
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/708758c5-e0c9-3ca8-a17d-5bb093e15815.roa
File: 708758c5-e0c9-3ca8-a17d-5bb093e15815.roa (raw, json)
Hash identifier: Iba0PVSTjTZlpG2ByS1WKf7aDzj+WQDIq/SqCTbDxWU=
Subject key identifier: 87:76:0E:E8:F8:F1:7B:A8:FD:C2:24:15:BC:3F:E8:AC:E6:C1:AF:8C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF719CED2ACB547283955A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/708758c5-e0c9-3ca8-a17d-5bb093e15815.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33659
IP address blocks: 73.33.156.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:19:ce:d2:ac:b5:47:28:39:55:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=543f0fb9-b55a-4fc9-885d-8daf79fefa4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:aa:13:f6:0c:ea:c0:29:a3:3a:53:5c:66:7a:
c2:e2:25:68:54:14:44:0c:7f:db:54:94:b1:3b:c4:
f4:96:69:eb:f6:33:74:b3:47:7a:22:bf:0f:42:6a:
1c:94:e3:64:e3:62:13:79:de:2a:ef:59:4a:58:33:
c9:d7:b1:77:72:ed:1b:d0:c7:f4:1f:7b:05:ed:52:
e2:e8:35:8a:e9:93:8c:04:d1:e6:f5:b5:e7:bb:1f:
c3:12:7f:c9:bc:2d:12:7f:5e:01:73:9c:28:b1:30:
9c:d2:00:0f:be:4e:02:51:92:34:4c:67:9c:c4:b4:
1b:e4:f1:2b:3b:db:84:39:13:95:51:eb:bf:be:77:
ce:8b:a6:c4:c9:c7:7b:f9:c3:45:9d:03:07:e7:72:
49:f5:38:33:67:36:bf:ca:18:bb:cd:98:e7:d8:19:
12:ca:76:2d:10:14:fe:9a:d2:e0:a1:40:a7:8d:16:
eb:72:6a:08:31:76:53:ad:03:ab:91:5f:24:44:e7:
e3:08:ca:b6:29:29:29:6d:36:da:9e:17:a9:08:00:
60:97:6e:fa:4e:49:b5:16:4b:07:aa:39:66:d6:e0:
25:38:58:35:0e:11:b4:ce:99:d2:29:8c:7c:29:09:
39:e5:13:23:e5:3d:b9:b8:f2:2c:56:3a:90:49:69:
46:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:76:0E:E8:F8:F1:7B:A8:FD:C2:24:15:BC:3F:E8:AC:E6:C1:AF:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/708758c5-e0c9-3ca8-a17d-5bb093e15815.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.33.156.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:8a:b5:41:2a:a5:ba:5a:fc:be:10:96:16:5d:10:76:fc:fb:
c4:b1:76:6e:87:27:80:98:57:85:ea:40:41:a8:b6:67:cd:4c:
e4:ad:8a:cf:fd:eb:8c:33:51:3c:5b:ae:55:12:5e:00:04:63:
e0:41:50:6d:72:98:e8:32:21:e6:c9:ca:f7:4b:b9:f1:24:34:
d8:c0:f2:4f:0e:f3:95:5e:01:90:f4:09:c0:6a:02:ea:e9:ca:
c8:ab:75:77:1f:1b:08:22:26:b1:03:4f:c1:bf:07:9c:2b:4a:
a2:4e:65:38:dd:a5:fe:2a:e4:02:08:89:e3:8f:0d:0b:63:2d:
0b:29:a1:c8:d7:64:81:a7:fd:d9:00:7d:f9:9b:05:5a:70:ed:
4d:86:bc:71:6b:27:56:a8:9a:d1:46:03:8d:84:45:3e:ac:87:
d6:fe:17:d7:bc:78:5f:79:8c:03:3b:8b:61:62:4b:4c:55:a0:
f1:32:6c:13:9b:db:dd:9d:e0:0f:a1:10:3f:0c:1c:52:b3:a2:
47:4a:71:9a:67:00:74:cc:48:b6:72:15:8b:a0:74:58:a8:96:
e6:f2:82:06:37:8a:85:f5:c6:f3:52:ba:92:c0:1e:0b:e3:42:
d6:91:10:97:5b:3c:55:fe:d0:c3:6b:db:f1:af:9c:0c:8a:1b:
87:14:8b:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:24:22 2026 by rpki-client