
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/477cf45f-458a-36a3-80d4-cb221bec0baf.roa
File: 477cf45f-458a-36a3-80d4-cb221bec0baf.roa (raw, json)
Hash identifier: VnYn7zlx8Ta6rLbhJNGtvyB5SU0Y6HXU9SZi+Um6pRg=
Subject key identifier: 11:C9:89:C1:27:C4:F1:0D:D9:34:B7:9F:45:C0:36:A9:13:E5:53:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4DC88DF0DC4977866FB340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/477cf45f-458a-36a3-80d4-cb221bec0baf.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33490
IP address blocks: 73.96.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4d:c8:8d:f0:dc:49:77:86:6f:b3:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=b18f0e43-dc82-4bca-87e9-979e5c0c2535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ba:fe:00:b6:58:ab:3f:7a:af:14:ed:7b:f5:
b2:13:f8:6e:b1:34:8f:65:ab:f4:db:fa:7a:f8:46:
4b:a2:65:2c:35:76:0b:0b:3b:71:e9:9f:b4:9c:5c:
50:c7:35:4f:d7:fd:d6:c6:07:ef:64:c7:ee:9a:78:
67:3f:4d:bf:2d:2a:dd:7e:fa:88:5a:99:b1:db:69:
d2:23:4e:53:d8:ca:a1:e3:98:31:be:b0:ef:43:90:
57:43:8a:fa:82:4f:0f:03:91:c9:8c:eb:5d:2d:ce:
34:a6:5c:c8:75:74:a3:3f:2c:8c:a2:0b:78:26:c7:
07:4c:a0:d5:97:24:d3:94:cb:13:14:9b:7b:08:f8:
b3:20:71:c2:ec:a8:3f:06:09:62:c0:1c:73:fc:63:
03:10:e2:41:e5:1d:96:d1:80:a6:17:7a:6c:eb:a8:
76:83:b9:88:4d:1b:94:0c:6c:fb:ae:40:b5:cf:ff:
5e:bb:1c:fe:84:66:7a:51:ce:21:d5:8f:8d:03:8a:
07:31:0c:e1:99:f1:0c:46:2e:29:76:68:0b:b4:8f:
69:63:4e:ae:da:1f:05:b9:7c:02:53:0b:da:31:9c:
72:75:f5:25:e3:d6:a4:53:66:39:84:18:90:91:c1:
88:c5:43:e1:fc:1d:58:8f:32:a8:73:ea:d7:30:f9:
1a:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:C9:89:C1:27:C4:F1:0D:D9:34:B7:9F:45:C0:36:A9:13:E5:53:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/477cf45f-458a-36a3-80d4-cb221bec0baf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.96.8.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:77:95:24:9f:d9:21:9e:28:30:46:af:e0:8f:94:43:1c:58:
56:fc:08:99:5f:6e:d1:3a:04:47:c3:c6:b1:20:93:1f:8f:65:
5a:ef:50:f0:ae:02:fa:5e:fb:5b:ef:93:02:20:38:82:e7:20:
87:29:ee:a5:71:b2:90:22:34:a3:86:d8:2b:10:91:ee:3d:8e:
d0:f1:8c:fb:ee:bb:b1:de:ee:1a:5a:a0:53:4a:f3:5b:cc:c1:
70:6f:47:b5:17:1a:96:36:4a:5f:35:83:06:de:02:85:7d:04:
60:20:08:e4:3a:f6:1b:c5:79:12:c4:dd:a7:a5:98:db:4e:0b:
40:8e:b4:b0:52:b9:28:23:45:50:7e:fa:dd:11:82:fc:d1:bc:
d0:fe:a9:f8:6f:89:d2:ff:dc:b1:21:3d:dc:9c:b5:85:b7:8d:
db:7a:bc:8e:32:f1:05:80:74:a8:93:5b:4e:2a:8c:2e:9b:6c:
ee:13:fa:fa:92:91:af:98:4d:03:dd:4b:7c:32:22:aa:88:cb:
28:69:48:22:b5:0d:a0:06:5f:f3:01:83:48:95:51:22:6a:f7:
96:d3:83:60:39:4f:3f:e2:28:54:56:2d:e9:8c:7e:3f:3d:4f:
fb:67:fe:3c:7f:1f:e2:fc:d3:3a:0d:a1:ea:1a:3d:70:37:04:
7b:89:14:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:58:40 2026 by rpki-client