
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8acb4f7-0f04-37cc-984f-84e957c6ce15.roa
File: e8acb4f7-0f04-37cc-984f-84e957c6ce15.roa (raw, json)
Hash identifier: KIUtPg42a69J35kBhtz5+ct1uAbI3mJ03On6Hiar0is=
Subject key identifier: A8:75:40:87:CF:37:B8:80:C6:FD:BA:43:49:B3:D2:18:65:3B:0D:9B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE586055D316E7D01F406D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8acb4f7-0f04-37cc-984f-84e957c6ce15.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 73.44.28.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:60:55:d3:16:e7:d0:1f:40:6d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=d3db2ddc-04d0-48c9-8f3a-13490db99577
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:28:fa:13:b4:46:9d:15:16:00:58:62:aa:c2:
78:e7:80:0d:79:24:38:be:16:3b:05:1f:f9:19:bb:
f2:e1:ab:96:fc:5e:1a:22:8b:b8:22:77:30:2e:5c:
41:20:6b:33:02:ff:eb:c6:69:eb:25:13:7c:3c:be:
21:6e:49:84:5e:79:63:a2:b8:0d:86:5c:34:86:7a:
bb:20:ac:d9:93:ce:c0:b7:ea:83:5d:7c:fd:10:6e:
20:ee:3e:21:d0:d6:a6:20:ab:d7:da:77:35:54:d8:
fe:70:dd:a4:17:71:50:e8:04:6b:48:b2:eb:6d:cc:
a5:38:11:df:15:e0:b8:de:87:61:a6:6c:2d:2f:7b:
07:0c:57:f3:e9:c1:2b:22:e9:88:ec:f9:1d:1b:b1:
73:5e:b4:3b:0b:7a:7c:b8:4c:6e:95:e4:8a:bc:25:
9c:64:38:97:db:2e:ad:22:b1:56:90:79:92:6f:5b:
85:ac:60:f3:44:3c:0b:9f:69:83:03:a6:3c:8b:13:
d8:70:2e:c1:79:ee:6f:b3:52:4e:03:ea:0c:c9:6f:
02:dd:c1:9a:6e:2d:ed:b6:b8:ee:5b:b6:1d:85:e6:
50:83:b6:92:ff:80:5b:18:ad:4f:41:fb:45:9f:03:
cb:6d:15:da:0b:f0:20:82:5c:fa:db:5e:c4:b8:14:
ff:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:75:40:87:CF:37:B8:80:C6:FD:BA:43:49:B3:D2:18:65:3B:0D:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e8acb4f7-0f04-37cc-984f-84e957c6ce15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.44.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:9b:14:36:96:c2:78:e8:3a:50:7c:f5:69:6f:16:45:92:7f:
12:fe:ce:8d:87:c0:12:ec:95:30:0e:3e:ec:80:f8:de:89:da:
09:20:40:9e:d7:db:36:19:04:1e:ff:86:ed:6c:4e:e3:90:05:
0a:79:23:00:f4:c7:36:0b:d5:bb:f9:eb:c9:4a:38:77:c3:43:
fd:41:26:b9:f7:09:2a:dc:39:80:18:19:07:e8:36:27:64:bf:
22:ef:1b:90:58:30:4a:88:83:a0:da:4b:5f:77:33:f2:f1:dd:
e8:33:94:a4:67:45:6f:3a:06:5e:21:a3:c0:51:26:60:74:5f:
d2:1a:ce:5d:fa:0f:96:2e:1f:6b:25:35:7a:c7:76:f2:5c:03:
91:33:9e:0d:2a:b0:d3:94:74:9a:3f:95:0b:87:d5:f7:df:93:
66:19:cd:50:ad:e5:5a:fb:89:f7:00:27:bb:a7:2b:63:bb:01:
68:bd:5d:0b:b8:4f:f6:3d:e4:6a:52:91:bb:83:2d:32:ef:bc:
a8:76:96:17:80:b4:b8:61:5d:47:de:ab:8d:d4:bd:32:94:7e:
8f:70:b9:83:8a:80:3d:9b:05:36:be:af:9f:10:b8:b0:79:8c:
9e:49:32:89:5f:a8:60:99:04:36:ba:63:a4:3a:04:52:21:eb:
01:2b:fe:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:53:25 2026 by rpki-client