
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08df1a56-5267-388a-baf2-0d43374082e2.roa
File: 08df1a56-5267-388a-baf2-0d43374082e2.roa (raw, json)
Hash identifier: CbzksaRwGPeKtujDmVBY3OehMtIkqNh97RnUYl5vSQ0=
Subject key identifier: F3:13:DE:1A:34:C5:A6:64:BB:88:64:14:89:A7:51:24:E9:03:4A:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F77833DED9CA9C59168BEF000
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08df1a56-5267-388a-baf2-0d43374082e2.roa
Signing time: Sun 11 Oct 2026 13:00:12 +0000
ROA not before: Sun 11 Oct 2026 13:00:12 +0000
ROA not after: Sat 09 Jan 2027 14:00:12 +0000
asID: 22258
IP address blocks: 73.252.88.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:77:83:3d:ed:9c:a9:c5:91:68:be:f0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 11 13:00:12 2026 GMT
Not After : Jan 9 14:00:12 2027 GMT
Subject: CN=fa3fb364-0b4c-4295-88d6-2857ee2f1244
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:0a:b0:93:13:72:5f:be:77:8a:22:a1:13:d7:
2f:9a:fc:04:e0:a9:8c:8f:0d:39:b4:dd:43:c1:2c:
e7:ae:e0:da:0e:7e:6f:c3:c3:9d:4a:75:13:ca:57:
6d:fa:a9:fe:98:72:80:64:90:8b:e1:93:f1:94:3a:
58:12:0d:4f:9b:f3:18:e0:66:0a:51:f1:f5:1b:60:
a8:63:8e:0e:6c:05:21:c6:38:c3:6e:67:ec:37:07:
e4:4a:e5:9e:99:c2:90:cb:fa:99:b0:21:a5:62:3f:
00:26:b4:fe:61:be:8a:b3:91:d3:bd:0d:2f:58:69:
7b:6b:a4:87:94:46:4f:b9:8c:59:51:4b:82:72:3d:
44:b6:a6:3e:dc:9e:ae:6c:c3:76:3d:a6:c6:79:5a:
0a:1f:5c:68:98:54:db:1c:6a:da:9f:ab:01:6b:52:
0c:57:34:e1:55:30:07:b1:bf:d5:a3:4e:77:ac:50:
a8:a6:71:81:a3:6d:fc:c7:25:ff:16:c5:cf:10:e9:
5b:26:42:7e:c0:4d:89:ee:c7:bb:00:53:99:0f:35:
49:5f:9b:e7:58:4c:fc:eb:eb:09:ba:4b:2b:ec:1c:
ed:5d:38:35:7a:7f:22:98:63:75:73:5b:5c:52:af:
ea:b2:60:fd:b7:2d:54:61:a0:29:a6:22:1b:b6:8a:
bb:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:13:DE:1A:34:C5:A6:64:BB:88:64:14:89:A7:51:24:E9:03:4A:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/08df1a56-5267-388a-baf2-0d43374082e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.252.88.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
90:4a:d3:f3:85:5b:fe:8d:8a:96:6d:0c:b7:a5:5d:85:af:09:
d6:a6:22:f8:61:6c:5e:86:fe:82:77:02:d8:5d:a3:c9:80:d8:
d0:e1:7e:29:5d:c3:14:69:bd:24:df:51:eb:5a:09:f4:00:41:
04:2c:51:31:92:80:2e:5e:94:d4:e6:b4:2d:dc:79:b5:97:81:
c4:ad:8b:1f:77:7c:f1:2a:be:c0:9a:35:36:67:5e:b1:66:de:
eb:61:5d:1f:75:8a:c7:c0:e2:1e:ec:4a:a6:90:7d:30:32:c9:
33:93:76:03:e0:c4:bc:88:24:92:a6:39:c4:7d:2c:4a:ab:a7:
03:7d:b7:c3:b3:35:40:c3:5b:b5:18:df:50:33:63:25:3c:5a:
5d:5a:a8:d6:8e:04:1f:6e:50:9a:cf:1f:37:78:1b:53:52:b8:
21:e0:07:4f:c0:c9:11:79:cc:2c:68:2c:ee:43:50:06:81:4d:
d5:d7:4c:5a:36:49:a4:61:b7:d5:e6:51:09:fd:7b:d7:e8:1d:
b8:96:db:0e:de:cb:74:67:e1:70:ff:75:be:2f:58:ad:a9:e0:
2e:58:7c:7f:04:f2:51:9b:c0:44:a8:fc:95:2d:6c:62:ad:f9:
92:8a:ca:81:a5:ad:fa:59:b3:e2:a4:45:5d:4f:90:49:a8:cf:
8f:90:5b:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 13:54:25 2026 by rpki-client