
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef9ff7ce-ba1f-36e1-b0a6-454856e300ec.roa
File: ef9ff7ce-ba1f-36e1-b0a6-454856e300ec.roa (raw, json)
Hash identifier: Hsh4ArRh2DWcXffC8S3uJXrrTtTxV9po1u6AVpWIGjA=
Subject key identifier: 5E:F0:DB:21:D3:9D:C0:B5:BC:EE:38:63:A5:C1:D4:1D:CB:E7:28:02
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BBEE31EC65712E8D2A8980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef9ff7ce-ba1f-36e1-b0a6-454856e300ec.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 73.17.204.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:ee:31:ec:65:71:2e:8d:2a:89:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=d9cb61b7-c165-4556-97e3-6f4a65cb4926
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:04:0a:83:4e:fe:01:f2:e6:bd:1c:0c:a5:cc:
fb:f8:2f:76:7a:bc:17:a5:b1:83:e8:4f:a2:3d:cd:
68:7c:7d:88:8e:6e:57:de:a9:58:ea:b8:8e:8d:a3:
68:f5:7f:45:51:d0:85:28:8f:59:0c:c4:44:61:fe:
8d:ed:f0:bf:30:b1:04:1c:47:59:a8:e0:f2:b8:ce:
83:45:18:68:7e:b8:59:c9:cf:09:da:4b:ae:1e:d6:
44:4f:7b:65:3c:12:b4:20:eb:b0:8c:af:61:6e:54:
49:e0:f8:b9:56:f8:b5:14:f3:67:29:a0:01:17:eb:
33:83:9a:de:de:b4:08:41:65:0a:60:fd:3a:19:84:
b5:86:74:db:ad:b5:08:74:78:c4:ca:ba:1b:ea:a3:
64:f1:c8:cd:0b:5c:07:e1:3e:32:5b:84:c0:75:d6:
6e:4e:c5:ee:84:03:61:21:28:09:4f:79:d9:78:7d:
aa:fd:57:be:a3:c3:5d:fb:81:36:f1:61:10:85:a3:
79:75:0c:c2:00:3a:eb:4d:90:d1:8a:e4:98:9f:45:
8d:72:9d:0b:4b:24:1d:cd:c7:a4:cb:74:56:29:63:
07:ba:7e:7a:09:b0:ab:44:0b:d9:e7:7b:ec:69:08:
67:3d:2c:0b:5d:09:62:43:74:10:2c:81:3a:92:1e:
9a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F0:DB:21:D3:9D:C0:B5:BC:EE:38:63:A5:C1:D4:1D:CB:E7:28:02
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ef9ff7ce-ba1f-36e1-b0a6-454856e300ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.17.204.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:9e:fb:36:fd:dc:dd:4e:69:68:3b:fc:59:80:2e:62:8d:d0:
0e:02:b4:81:b1:8e:e8:71:d0:9d:7d:02:28:ba:ad:f7:64:7b:
15:a4:69:e7:4d:90:ec:5b:8e:14:15:a3:ed:63:4f:97:d7:d9:
57:1c:9a:8d:27:94:e1:8f:b9:eb:c2:42:11:61:62:52:5f:e8:
cf:98:7e:29:5a:2b:3e:6d:7b:aa:11:1b:41:c8:f4:ae:d7:c6:
34:42:e6:3a:00:80:20:a6:e3:c5:ff:34:3d:dd:fe:b1:62:a0:
b7:18:c6:9f:7d:95:6f:b3:a7:08:20:de:00:c8:de:97:e7:44:
c9:71:1f:62:0c:4d:c9:11:cb:01:86:93:b2:16:28:84:29:e1:
cc:ce:bb:f4:5b:c6:5c:32:b2:1c:13:f2:a0:36:99:3b:57:86:
55:4b:07:e5:13:9c:09:76:6b:16:27:13:6e:98:c2:4e:b1:92:
73:c3:10:01:7c:a7:8e:90:10:dc:a8:4b:6f:56:0c:68:80:06:
c9:39:a6:d3:8d:45:3a:c6:12:ef:4b:f3:76:b1:c9:c5:63:a6:
c0:8a:9e:2e:28:c5:06:ce:cf:66:cc:f8:22:86:b2:16:3c:14:
91:2f:e9:96:05:5e:00:3b:47:84:b7:12:a8:bb:2b:50:d1:a1:
16:4c:c6:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:49:50 2026 by rpki-client