
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa
File: e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa (raw, json)
Hash identifier: XkIyE8URMAERLlhh8X53Lto91QDzntGooviw0tcM8/0=
Subject key identifier: 6D:B3:9A:C9:2E:9F:55:15:7A:9B:80:A3:B0:07:85:F1:C1:1C:B9:1F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584FB3A6BBB5B5D2216721179800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa
Signing time: Mon 02 Nov 2026 02:00:13 +0000
ROA not before: Mon 02 Nov 2026 02:00:13 +0000
ROA not after: Sun 31 Jan 2027 02:00:13 +0000
asID: 33659
IP address blocks: 73.29.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:b3:a6:bb:b5:b5:d2:21:67:21:17:98:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Nov 2 02:00:13 2026 GMT
Not After : Jan 31 02:00:13 2027 GMT
Subject: CN=8d5b9ed5-39ec-4639-af90-911600c7afd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:90:b0:93:77:ab:b7:45:e6:81:e2:bd:35:eb:
0c:16:43:76:f1:8c:d2:4f:d8:d5:53:29:fb:8d:ef:
1a:43:98:b6:10:9f:a3:ed:d7:9b:67:b7:0e:8e:83:
80:71:ea:f3:17:fd:31:28:f2:ec:c0:e8:cc:42:0e:
37:df:84:4f:16:3b:db:06:cb:9e:67:7f:bf:9a:ab:
1f:63:93:07:f0:30:ef:0e:17:7c:50:ac:9c:05:6f:
7f:da:b5:be:01:48:df:b5:cb:34:91:ec:ec:b1:78:
4b:d4:db:17:27:00:7d:93:3c:97:e9:37:59:17:b9:
f9:53:ac:e5:b2:4a:9d:14:07:e4:76:b4:72:90:eb:
bf:ac:e9:22:89:cb:ce:6a:22:83:ae:f5:1f:f8:f8:
d1:b8:97:eb:6a:24:45:29:eb:ce:e5:03:09:fe:ca:
34:14:ef:ff:97:c3:8c:f4:f4:f9:c7:64:d9:a0:79:
c1:98:28:85:45:74:7b:4e:e7:17:b6:91:35:63:47:
46:3e:cd:c5:3b:27:6d:9e:08:4c:5d:52:f3:85:ac:
78:21:34:f5:c7:68:9f:72:48:88:26:51:db:5b:17:
a0:71:05:6b:c8:91:69:01:b6:54:14:07:20:5b:ea:
fa:33:3b:03:25:f1:0c:5b:e2:c5:1e:e8:0e:70:66:
cb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B3:9A:C9:2E:9F:55:15:7A:9B:80:A3:B0:07:85:F1:C1:1C:B9:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e50c83c3-e9e6-39e5-b78e-bac86e9e634b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.29.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
57:69:61:04:07:70:8f:71:a6:85:1e:f9:b1:ed:72:73:b7:a3:
f9:11:c2:83:d2:b5:34:74:b7:5e:46:fe:bc:03:76:af:c1:31:
62:42:ef:a2:5d:c8:67:0a:9f:d5:f1:ed:cd:fa:37:a5:1a:6e:
85:5d:31:d5:8c:60:59:35:36:f8:80:4f:82:fe:f8:2d:6d:f8:
6f:a7:b6:23:45:96:d9:18:f9:55:42:64:05:4d:32:c4:7c:16:
e5:cf:5a:07:e5:3d:b2:93:e4:1a:f4:59:ae:9a:0a:59:9c:dd:
30:3c:c7:46:d1:a6:45:10:81:cf:95:53:b1:79:3e:77:81:72:
ce:b0:05:4c:41:47:27:3c:ab:04:86:6c:87:e8:41:af:44:8b:
43:de:27:c3:0b:bb:aa:5d:3d:b7:52:70:63:f3:92:8e:5e:3a:
c2:cb:ee:e3:0c:9f:15:91:90:c1:f8:59:3f:49:29:9d:b5:bb:
59:56:99:35:e3:54:3d:9a:2d:c3:a6:5c:01:80:fc:04:6e:2f:
2e:e3:9a:ad:61:80:ba:89:90:17:05:65:57:e1:49:66:c1:84:
2f:a9:46:57:4b:72:90:d3:c8:c9:c6:b7:d7:bd:94:f8:44:f3:
3d:7a:56:fb:79:cf:df:f8:a7:f2:bf:70:ef:9b:73:90:7a:ce:
a3:16:b7:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:47:32 2026 by rpki-client