
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/445675a5-21a5-3db5-9d75-91f1340428f5.roa
File: 445675a5-21a5-3db5-9d75-91f1340428f5.roa (raw, json)
Hash identifier: XWCPeWJ/iY35IY7gENigcqMhorCNWAlLta6kypqO2k4=
Subject key identifier: 0F:88:60:26:35:D6:B2:0B:0E:84:48:99:66:B2:50:26:DB:E3:6F:95
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F49808E6C74F298FFF7004A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/445675a5-21a5-3db5-9d75-91f1340428f5.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 21508
IP address blocks: 50.73.224.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:80:8e:6c:74:f2:98:ff:f7:00:4a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c49ee16f-226e-4e6e-94a6-f4e6852d2c52
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:f3:86:ea:1f:a7:17:d4:e1:f6:2c:16:3f:c7:
3d:10:91:a4:36:5c:d2:74:2a:94:f3:96:43:1d:9f:
37:5e:ed:64:e0:c8:63:9e:2e:56:9d:8a:d5:e4:60:
84:db:36:55:b8:85:7e:8e:32:c1:b6:71:dd:f4:a8:
a8:65:24:52:49:f0:7a:02:f8:15:83:c7:6c:d5:ca:
0c:82:a9:66:e6:c5:8f:b0:e8:7e:8d:20:ff:a2:42:
00:db:66:ab:33:19:83:60:7b:8e:4f:18:c3:8c:02:
b4:65:4d:cc:91:5b:78:c6:3d:16:01:0f:2c:2e:4b:
ff:7b:02:59:97:af:66:b4:a1:ab:e7:5c:c8:42:2e:
02:11:33:40:45:da:36:ab:9a:4b:b8:c0:10:fb:c1:
42:b7:3b:43:93:32:03:00:54:30:65:d4:81:a5:1e:
9e:92:2e:69:37:e3:de:4c:29:aa:a2:3e:1d:6d:20:
2c:22:5d:fc:8e:97:89:93:73:1b:69:21:bd:da:6d:
79:fb:20:c7:82:9c:a7:41:d7:58:77:6d:66:22:84:
73:15:92:35:3a:35:04:30:e0:50:1e:f4:51:1e:14:
44:32:dd:85:61:6b:fb:dd:dd:84:91:ec:50:78:3e:
38:f5:dd:81:f7:6a:3b:c7:9d:17:93:c2:dc:4e:4f:
57:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:88:60:26:35:D6:B2:0B:0E:84:48:99:66:B2:50:26:DB:E3:6F:95
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/445675a5-21a5-3db5-9d75-91f1340428f5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
50.73.224.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d2:dd:df:97:93:5a:05:54:53:73:d4:74:4c:23:79:fe:98:61:
b7:4c:fe:bf:27:7f:57:df:6c:e8:56:2f:7c:84:42:67:aa:6d:
b3:97:de:ea:29:e8:2d:db:f8:f5:c8:b5:dd:5f:31:e1:e8:09:
d5:e6:d6:42:71:f2:47:35:f3:ca:12:de:14:ef:d3:25:58:79:
33:c5:18:c6:72:f3:c4:cf:61:56:2c:3b:c0:aa:e1:42:3e:b5:
37:1e:0d:30:91:99:05:c0:2c:eb:68:3c:da:1b:c7:d6:b4:c8:
90:cd:52:82:87:0c:7e:47:6c:7d:6a:0a:ba:77:a0:61:5d:54:
e9:cb:43:41:5a:b9:87:6f:de:78:89:b7:c9:45:7f:e3:33:60:
e3:17:7a:6c:c6:b6:f3:71:1a:e4:cf:cd:2d:b0:62:0c:d2:d9:
37:d4:bb:40:83:29:90:80:35:66:df:12:b4:fc:e7:13:e6:5f:
f7:52:e1:d7:4f:89:53:d5:15:35:ac:63:e7:cb:09:e9:bc:a5:
19:44:92:05:81:61:a9:0a:81:28:9d:dd:e8:63:03:9a:69:b1:
8d:9d:05:94:97:e9:83:df:57:10:dd:62:49:96:06:49:0a:03:
4a:9a:44:34:e6:ec:df:cb:54:e5:96:e8:f3:a7:f0:15:45:96:
7d:7e:df:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 15:04:25 2026 by rpki-client