
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087b6563-1ab6-31f5-81bd-fde611b7a178.roa
File: 087b6563-1ab6-31f5-81bd-fde611b7a178.roa (raw, json)
Hash identifier: PfwpR5vV+qaFm4/28ZxOFLPcxcEkPh1dIRKjFX89os8=
Subject key identifier: C0:69:2F:53:60:AB:08:0A:8F:CB:0D:A1:F6:81:3B:C0:12:87:C3:36
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6540D1DCD0D62C6866880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087b6563-1ab6-31f5-81bd-fde611b7a178.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 73.247.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:54:0d:1d:cd:0d:62:c6:86:68:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=89e907c0-560a-4d03-8f53-f969a5a82609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:60:79:d3:2a:e7:66:68:e1:a7:71:b5:b4:93:
9c:50:6f:2d:ef:41:78:fa:17:b2:a7:28:8c:ed:87:
20:41:d5:94:6d:e8:6b:65:fb:0c:9c:79:fe:6a:82:
ae:28:01:91:66:b7:7f:14:67:48:f0:8a:0c:73:fe:
c6:0d:83:20:5b:4f:f4:16:49:16:11:15:ea:f3:61:
ef:31:17:c7:0c:ed:37:f0:38:47:1c:d9:ef:73:96:
2e:e1:ea:e9:56:16:77:b4:5a:1b:04:af:71:3e:10:
20:f5:ac:39:18:db:c7:97:78:17:52:15:b5:a7:18:
80:8b:1f:8b:a6:db:9a:b1:6d:9a:aa:ba:d9:c9:ab:
dc:36:f3:98:20:ad:e2:ab:84:db:4e:cb:5a:c0:db:
48:52:63:a1:2e:9c:1b:2b:82:10:82:ab:60:35:57:
f2:68:15:52:ad:34:d0:db:66:88:39:24:a4:29:e7:
13:87:61:65:fc:8e:60:ee:59:83:01:97:9d:b9:b8:
69:c3:bd:bb:31:62:7a:db:4f:de:88:9e:4c:27:01:
27:a5:3f:21:d2:a9:39:a5:ae:a3:a2:f6:2a:29:66:
49:43:0a:3b:95:a8:b5:09:67:84:2f:d2:10:df:c5:
d3:f8:be:b1:23:1b:a8:16:09:aa:ce:90:22:bf:1f:
e9:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:69:2F:53:60:AB:08:0A:8F:CB:0D:A1:F6:81:3B:C0:12:87:C3:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/087b6563-1ab6-31f5-81bd-fde611b7a178.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.247.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:7e:a1:f9:2e:70:11:fb:0a:40:d9:83:f8:84:33:d1:60:da:
f4:7e:62:7a:8f:17:75:ac:16:8b:bd:67:53:5f:43:e7:ea:d0:
c6:6d:7c:67:c5:78:1d:81:7b:c8:02:08:44:8b:6b:d8:35:99:
f0:98:35:28:08:a1:ee:68:06:5b:eb:fd:5e:bb:4c:a2:b5:1d:
6a:02:cf:8a:a7:21:8f:66:a9:48:f8:d4:17:7e:2b:eb:10:ab:
c2:a5:e3:fc:58:bc:15:2a:e9:15:50:40:02:d7:7f:1c:46:51:
b6:72:fb:ae:6e:9e:cb:e6:9e:97:77:da:7e:f1:73:a2:5f:d5:
7c:dd:b8:c8:e7:31:0c:64:d7:9b:52:e8:4b:af:3b:ed:d9:a5:
13:cd:25:7f:df:a0:24:9a:51:99:3a:ea:55:93:32:21:c0:97:
4f:bf:82:28:b6:52:50:2b:71:f3:5c:0e:4f:9d:03:f6:0a:d6:
a7:d2:8e:21:20:51:7e:d8:77:61:a9:e4:6e:15:28:51:c0:11:
3b:48:ae:be:ca:92:77:50:4e:7f:4e:38:a8:65:48:80:e7:7b:
d9:67:b4:e2:2e:84:f0:aa:33:78:3a:8d:f6:16:27:71:92:59:
b7:06:2b:48:bd:c0:e9:de:fe:de:a2:57:ea:03:64:be:35:d6:
fe:1a:87:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:53:26 2026 by rpki-client