
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa
File: ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa (raw, json)
Hash identifier: YCvQKESxP5x0iNI1s2AY4Ywmfq2Y1yMmIZJ4WIk1ufk=
Subject key identifier: 48:17:05:6F:57:30:F3:5E:2C:35:CA:57:EF:B2:1C:95:8F:91:20:B6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119EB9CFD4D90FC5796E61C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 73.248.204.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:b9:cf:d4:d9:0f:c5:79:6e:61:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=0917996d-419b-4e5b-af6c-5a531dc71c83
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:86:79:00:0a:a6:d3:b4:08:36:ca:f5:ef:23:
3b:51:3b:d6:21:4a:e9:4f:85:3b:a1:6a:d0:9f:8a:
95:1e:b7:65:19:75:ac:18:32:bc:ed:b4:29:93:21:
f3:9c:fa:8c:54:a6:6b:73:9b:33:ad:2e:85:22:51:
d8:01:bc:4d:03:49:ff:f7:dc:42:ad:08:77:11:46:
d7:88:68:6d:ed:ce:a1:15:cf:63:5c:d9:c3:16:25:
d8:68:dc:d4:50:f0:ed:da:ff:a7:64:b2:24:f7:a0:
a2:0f:1f:7f:5f:06:11:2d:7d:cb:49:e7:fe:54:43:
4e:ff:5b:87:78:74:4e:28:84:9c:d7:38:d3:5b:92:
be:f0:ed:d2:9c:b9:ec:ae:84:78:8e:eb:50:83:ed:
a9:ac:bc:11:fa:81:dc:b5:98:8f:a7:d9:1d:b7:78:
22:07:9a:1e:6d:a8:b5:9c:ac:ef:e7:2c:e5:7b:43:
64:61:77:ad:9b:37:eb:e9:ab:d5:2b:83:11:61:ac:
28:b9:f3:c2:a8:88:8b:be:91:aa:9f:76:4c:7f:62:
74:d7:f1:ff:c1:dc:f2:2a:58:a9:3e:e6:2d:a0:b1:
70:20:c1:c8:1f:49:43:9f:3a:87:2b:90:40:1b:0c:
6c:99:0d:a2:8d:14:15:5e:94:83:e8:91:68:0e:f7:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:17:05:6F:57:30:F3:5E:2C:35:CA:57:EF:B2:1C:95:8F:91:20:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ea67b0b2-9670-39d8-87d9-fe24eea0e432.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.248.204.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:3d:b1:26:84:1c:59:f3:ae:32:b3:75:ac:1b:ba:ff:92:71:
36:3a:91:ff:92:ea:fa:40:65:be:35:bb:7a:42:18:f8:81:1a:
6a:ea:2c:1f:e6:64:8d:9f:65:4c:a2:a7:a1:a3:05:f9:34:b8:
b9:68:07:bc:65:12:0a:55:ab:1b:94:50:ba:c4:b3:b6:db:c2:
ae:2c:cb:a7:4f:99:f3:26:a6:a7:e1:cd:11:6d:9c:29:fd:2c:
3f:40:69:93:d1:db:9f:1b:39:13:a2:b3:a4:07:6c:3c:c5:02:
f8:ba:54:67:b2:c3:94:d8:af:f4:e2:89:b3:3f:cb:cd:a7:2e:
6d:94:23:bf:d4:fc:20:9d:2a:09:65:ad:de:ea:1d:6f:fa:ca:
10:d0:c3:dd:f6:6a:6e:7b:48:16:b9:76:fd:f2:97:e6:cb:25:
35:b8:cb:b6:8e:a4:d9:b6:f9:9d:75:19:16:73:7c:f1:a2:73:
08:3c:3e:57:f2:26:de:85:11:23:a0:6f:e5:44:96:d4:14:12:
9c:90:dc:5f:46:07:1d:e9:40:62:8b:7f:28:22:e4:0d:d1:b6:
39:d2:c4:8c:99:3d:10:90:bc:26:6c:57:34:f9:97:a9:13:87:
70:07:97:98:da:b9:1d:2a:e8:24:d0:2b:1f:e2:00:05:d9:5c:
69:e5:c7:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:27:11 2026 by rpki-client