
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825952c2-8436-3a80-86dc-a9be18d6b412.roa
File: 825952c2-8436-3a80-86dc-a9be18d6b412.roa (raw, json)
Hash identifier: RUncGn8o8dsYwK7F1MzZexusw23E0ttmZJPicA0treA=
Subject key identifier: 65:C8:B3:19:EC:32:56:C1:D0:A3:8E:D5:A4:CA:27:92:E9:FF:B9:61
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6C5F76817858397D811B8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825952c2-8436-3a80-86dc-a9be18d6b412.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33651
IP address blocks: 73.223.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:c5:f7:68:17:85:83:97:d8:11:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=09e33fd5-e109-4c47-b4aa-a222bda3899b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:19:f9:cf:9a:9c:52:47:35:99:8e:4d:66:af:
7b:18:a7:8f:2f:71:b1:69:7f:8d:14:35:20:45:f6:
36:89:46:de:90:9c:4b:ef:2c:6b:12:0a:d1:b1:23:
be:14:8a:b4:a9:f2:4e:cc:f7:d5:a5:e6:6d:55:6e:
20:57:44:ae:ba:73:14:31:26:8b:ac:47:3f:f4:a7:
2f:9f:25:d8:fe:82:af:b1:dc:9f:64:09:3d:ce:d0:
9d:05:49:42:35:27:d0:f4:77:49:bd:2b:b5:7c:bd:
38:d7:ea:df:b7:37:ad:dd:e6:2d:51:a1:fa:7f:63:
a5:d1:48:31:08:b3:64:36:a3:ae:47:6c:9f:2e:be:
fc:bf:d7:ef:43:4d:0a:0b:27:50:85:96:2e:7e:cf:
69:16:29:17:89:35:50:4d:c0:85:52:23:56:c3:1e:
9f:c9:b1:d6:2d:16:00:a4:23:4c:a4:7c:4a:a1:8a:
26:5c:a7:1f:4e:b7:e8:e4:51:80:f1:70:de:b8:75:
10:51:cd:b0:04:ab:44:94:90:43:58:eb:48:c9:cf:
0f:7c:0c:6c:a4:fe:97:cf:89:a4:7b:90:de:06:c2:
2a:aa:d7:f3:94:98:e0:d2:1a:ca:ad:7c:b2:41:bd:
64:94:b2:77:99:db:d8:73:cb:52:71:b1:d7:a7:d0:
3e:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C8:B3:19:EC:32:56:C1:D0:A3:8E:D5:A4:CA:27:92:E9:FF:B9:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/825952c2-8436-3a80-86dc-a9be18d6b412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.223.216.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bd:df:1f:50:c5:d5:86:57:55:84:f2:cd:fd:8e:9f:8c:fd:
26:44:cf:91:7c:5c:a9:82:42:71:34:7e:7e:46:52:1a:44:ef:
3c:d9:8a:d4:cf:89:58:b0:81:f8:6d:88:0c:52:f6:e5:b8:cc:
3b:29:56:56:a8:6b:83:6f:04:de:6b:c6:3c:b8:2e:50:d4:7e:
3d:4b:29:d8:2c:0c:59:71:da:ba:79:c1:ce:9e:31:0b:7d:70:
92:36:93:24:0c:33:5d:bd:e6:c9:fd:7c:a8:0a:55:0c:cc:44:
2c:0b:3b:30:23:5e:fa:91:15:6d:0c:b4:58:44:e4:ed:69:fd:
37:ad:f8:5d:8d:02:80:3d:b3:42:91:0a:27:70:e6:20:d2:94:
ad:ef:83:a7:37:23:64:42:46:93:47:8a:ba:ff:d5:0f:cf:35:
74:ba:d3:4d:88:e1:e4:ae:2f:d3:51:83:17:1c:df:45:c3:38:
e7:d4:50:ee:ec:ce:fc:39:41:7a:ab:96:9c:81:cf:56:0e:fc:
0a:97:d0:8b:51:4a:07:c0:f5:76:75:7d:48:b1:9a:d5:2b:4c:
06:28:b5:25:71:6e:c9:1c:2d:82:0a:38:de:c7:7b:d5:69:34:
81:5c:11:e9:73:e8:8d:8d:b8:ad:3f:49:9b:cd:50:ea:d8:46:
fe:43:18:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:48:30 2026 by rpki-client