
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa
File: 4ab8af84-9360-38dc-b395-d87a2004c6b7.roa (raw, json)
Hash identifier: jFFufAh6+mxo0n6CSJMng0q7j+7Lr00r4wJ+2MxDgpg=
Subject key identifier: 0F:AE:2B:BD:A0:A6:66:4C:7E:DA:65:29:5C:B4:0C:AE:9A:31:13:39
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A7C5574E363C6FE896A400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 73.43.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a7:c5:57:4e:36:3c:6f:e8:96:a4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=b206f4b6-46e3-46f0-86b2-de07946a24c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d2:b2:1a:18:79:f6:0b:01:3d:1c:41:8b:8b:
65:13:32:ab:c5:44:9d:e5:e6:ab:aa:4d:1f:b6:1f:
40:4f:a5:81:00:2d:16:0d:cd:97:a7:ea:e1:29:1a:
54:56:bb:29:47:a5:27:78:d9:03:4f:6b:35:09:5d:
3f:5b:ba:ca:86:d5:33:34:b5:7a:10:8f:a1:9d:3a:
0c:6d:87:55:4c:74:cd:4a:c8:06:c9:61:f9:f8:a5:
14:8f:f3:a0:29:7d:8c:e0:d3:d1:e5:97:87:f6:f3:
a1:69:6e:75:5a:5f:b1:4a:ba:94:43:9a:54:2b:c2:
0c:aa:8f:32:a5:23:3b:7e:81:1e:ed:fe:3d:3d:ac:
75:01:08:05:7c:a4:d3:13:58:8c:74:3e:76:f0:1a:
dc:05:17:ba:32:6d:e6:f2:e2:24:44:96:e6:a2:8e:
f1:dd:42:3b:88:26:97:75:e3:5b:53:2b:a6:55:d4:
f0:1f:f8:72:8b:55:a7:89:43:bd:1d:70:40:33:23:
9f:b8:e5:ee:2f:db:43:66:6c:0e:ee:3b:e4:7e:d4:
85:0f:f9:2c:5a:8c:cf:62:3d:4e:c3:46:fe:ea:8f:
7b:b9:fb:d2:38:0c:a7:c0:25:6d:96:51:7e:c1:03:
0a:e1:48:0f:01:4a:4e:e3:da:77:e0:eb:c0:9b:25:
f8:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AE:2B:BD:A0:A6:66:4C:7E:DA:65:29:5C:B4:0C:AE:9A:31:13:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ab8af84-9360-38dc-b395-d87a2004c6b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.43.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:11:04:47:83:ab:a8:59:4e:6f:a3:c7:9d:b5:58:e2:18:7b:
cf:ac:04:98:8f:ae:e1:58:ad:8b:67:e2:34:fc:86:6d:fe:23:
dd:f4:ba:20:e4:89:eb:21:07:34:ee:4d:d4:07:44:c3:92:44:
6a:7e:98:94:97:0c:91:2d:8b:fb:cf:1e:7a:76:7f:e3:68:f4:
6d:93:c9:ee:15:28:dd:06:d1:4a:de:0c:ba:69:1a:54:6a:24:
71:98:8f:1a:eb:94:71:52:e6:49:1a:1d:cc:d1:55:a6:3d:96:
54:75:74:57:db:15:d3:ec:99:ee:4d:d3:99:3b:8a:f2:99:0f:
45:11:4b:a2:a7:8d:9e:63:70:33:0b:89:63:cc:d6:7e:95:7f:
17:53:9f:e9:92:fa:fd:32:b3:c8:d6:97:74:59:a3:28:2e:cb:
8b:08:86:cf:93:26:90:c0:43:1d:08:b4:d0:6b:a0:9f:11:cc:
02:19:39:88:88:93:22:3a:4e:49:ee:a5:5e:88:f3:68:08:e7:
68:3a:14:9c:fb:da:ea:6a:ac:b2:1d:47:01:22:cf:77:e2:ef:
91:9e:b2:4f:03:a4:5a:9e:f3:58:df:d4:38:64:24:a0:75:ae:
f3:71:ee:8a:c6:24:82:db:4b:36:f3:98:a9:9f:fd:cd:b0:78:
0e:b5:b0:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 04:46:35 2026 by rpki-client