
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11b00c35-8d8c-3d29-8f02-93aa9332c967.roa
File: 11b00c35-8d8c-3d29-8f02-93aa9332c967.roa (raw, json)
Hash identifier: xMDBmZZJQ1ZxNpIWzp9lWOLLkebp/N1qyMMwlnkwoRU=
Subject key identifier: 84:45:90:1E:75:E4:F7:A8:A8:82:C2:AA:94:5D:A2:4D:D6:71:09:19
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D0EA7C7B3CEBA8492640C7F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11b00c35-8d8c-3d29-8f02-93aa9332c967.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 33661
IP address blocks: 73.28.0.0/17 maxlen: 17
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 08 Mar 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:c7:b3:ce:ba:84:92:64:0c:7f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=bbae4536-a30c-4336-90a0-6016c13864dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:7c:6f:34:bb:1c:60:d3:78:9f:d0:ca:5a:a2:
a5:93:5d:c7:bd:a9:19:f8:25:8a:61:c1:f5:1e:81:
3c:bb:a5:bf:cb:2f:35:8b:ff:14:3f:87:28:2a:c2:
37:41:a7:74:91:f3:58:b0:28:53:d2:80:04:52:b3:
80:b6:8e:70:e7:e9:e2:d9:5e:78:ba:8d:62:84:5b:
9b:a2:ab:7b:bc:c1:96:42:ff:6b:99:19:a6:69:2d:
fe:1b:59:ca:09:3c:03:75:80:ac:3f:21:d7:79:5b:
6f:81:c7:11:63:8f:25:ae:c5:0e:9e:c8:ab:c3:ac:
9e:ed:32:2d:b6:ac:67:2c:96:55:73:24:6b:02:b2:
b0:e0:cd:20:df:1a:1f:b1:ea:01:61:fe:d3:c0:65:
fb:d8:6f:5d:da:cf:72:99:63:0b:15:c1:70:b2:70:
70:b5:59:5b:ce:6c:63:c4:ba:0f:e1:56:68:1e:4e:
3e:33:ef:3a:1e:28:b1:11:29:2c:2d:5d:35:83:7e:
b0:be:57:30:1e:e4:3e:44:d1:fb:68:d8:63:bc:da:
e6:ea:bb:20:86:a4:0f:54:39:fe:ac:76:28:09:84:
98:a4:5d:68:62:78:0b:a7:48:bb:d7:2a:32:93:86:
cc:0c:3b:6c:28:c6:30:33:cf:4b:75:e1:02:39:a0:
cb:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:45:90:1E:75:E4:F7:A8:A8:82:C2:AA:94:5D:A2:4D:D6:71:09:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11b00c35-8d8c-3d29-8f02-93aa9332c967.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.28.0.0/17
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:c7:be:a8:0c:c5:f9:50:6b:13:8a:6e:40:fa:c6:f9:67:c0:
e8:f0:2a:60:3e:f7:fb:93:63:84:f3:48:a5:9d:55:fa:d4:81:
13:b4:06:64:03:00:fa:de:0e:eb:f6:20:dc:86:3f:f8:25:69:
e5:5f:09:a3:79:e9:17:7b:09:de:33:97:90:79:25:b4:9d:c3:
e8:08:98:8a:20:71:cf:c1:b1:b7:0b:23:99:c0:b6:62:53:90:
c1:eb:41:bf:99:5d:57:c6:5c:60:29:64:48:43:2d:47:ee:94:
bf:43:d4:97:74:84:83:59:ea:62:99:0c:df:85:e1:7c:31:63:
fa:44:3b:fb:d8:ac:a5:f8:68:8e:eb:7b:31:f3:a8:22:17:a5:
7d:32:45:65:20:ad:2b:ac:77:43:a0:f6:c8:1d:18:a6:0f:7f:
a8:e6:04:c0:30:60:de:d6:47:e1:9d:88:2d:7b:f5:47:a1:6e:
64:d7:8c:66:0e:a4:ec:93:ff:a0:d6:12:52:01:39:9e:fb:a4:
d6:2d:d9:c1:58:98:36:cc:08:3f:4d:b5:be:65:5e:d1:12:86:
3d:f9:de:a7:08:11:90:f2:ce:7d:f0:b2:03:6b:ba:c8:18:2b:
c6:92:5c:26:26:ca:53:db:04:67:40:3d:ca:e4:0b:06:14:9a:
88:a3:c1:93
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE0Op8ezzrqEkmQMfwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMwNDE0MDA0MVoXDTI2MDYwMjEzMDA0MVowLzEtMCsGA1UEAxMk
YmJhZTQ1MzYtYTMwYy00MzM2LTkwYTAtNjAxNmMxMzg2NGRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXxvNLscYNN4n9DKWqKlk13HvakZ+CWKYcH1
HoE8u6W/yy81i/8UP4coKsI3Qad0kfNYsChT0oAEUrOAto5w5+ni2V54uo1ihFub
oqt7vMGWQv9rmRmmaS3+G1nKCTwDdYCsPyHXeVtvgccRY48lrsUOnsirw6ye7TIt
tqxnLJZVcyRrArKw4M0g3xofseoBYf7TwGX72G9d2s9ymWMLFcFwsnBwtVlbzmxj
xLoP4VZoHk4+M+86HiixESksLV01g36wvlcwHuQ+RNH7aNhjvNrm6rsghqQPVDn+
rHYoCYSYpF1oYngLp0i71yoyk4bMDDtsKMYwM89LdeECOaDLSwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIRFkB515PeoqILCqpRdok3WcQkZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTFiMDBjMzUtOGQ4Yy0z
ZDI5LThmMDItOTNhYTkzMzJjOTY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHSRwAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIDHvqgMxflQaxOKbkD6xvlnwOjwKmA+9/uTY4TzSKWdVfrUgRO0BmQD
APreDuv2INyGP/glaeVfCaN56Rd7Cd4zl5B5JbSdw+gImIogcc/BsbcLI5nAtmJT
kMHrQb+ZXVfGXGApZEhDLUfulL9D1Jd0hINZ6mKZDN+F4XwxY/pEO/vYrKX4aI7r
ezHzqCIXpX0yRWUgrSusd0Og9sgdGKYPf6jmBMAwYN7WR+GdiC179UehbmTXjGYO
pOyT/6DWElIBOZ77pNYt2cFYmDbMCD9Ntb5lXtEShj353qcIEZDyzn3wsgNrusgY
K8aSXCYmylPbBGdAPcrkCwYUmoijwZM=
-----END CERTIFICATE-----
Generated at Sat Mar 7 10:30:12 2026 by rpki-client