
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8344a13c-2143-3a45-83d6-aaa1b6f7f460.roa
File: 8344a13c-2143-3a45-83d6-aaa1b6f7f460.roa (raw, json)
Hash identifier: nkSm4AOv+L1AusPEcVz+G7Flfs5XLf4OsEAvFQpBDlY=
Subject key identifier: 18:2A:94:E9:9E:60:0E:A1:5C:97:2E:FF:71:73:31:84:3D:14:F8:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E47296319A4F0D88F3E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8344a13c-2143-3a45-83d6-aaa1b6f7f460.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 73.202.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:47:29:63:19:a4:f0:d8:8f:3e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=5c5e8554-6826-4d6e-823d-eccd7c2e9166
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:42:d3:02:a8:6a:a6:72:65:06:b3:63:a7:cb:
bc:eb:2c:da:c7:d4:b0:e5:62:55:29:ad:4d:2d:0c:
ea:c7:90:9a:72:f4:f2:61:49:5e:fa:64:e4:fe:a0:
6d:e4:bb:38:11:cb:32:e3:fe:af:96:30:c8:05:2f:
83:2c:c4:7c:63:b3:90:fa:4b:b7:3d:c2:8d:12:f4:
5f:c4:d4:35:36:54:b1:17:eb:04:93:93:7c:60:ce:
c0:90:56:5e:1d:6b:34:96:c2:0b:95:9c:7a:65:32:
63:9e:58:fa:c3:64:4f:68:f4:2a:0e:6e:59:ae:4c:
1c:e0:0f:01:3f:30:09:e7:51:32:d0:03:dc:11:17:
1f:9e:68:fc:b0:e9:f5:e2:b0:c3:66:1d:02:c0:bf:
c2:70:f0:96:0d:e4:37:ec:7e:ed:0e:de:f1:d1:5a:
57:12:3e:8f:d2:2a:ef:1d:46:df:7c:84:32:2e:69:
eb:d1:fa:71:01:04:4b:f3:d2:5f:a0:f7:90:6c:5a:
c0:24:4c:aa:f3:fd:f8:1c:84:80:0a:e1:bf:d3:1f:
ea:77:c7:7b:eb:ea:1c:d4:9b:3d:ed:2a:86:74:dc:
f2:d6:2f:cc:23:c2:ea:3d:54:cb:c8:d6:3a:23:da:
e1:84:62:cd:05:be:75:85:ba:19:b1:6e:dd:8d:50:
68:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:2A:94:E9:9E:60:0E:A1:5C:97:2E:FF:71:73:31:84:3D:14:F8:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8344a13c-2143-3a45-83d6-aaa1b6f7f460.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.202.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:6a:94:09:db:5b:dc:57:5b:23:8e:f0:ad:9f:64:f2:f7:eb:
be:20:e3:0f:6d:23:34:c4:6e:a1:3c:d2:42:af:1c:53:b0:52:
83:15:6c:dc:d1:d4:73:c5:f0:eb:7e:1a:78:0b:7d:d4:dc:c5:
21:12:32:17:64:ae:8d:7c:4b:7e:1a:89:3c:c5:79:be:a9:d6:
e4:38:ea:f7:78:be:22:d3:23:ac:f5:97:16:b6:9b:a3:62:3a:
11:b1:2e:87:4a:05:19:53:2e:db:43:be:0c:a4:72:21:0d:53:
1c:f2:2c:db:2a:44:2d:bd:f2:91:0b:c9:91:54:29:b3:72:28:
34:e0:4c:7a:5b:7b:1d:2b:e5:67:82:2e:90:54:dd:2d:a3:62:
cc:94:66:c4:bf:dc:55:0a:ac:3c:bc:08:40:b7:eb:60:81:b6:
64:ff:5b:37:61:ee:db:7a:32:93:4b:f1:bf:73:e6:b7:6b:08:
81:b6:4f:f4:24:93:b5:38:f9:a3:44:08:e2:8f:c3:ac:ba:cd:
42:55:15:ee:fc:f2:7d:6b:c3:6c:ff:3c:b7:6a:33:66:88:98:
d4:51:71:96:43:5d:96:53:b6:43:95:c9:d6:22:4b:03:c0:f4:
bd:5f:61:e0:b8:80:46:23:fb:24:03:be:37:32:91:9f:0e:b9:
69:f3:59:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 15:27:13 2026 by rpki-client