
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a21a4961-bdcb-3d95-909a-62a17d83921f.roa
File: a21a4961-bdcb-3d95-909a-62a17d83921f.roa (raw, json)
Hash identifier: PdBkNssT6nr/mIMxQdVXOfvFaOEo9uDvT0Si8//BJzc=
Subject key identifier: 12:D7:DD:E1:A1:1C:67:50:7C:19:CB:41:7B:54:48:83:3F:F7:06:0D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4982951205C18FD3D7ED6780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a21a4961-bdcb-3d95-909a-62a17d83921f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 73.248.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:82:95:12:05:c1:8f:d3:d7:ed:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fad8a7b0-75e0-47bb-ae23-afee9caae10c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:fc:af:7c:e9:be:50:e6:a8:68:b6:93:32:34:
f6:4f:20:c5:99:94:60:95:81:09:45:24:b5:7e:db:
d7:1e:9b:9a:e8:90:8c:b8:5e:9e:d9:2c:93:44:a0:
39:be:2b:7d:76:02:9f:53:eb:e0:04:7f:c4:ea:26:
9c:73:30:b5:70:e3:f5:e3:b6:fd:d0:e2:32:6f:a0:
04:a5:ca:b9:7c:be:cf:ab:5e:69:2e:2c:70:71:98:
c0:11:91:17:1b:ad:9e:43:61:20:55:a8:e6:42:c2:
e2:63:3b:b1:1b:5e:b3:25:35:7c:9d:b7:bf:51:4d:
79:a0:a0:a0:e8:6a:d2:0b:7f:f9:32:26:dd:78:8b:
cc:55:84:09:2b:c2:42:f2:ba:50:f2:37:d5:2c:91:
90:4f:8b:25:fa:0d:31:48:fc:3b:6e:bd:8e:f2:25:
03:24:b7:30:93:da:cb:a1:40:ea:8e:89:a3:2e:1d:
e5:96:55:d1:51:84:08:37:94:28:2d:b2:1e:29:e2:
bf:da:45:39:34:d1:f9:04:ef:f5:25:51:75:92:a6:
71:0e:ab:11:ca:7b:c6:97:7a:07:8a:e8:2f:12:78:
47:38:2a:d2:80:01:60:ec:40:52:47:16:13:6b:1d:
2d:29:fa:94:1e:90:7f:a3:79:6a:c0:97:12:ca:8f:
d4:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D7:DD:E1:A1:1C:67:50:7C:19:CB:41:7B:54:48:83:3F:F7:06:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a21a4961-bdcb-3d95-909a-62a17d83921f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.248.0.0/16
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:9b:a0:6d:6d:09:0e:93:c4:aa:6f:52:30:16:13:65:b6:54:
18:36:d3:c9:50:03:14:1b:c2:69:06:f6:08:c8:55:9b:96:57:
cf:9e:50:6b:17:e1:5a:9b:dd:e8:c1:17:cf:5d:c7:c6:07:f8:
24:06:90:11:eb:69:d9:c0:7a:03:44:db:5c:98:8c:87:17:f9:
fc:37:d7:48:39:8b:45:79:53:2e:85:24:82:ce:40:51:12:32:
bf:a8:2d:97:9e:f6:70:7b:f4:1e:76:dc:62:df:18:22:58:71:
a4:1b:e6:72:c2:d8:14:cf:b3:36:c0:a2:ad:7b:47:7c:df:18:
bb:c1:19:f3:fb:01:60:67:49:5d:90:62:bc:ef:f4:de:01:9c:
74:38:fe:e6:78:63:8f:9d:9b:8e:af:b1:fd:08:35:d9:84:55:
01:a1:bc:ba:1b:0b:91:a6:aa:af:98:8a:83:82:fb:81:64:a3:
b5:7b:27:88:6c:79:b7:62:b4:5f:0e:ee:02:dd:cb:34:e6:d8:
8f:0b:a2:61:26:30:08:6c:d6:bc:52:d1:8c:4d:3c:41:e9:12:
a9:ed:b9:97:80:82:07:f4:39:4f:bb:d3:66:20:67:79:0b:eb:
e7:6d:7c:1c:3a:d7:79:8a:fc:ab:47:10:71:e5:a6:71:e4:78:
78:e4:c9:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 3 17:44:10 2026 by rpki-client