
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa
File: 871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa (raw, json)
Hash identifier: 4/dTjbszktbix8iQdYNFRe3P7yhqmIrCufDA7I2CH2w=
Subject key identifier: EF:FD:B0:E6:A4:F5:0A:65:E1:73:C4:64:41:1B:C9:17:BF:C7:66:E5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF72D23AD49C9ADAF99B940
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33659
IP address blocks: 73.199.72.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:2d:23:ad:49:c9:ad:af:99:b9:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=84d1f8b1-7979-47f2-83b8-c1abbb5823ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:cf:e4:24:03:5a:9f:8e:ca:69:0d:d0:db:1b:
a6:2a:cd:a6:3b:e3:13:e8:15:39:1e:19:8e:d5:7a:
4d:5c:be:07:7c:a5:ee:ca:32:14:73:5a:27:b6:3a:
1e:ba:88:f1:fb:9f:26:55:06:88:f6:48:64:d1:57:
fa:d3:2c:2e:0f:f4:9a:51:b7:84:ed:98:38:fc:5d:
6b:00:3d:4b:49:4c:d6:4d:aa:c1:7f:c0:12:54:c4:
23:c4:b6:00:19:47:57:22:85:ed:85:e3:f4:ec:4d:
e5:5e:79:77:0f:40:21:9d:aa:97:cd:0a:36:86:99:
3f:01:bc:37:de:88:b0:67:74:83:c9:52:32:31:5c:
84:15:3f:9a:86:2b:81:a1:c5:82:ed:81:32:92:11:
a7:74:84:69:27:59:fb:4c:1c:95:be:e0:f2:ae:f0:
3d:34:14:96:5e:e4:6e:6f:53:d4:a3:9c:20:5a:ce:
0d:3b:48:a2:56:9c:0a:f0:2d:6c:e0:d5:5f:45:4f:
53:61:67:d9:f7:47:0c:84:89:3a:5a:2b:d7:7a:28:
5f:6e:1d:6c:81:52:83:38:46:6a:57:50:d0:0b:11:
94:5e:b5:af:57:6c:b5:57:0c:42:3b:a5:ca:d8:e4:
23:c0:64:90:f8:72:08:ff:b4:69:e7:fa:5e:3a:09:
bc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:FD:B0:E6:A4:F5:0A:65:E1:73:C4:64:41:1B:C9:17:BF:C7:66:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/871a902e-201e-3415-8ae0-fdcf8a1e80f0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.199.72.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:f9:6b:ba:c1:bc:3c:8b:9b:4b:5e:38:a7:5d:48:58:96:91:
7b:1e:3e:b0:17:af:63:29:e5:1c:d5:dc:7c:71:ab:e9:e0:ba:
77:9c:e3:ce:a7:5b:c4:a0:a5:19:69:a8:af:12:cf:fb:8e:5d:
89:cb:e3:9b:fd:98:75:ce:4a:d1:8f:cb:86:52:c1:72:2f:28:
d2:f1:e2:27:6b:d7:d0:c7:c9:bc:2b:5e:4f:d8:04:f6:92:3c:
40:d9:08:a8:80:68:a4:b6:c5:5c:21:92:2e:58:a7:8c:18:1e:
f1:8a:01:8f:f6:ec:53:99:10:84:e3:64:7a:52:10:c7:61:76:
41:8d:99:c3:4e:9d:38:f0:0b:fe:f4:c5:5f:ec:f3:62:a1:c5:
16:01:e7:a3:c6:e1:87:c6:90:4c:08:55:d0:12:6f:5c:61:84:
46:ab:14:e1:7e:81:e2:fc:fa:d1:c1:2b:b0:de:66:55:d1:2b:
44:59:0e:30:69:22:04:0f:55:f7:7e:4a:30:50:ac:3f:8a:27:
fa:4b:4c:89:34:ed:02:81:b1:bc:0d:4e:0f:2c:bf:70:ad:0e:
6a:bf:d9:84:02:ed:38:61:1f:e6:14:b0:1f:d2:b5:7a:cd:38:
46:01:77:15:aa:ab:4e:61:74:e1:b8:23:cb:5c:b0:49:1c:28:
c8:92:36:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2O9y0jrUnJra+ZuUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDQxOTEzMDAzMVoXDTI2MDcxODEzMDAzMVowLzEtMCsGA1UEAxMk
ODRkMWY4YjEtNzk3OS00N2YyLTgzYjgtYzFhYmJiNTgyM2VhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjM/kJANan47KaQ3Q2xumKs2mO+MT6BU5HhmO
1XpNXL4HfKXuyjIUc1ontjoeuojx+58mVQaI9khk0Vf60ywuD/SaUbeE7Zg4/F1r
AD1LSUzWTarBf8ASVMQjxLYAGUdXIoXtheP07E3lXnl3D0AhnaqXzQo2hpk/Abw3
3oiwZ3SDyVIyMVyEFT+ahiuBocWC7YEykhGndIRpJ1n7TByVvuDyrvA9NBSWXuRu
b1PUo5wgWs4NO0iiVpwK8C1s4NVfRU9TYWfZ90cMhIk6WivXeihfbh1sgVKDOEZq
V1DQCxGUXrWvV2y1VwxCO6XK2OQjwGSQ+HII/7Rp5/peOgm8eQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO/9sOak9Qpl4XPEZEEbyRe/x2blMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODcxYTkwMmUtMjAxZS0z
NDE1LThhZTAtZmRjZjhhMWU4MGYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDScdIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABD5a7rBvDyLm0teOKddSFiWkXsePrAXr2Mp5RzV3Hxxq+ngunec486n
W8SgpRlpqK8Sz/uOXYnL45v9mHXOStGPy4ZSwXIvKNLx4idr19DHybwrXk/YBPaS
PEDZCKiAaKS2xVwhki5Yp4wYHvGKAY/27FOZEITjZHpSEMdhdkGNmcNOnTjwC/70
xV/s82KhxRYB56PG4YfGkEwIVdASb1xhhEarFOF+geL8+tHBK7DeZlXRK0RZDjBp
IgQPVfd+SjBQrD+KJ/pLTIk07QKBsbwNTg8sv3CtDmq/2YQC7ThhH+YUsB/StXrN
OEYBdxWqq05hdOG4I8tcsEkcKMiSNiY=
-----END CERTIFICATE-----
Generated at Tue Apr 21 19:16:18 2026 by rpki-client