
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9dedb7f-d276-382f-866a-c35099aa2095.roa
File: f9dedb7f-d276-382f-866a-c35099aa2095.roa (raw, json)
Hash identifier: xUhVdU/k+ekwAGsQlLXbaaX89DXX+H/+oC1R0Ke10wM=
Subject key identifier: 71:FF:14:09:B5:30:DF:02:0A:18:8A:47:DB:C2:A9:95:40:BB:72:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57CA1F4BAF3D6E93CFF764
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9dedb7f-d276-382f-866a-c35099aa2095.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 73.81.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:ca:1f:4b:af:3d:6e:93:cf:f7:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=0b32c2ea-cace-400a-9f39-91fe2ca05ad8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:82:f3:90:33:38:9b:eb:87:ef:7b:17:75:f4:
15:65:17:7b:8b:71:e5:bd:72:34:ee:ba:52:59:5a:
c9:24:32:76:75:b4:23:34:d7:a5:4a:cc:88:1e:de:
e3:2c:f8:a7:82:99:04:fb:78:03:47:70:80:2f:c4:
fb:75:ad:8c:fd:18:cb:fc:fc:83:94:29:04:41:86:
8b:ec:fc:20:b7:08:c9:2a:f4:ec:aa:72:2c:52:97:
6b:4e:09:d9:67:52:3c:31:20:6e:de:35:0f:34:9f:
d0:69:71:01:42:42:d6:15:b1:e3:4b:0c:29:af:04:
bf:5b:96:50:c6:ae:46:c9:1d:f6:30:25:3d:71:8d:
c7:8b:8c:9d:25:2c:71:1a:28:54:24:fb:ee:c0:97:
72:83:b3:b7:29:60:32:be:ea:c5:c6:81:09:70:23:
ce:8a:06:c2:c7:e5:c3:47:8b:e6:04:2b:bd:8e:9e:
05:06:d8:59:0c:56:91:ed:a1:7e:0d:43:95:8b:c5:
50:f1:1f:3b:c7:fb:7e:54:83:77:69:a9:a1:51:68:
4b:f1:3a:c9:cf:1b:33:f0:e0:92:d6:c5:34:f7:75:
e5:a9:b3:68:69:48:66:17:72:e1:47:17:a9:1e:9f:
0d:5e:bc:39:d2:62:c3:84:46:27:72:99:c4:5c:df:
7a:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:FF:14:09:B5:30:DF:02:0A:18:8A:47:DB:C2:A9:95:40:BB:72:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f9dedb7f-d276-382f-866a-c35099aa2095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.81.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:d9:81:48:38:2c:d0:34:57:b6:f8:f0:34:0e:2a:76:aa:82:
30:a9:b7:22:43:ab:04:76:34:e5:38:c8:f4:03:e3:56:c0:54:
51:46:3f:c7:76:39:41:ae:f8:65:d5:e1:82:b3:15:ba:96:8d:
29:ae:aa:e5:07:9d:88:da:ab:12:2e:6f:e8:f2:88:5e:c3:a0:
a8:c9:df:f4:e5:52:70:6f:36:ec:be:f2:9a:c9:c3:bf:8c:46:
91:30:2d:6b:32:ef:fb:fd:76:28:35:98:9c:76:86:ba:b3:59:
80:b4:53:83:85:be:d0:d8:25:b2:da:35:a0:7b:20:ad:15:22:
39:c6:4e:43:10:38:e6:54:12:fb:af:8c:ae:16:18:d5:2b:3e:
c7:5d:9a:93:f8:4d:12:0d:a9:59:f3:81:13:02:da:a1:e1:31:
1f:4f:f6:ac:9d:f1:4f:33:09:64:76:0e:85:ce:7c:b3:c3:6a:
5b:25:2b:36:47:13:92:6d:31:3c:97:0b:d7:2f:ae:a4:6e:95:
8d:f9:b2:44:ac:1b:c9:8c:dd:94:a1:8d:27:09:97:3d:ad:f0:
0f:38:c8:ed:fb:f9:37:04:69:07:b1:b8:fa:e9:c5:02:6e:3a:
5f:6c:d5:e9:b5:02:e5:a2:d7:0f:58:f5:63:ba:be:ab:dd:3d:
0e:e4:e1:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:55:51 2026 by rpki-client