68:38:84:17:08:17:34:19:a1:
5e:e2:c2:ea:b7:93:15:5f:11:4d:d1:db:56:10:f4:a3:ee:4d:
c6:27:55:dd:d4:c7:40:c5:ee:19:2a:4b:12:d9:28:cb:ff:af:
c6:b8:23:7f:2f:26:37:bc:7b:8f:43:46:e3:35:13:bc:73:6d:
4b:55:7d:db:de:37:57:e9:6f:f0:48:9d:24:09:63:0d:90:eb:
3e:2a:a2:72:df:58:83:a6:71:62:28:e2:48:d8:fc:dd:2b:68:
75:7b:8e:a5:e8:a7:a1:18:7e:1e:78:49:bf:75:7f:e1:83:50:
54:71:54:da:81:53:a0:5e:5c:fe:a3:44:0c:fd:ff:60:96:82:
30:41:6d:e7:78:b6:1e:1b:de:e7:b5:ed:20:e5:2e:d2:4d:6c:
39:e8:f7:bb:ab:5a:83:7f:39:45:1d:f6:2c:99:b6:44:41:59:
45:4d:98:51:89:8b:91:06:f2:2c:d2:a8:eb:5b:7d:3b:61:22:
85:de:c8:a6:30:09:41:14:2d:c9:38:9c:28:51:31:db:89:cd:
e6:3f:b2:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jd5/NnX2O7JnNXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YWE5MDhiMjItMzdiOS00NDIyLWE3OGMtMGM1MTk4NTkxMGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl2K/ZvxusikDXbgBsgmjrLGZO31DN3vP61DT
NRinW7ZCRDKBn/IZQ/V0/23un0vAT16N2c1lhzkiQ0sjY4yDhKmhi5C443VNCCCT
Lk9dBXgQOsF6Gt/0S7naIkIRx14n3EhFrPQqxVKuIjw4ReGSuvgm41Mop7AlAdwz
LibKx8KxoS6f0Zh8AJwnOIJvFTfI3GmIxjyRcTfydMFVOcxvgG3kAbt6pZvvWQnU
Fz6+HOQjH/x/hai7URNDomSstuIs0qt3KDrqWzq3ZTcw+HNMgsXlGrmGRHKb7g29
K5jcMuxl2kiQ740dvAJygAcIr3+rT9GY0Qo1JQh+70ptUnfC6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCrAo1zQZ1ATfGa5kZlsA/XmVQQZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGNmNDhhNTctNTAzMS0z
YWI5LWJlODEtNWNhZjU0YmQ3YmI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSWwoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF10FSCsaeQi94g6fGakkJCUpkIlP+fR5X/Wyuua6eo/YeJKN1kDaQwI
OsoDtmg4hBcIFzQZoV7iwuq3kxVfEU3R21YQ9KPuTcYnVd3Ux0DF7hkqSxLZKMv/
r8a4I38vJje8e49DRuM1E7xzbUtVfdveN1fpb/BInSQJYw2Q6z4qonLfWIOmcWIo
4kjY/N0raHV7jqXop6EYfh54Sb91f+GDUFRxVNqBU6BeXP6jRAz9/2CWgjBBbed4
th4b3ue17SDlLtJNbDno97urWoN/OUUd9iyZtkRBWUVNmFGJi5EG8izSqOtbfTth
IoXeyKYwCUEULck4nChRMduJzeY/suo=
-----END CERTIFICATE-----
Generated at Sun Sep 27 06:44:55 2026 by rpki-client