
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa
File: 8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa (raw, json)
Hash identifier: U7wJ0gxg0q2neIbpTECZzrL2mCoxQJlRj6T7U/O9TYY=
Subject key identifier: 39:CB:99:CB:E4:B3:50:74:78:4C:42:3F:81:77:8E:D7:10:C1:FC:55
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119EE9C333BAA22B7850D880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 73.188.222.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:e9:c3:33:ba:a2:2b:78:50:d8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=a6a3a2b9-9c1d-4545-af7e-706a4f0a77d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:2b:fa:3c:f8:50:2c:3c:85:27:17:4d:32:e6:
5d:9f:b2:0a:e3:7e:50:83:00:68:e2:23:e3:47:b0:
92:90:f7:fc:af:75:e7:a2:5d:9a:3d:9e:96:7a:94:
57:1e:88:88:c2:66:89:2a:cc:b5:b0:1e:1d:9a:69:
7b:5c:c5:a7:02:27:e9:56:46:e9:4f:3c:0f:50:56:
96:dd:62:a9:b5:d6:26:e5:2f:44:11:83:63:51:88:
40:d6:3d:0f:b3:df:b5:ac:65:15:75:de:e6:4b:47:
4c:3f:ce:a7:26:be:ec:f4:bf:e9:2e:00:be:42:e1:
81:6f:04:42:19:b9:48:7f:87:6f:15:93:1e:50:24:
58:7a:b5:63:fa:c4:b0:68:d8:a0:f6:30:41:e0:2e:
a7:5e:61:7b:a2:dc:eb:81:ef:23:18:60:01:4d:7a:
bd:09:39:a3:ea:ab:0e:97:56:c7:eb:fb:9c:05:67:
55:7c:9b:36:5b:71:8b:f1:5e:06:f7:39:9a:e4:5b:
ed:84:6c:19:74:44:d2:ce:ac:f2:aa:06:1d:0b:2a:
f4:d8:a9:24:5c:32:8f:05:04:7a:db:1e:a3:14:73:
cb:71:d4:ec:99:54:b0:e7:70:f3:52:20:31:b9:00:
c4:3a:d2:a9:62:71:fa:4a:1c:00:a6:e8:b7:87:35:
57:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:CB:99:CB:E4:B3:50:74:78:4C:42:3F:81:77:8E:D7:10:C1:FC:55
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8b96af20-335e-3a46-b1f4-befd9de1fdfc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.188.222.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:e2:d9:c1:a8:df:17:93:33:00:29:6b:07:bd:79:83:6d:c3:
07:57:eb:51:7b:9f:06:1c:8e:94:8c:fb:9e:22:48:5c:ba:4c:
4c:35:ab:be:5d:28:2f:c0:58:64:d3:28:a6:e8:f9:5a:0c:d0:
e5:f4:4e:a6:fb:82:c2:81:37:cd:0d:dc:d4:1a:0e:a8:8e:a6:
98:a1:6d:ee:e7:d2:74:61:f9:b0:18:13:df:07:1f:a4:39:be:
77:fa:18:90:32:3f:85:c7:91:5a:f7:5f:84:a8:48:5c:65:e6:
8c:ab:5a:d9:b2:30:98:ec:c0:6f:10:3b:76:14:55:63:a7:4b:
49:5d:84:46:73:40:b5:5b:83:fb:c4:cb:84:a6:28:24:f8:ce:
7f:09:0c:9b:3d:7a:54:e3:53:df:bb:a5:41:9b:a1:ea:97:1d:
40:ea:bd:52:53:51:a5:f2:d1:c6:d3:fc:8c:ed:70:6e:20:78:
59:5a:53:e1:04:b1:22:da:80:62:ab:db:3c:38:33:09:3e:10:
92:3b:8c:6e:aa:30:64:75:50:e8:ca:60:70:51:77:d3:50:57:
d9:55:4d:33:fa:13:1a:50:2b:7c:a1:29:c2:0b:8f:d3:54:a4:
b1:9e:13:0f:e1:0d:a3:40:0d:51:d6:28:ec:51:b7:12:6e:3c:
39:35:54:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 01:05:37 2026 by rpki-client