
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b758bda-a839-3a36-af3f-c3e2336a2590.roa
File: 2b758bda-a839-3a36-af3f-c3e2336a2590.roa (raw, json)
Hash identifier: GMWHtswSJcirCvWwKucsPV8+QytiRoc1aHKrly7E1V8=
Subject key identifier: FD:2F:7B:74:0D:37:05:38:41:E8:71:4A:C9:A2:A2:12:5B:34:C5:25
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F11A0737243A45C97A5527D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b758bda-a839-3a36-af3f-c3e2336a2590.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 73.189.172.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a0:73:72:43:a4:5c:97:a5:52:7d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=888ff63f-3420-461f-8b82-cfc3e8925a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:2f:6a:3f:14:2e:11:13:e2:37:f3:b4:52:c0:
a1:84:93:c2:24:39:12:65:88:5d:60:7e:8f:ad:a4:
37:02:40:1d:c2:43:29:43:e0:0a:b4:71:51:d4:34:
88:c7:89:0f:8c:57:81:5d:df:b2:12:34:29:dc:f4:
1e:a5:f1:ed:90:f4:98:d6:0f:fa:a5:61:0c:59:05:
0a:59:e4:39:08:b5:35:79:a5:8c:3b:65:32:1c:84:
d1:9f:38:69:c6:7d:3e:fe:da:3d:d7:f2:28:61:ba:
0e:15:5a:08:5e:8a:45:d2:95:32:ac:fe:74:b4:69:
bc:56:8a:76:2b:29:16:c5:f8:54:b3:f8:bf:3e:35:
9d:87:c2:51:32:30:30:21:d2:55:e3:62:ad:2b:32:
85:fa:d7:a9:ef:10:68:ce:37:11:cc:78:c1:40:98:
55:79:45:14:17:3a:ef:ed:0e:31:ea:b2:19:22:cd:
2d:29:54:ca:59:52:7b:45:70:df:56:d0:b7:f7:4f:
80:b8:0f:0f:e2:14:aa:ca:93:3a:c6:52:12:3e:f5:
86:61:db:9a:02:20:ea:b3:d8:11:49:7b:ff:47:63:
f6:42:29:7b:69:f6:8c:21:d4:34:33:85:fc:f6:0b:
8a:74:df:5a:b3:68:12:a8:c5:84:05:50:93:85:e7:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:2F:7B:74:0D:37:05:38:41:E8:71:4A:C9:A2:A2:12:5B:34:C5:25
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2b758bda-a839-3a36-af3f-c3e2336a2590.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.189.172.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:19:d7:b1:01:30:84:09:b3:4c:2a:57:fc:2e:98:ea:04:5d:
9c:c1:95:97:84:d5:e1:0e:cb:ed:8c:d9:76:60:b7:77:56:49:
43:b9:10:e9:1d:97:87:fd:55:ef:0c:5f:f4:a2:20:59:0a:ee:
7c:8d:e8:3b:42:a6:21:61:31:a5:a9:c1:8c:fb:72:cd:a3:b8:
6e:fe:8f:87:fd:73:5b:fc:3d:b5:8f:b2:9c:6d:ba:4f:88:fd:
0e:60:04:e6:3d:79:3c:c5:15:91:ad:73:d1:de:30:91:5b:53:
14:ba:85:a9:86:2f:51:a4:d2:12:28:57:a0:e8:01:e7:57:ed:
9b:e9:39:1c:d7:85:73:94:ac:37:e0:c1:db:13:a1:1d:7d:78:
4f:e1:63:71:25:70:53:23:f3:3a:05:b8:69:a0:e1:17:90:30:
46:05:d5:6e:53:b6:59:a7:42:fa:7c:88:29:c7:87:2c:28:a8:
2d:cb:04:5f:69:3c:99:b8:ff:4f:cb:99:e5:fb:1e:76:0b:0a:
93:4e:cd:51:c6:a7:a1:db:58:51:6c:b4:2a:39:c3:4c:b1:64:
62:4d:98:02:2d:45:20:a1:2e:36:ec:23:d7:2e:24:0b:60:02:
2e:88:52:7a:9e:29:a0:40:e6:ca:6d:8d:6c:d2:88:85:5e:94:
ad:2a:d5:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 19:34:19 2026 by rpki-client