
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f5a603-d6ac-3097-8747-e5b4f3bcd30d.roa
File: 91f5a603-d6ac-3097-8747-e5b4f3bcd30d.roa (raw, json)
Hash identifier: 7m2d6pqJEgJPJVQXNYMYFNrlA7BhskZ94hP4sx34Ts4=
Subject key identifier: C3:BC:7E:51:1E:A5:77:84:9A:07:9D:E0:93:76:BF:10:2D:5F:8D:ED
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119F41C1A57CD4949FCC0F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f5a603-d6ac-3097-8747-e5b4f3bcd30d.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 73.22.154.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9f:41:c1:a5:7c:d4:94:9f:cc:0f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=df0baeaf-7f0c-46de-9fa4-af430cefeef8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:73:15:34:9f:4f:ed:53:ea:01:02:a4:4a:7c:
06:f7:0f:d4:de:00:7e:47:71:03:63:3e:dc:57:15:
19:40:c2:6c:12:c8:2e:fa:78:3f:c2:cc:d2:4b:09:
89:d4:e0:a4:ca:2a:2d:8d:44:b9:b8:c0:7e:ed:d5:
0b:d3:be:3f:63:a3:f3:d6:17:5b:f5:20:34:ae:eb:
e8:f1:65:80:b4:39:14:01:4b:d6:40:2c:29:6a:c9:
a4:af:36:a2:ac:63:ba:73:11:86:93:ab:20:6b:b7:
3d:b5:5c:db:fb:63:62:84:33:a6:24:ec:8d:ac:21:
5e:35:3a:d1:4b:f2:96:9c:04:bf:e8:b8:9d:79:c2:
c1:c6:bf:f8:e8:41:b7:eb:9d:92:a8:8a:07:dd:d6:
3f:26:c7:eb:56:6f:5f:a6:96:76:6f:5b:76:9f:37:
5c:28:14:d4:3a:9b:81:ef:cc:4d:0d:0d:66:24:ba:
1e:39:8c:53:ee:22:84:2a:1b:71:d3:f3:2b:14:96:
a9:88:52:88:53:f0:c6:ec:55:35:0f:cf:b4:e3:7f:
e5:e4:af:c7:7b:91:76:e4:ab:2f:8a:e5:8c:f3:ef:
53:7c:ba:71:6b:11:24:af:c0:68:6f:6e:ca:59:87:
d0:3e:12:11:d1:c7:10:b6:dc:fe:14:a6:07:e8:cb:
86:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:BC:7E:51:1E:A5:77:84:9A:07:9D:E0:93:76:BF:10:2D:5F:8D:ED
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/91f5a603-d6ac-3097-8747-e5b4f3bcd30d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.22.154.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:6a:f4:0b:80:b3:6b:ce:f2:6b:f7:bc:ae:b4:53:5b:f8:1a:
d3:65:81:c6:db:20:b8:23:79:08:2a:12:6f:3a:70:7e:91:44:
e0:ec:bd:a5:eb:68:fb:c5:d9:79:85:a3:39:9d:ef:7d:fc:73:
99:2a:b8:8e:c1:f3:b1:d3:44:b5:37:d0:c8:72:35:37:37:ec:
2c:06:14:1b:60:d2:79:e1:75:97:1b:7b:69:2f:0d:70:f1:94:
2c:29:58:3e:fc:93:88:27:21:a0:26:e9:92:64:42:9f:1a:4d:
0e:56:a2:65:5a:7c:cc:93:f3:de:08:5c:20:ae:eb:d9:b4:4e:
78:ae:54:20:90:5a:8b:96:8a:90:3e:9d:37:98:30:49:d7:b5:
54:67:26:a7:a6:a5:b5:54:60:26:c9:8a:b6:25:3f:05:0d:f7:
04:79:81:6b:85:04:5d:a7:1c:d2:d1:41:6b:55:d6:76:2c:19:
6e:71:53:ae:b5:cf:6a:e9:08:b9:5d:70:f7:0f:a0:dc:da:07:
52:ff:60:ec:9d:d4:56:6c:3b:d6:33:ee:41:ab:b4:16:5e:9a:
44:a7:51:a5:af:44:e9:ce:9f:4b:f3:37:8c:43:5b:a5:f5:32:
a2:cd:ef:b7:82:a9:43:f8:d1:ca:e5:c8:e3:51:3e:ee:2f:46:
1f:f4:8a:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8Rn0HBpXzUlJ/MDwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZGYwYmFlYWYtN2YwYy00NmRlLTlmYTQtYWY0MzBjZWZlZWY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh3MVNJ9P7VPqAQKkSnwG9w/U3gB+R3EDYz7c
VxUZQMJsEsgu+ng/wszSSwmJ1OCkyiotjUS5uMB+7dUL074/Y6Pz1hdb9SA0ruvo
8WWAtDkUAUvWQCwpasmkrzairGO6cxGGk6sga7c9tVzb+2NihDOmJOyNrCFeNTrR
S/KWnAS/6LidecLBxr/46EG3652SqIoH3dY/JsfrVm9fppZ2b1t2nzdcKBTUOpuB
78xNDQ1mJLoeOYxT7iKEKhtx0/MrFJapiFKIU/DG7FU1D8+043/l5K/He5F25Ksv
iuWM8+9TfLpxaxEkr8Bob27KWYfQPhIR0ccQttz+FKYH6MuGswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMO8flEepXeEmged4JN2vxAtX43tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOTFmNWE2MDMtZDZhYy0z
MDk3LTg3NDctZTViNGYzYmNkMzBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSRaaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJq9AuAs2vO8mv3vK60U1v4GtNlgcbbILgjeQgqEm86cH6RRODsvaXr
aPvF2XmFozmd7338c5kquI7B87HTRLU30MhyNTc37CwGFBtg0nnhdZcbe2kvDXDx
lCwpWD78k4gnIaAm6ZJkQp8aTQ5WomVafMyT894IXCCu69m0TniuVCCQWouWipA+
nTeYMEnXtVRnJqempbVUYCbJirYlPwUN9wR5gWuFBF2nHNLRQWtV1nYsGW5xU661
z2rpCLldcPcPoNzaB1L/YOyd1FZsO9Yz7kGrtBZemkSnUaWvROnOn0vzN4xDW6X1
MqLN77eCqUP40crlyONRPu4vRh/0iiA=
-----END CERTIFICATE-----
Generated at Sat Sep 5 14:16:58 2026 by rpki-client