
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a7858a-1fa9-3988-8f35-720ad5218719.roa
File: 49a7858a-1fa9-3988-8f35-720ad5218719.roa (raw, json)
Hash identifier: 7uY+jXCKfRH91w0SdUwHNi4taVq0IP5sJQonojOX/7A=
Subject key identifier: 32:74:54:70:F3:FB:42:34:AE:51:DC:E6:7E:DF:A0:88:67:36:80:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6C624F5676809223A1B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a7858a-1fa9-3988-8f35-720ad5218719.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33651
IP address blocks: 73.223.24.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:c6:24:f5:67:68:09:22:3a:1b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=f7c38a6a-6b07-4d1c-ab88-5db4069c5f35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0d:24:c6:5f:86:29:d0:fc:21:ae:aa:f1:42:
30:1a:00:a6:ec:3e:0b:62:93:10:bc:78:d6:6b:e9:
8e:8f:1b:a1:e3:a5:65:d8:e9:3b:b5:46:51:d9:36:
a8:d8:29:90:3b:e9:94:c9:e4:a5:3c:42:61:f3:1b:
68:40:34:06:6f:b3:aa:0b:40:d1:f1:99:06:54:bc:
cb:f3:ee:03:6c:f9:19:4f:ad:63:13:74:67:d2:d5:
53:e7:f4:43:d4:2d:ab:5c:e7:eb:01:83:c0:c2:6f:
3c:c6:c7:10:2e:c1:79:b0:65:4b:60:dc:f6:01:1c:
df:1e:3e:21:4e:94:c1:10:57:d5:d6:a1:a3:61:00:
be:55:3f:44:12:ae:11:9b:0d:a9:14:9f:15:47:3e:
e8:4f:64:a6:1e:4a:40:e9:74:77:a7:fd:f5:f1:ca:
56:b8:6a:aa:7e:85:39:58:0b:11:54:ff:8f:a7:55:
98:e2:8f:f3:c3:61:c2:fe:df:ce:8a:bf:6d:d6:ce:
fa:b9:c6:b1:f8:e1:f8:d1:ee:6a:45:ae:43:db:94:
47:51:aa:7a:7a:35:09:91:7c:85:7b:f9:cc:e0:4a:
ff:7d:a4:20:85:a6:e5:11:6b:6a:8e:c5:2e:bb:55:
99:21:91:5a:57:ae:4d:5d:60:a6:9e:3a:55:31:5d:
8a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:74:54:70:F3:FB:42:34:AE:51:DC:E6:7E:DF:A0:88:67:36:80:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/49a7858a-1fa9-3988-8f35-720ad5218719.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.223.24.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:75:2b:76:4a:1d:92:96:9c:e6:21:0d:da:5c:31:94:0f:f1:
9d:72:b4:58:97:1c:84:5a:1b:06:3a:08:02:66:ea:2e:2f:85:
82:ce:36:51:cf:85:b0:c6:97:89:f9:be:e1:c0:ab:a0:48:c9:
18:8c:30:35:f2:0f:84:d4:15:e2:be:27:d4:d9:08:eb:c9:1d:
77:15:19:ad:7b:e6:56:51:99:4a:49:fb:c8:e7:86:b7:19:58:
c5:a5:f4:16:0d:ae:34:57:c1:5d:0d:13:7d:b6:12:65:ac:92:
f7:f7:a5:9d:09:d0:45:19:23:23:63:9d:f9:2b:fa:b0:4e:7d:
2f:12:4d:50:9d:e2:70:7c:0c:c4:15:75:fd:f8:ed:f7:ad:78:
ee:32:f4:bd:74:3e:92:df:e1:92:1d:e7:e3:fe:2d:e5:fe:e9:
4f:cd:f1:9d:39:84:24:59:b0:94:16:e9:05:37:fe:c1:47:18:
e0:e0:53:ae:f7:b7:02:41:5d:13:4d:0d:ed:2c:35:18:c7:2a:
4d:1d:3a:49:a3:eb:83:3a:52:af:5c:17:4b:12:89:7f:3b:13:
7d:54:4d:85:93:c8:ba:2d:79:30:92:68:fb:45:23:a0:56:a8:
f6:7d:46:64:50:26:ae:d3:10:f8:69:3b:8e:6f:2f:19:b8:a2:
3c:3a:32:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:54:06 2026 by rpki-client