
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab48f22-fe1a-3989-8483-a474622591a0.roa
File: aab48f22-fe1a-3989-8483-a474622591a0.roa (raw, json)
Hash identifier: aosr+oViq32dh8bjSRwpsnvfeigMInlm0dJx+lGOSdA=
Subject key identifier: DC:A1:A7:3B:84:4D:56:EB:37:64:62:5E:65:63:14:48:C5:E4:99:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F11A053BBBFDA7DFB19EA6FC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab48f22-fe1a-3989-8483-a474622591a0.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33651
IP address blocks: 73.158.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:a0:53:bb:bf:da:7d:fb:19:ea:6f:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=a27dc557-6fa8-4d12-9e20-cd34d1594415
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:4f:63:24:2d:52:1d:dc:58:01:34:ec:09:ff:
3d:07:aa:71:88:86:20:4d:a8:64:9a:4c:f4:d8:a1:
0e:8e:58:c4:eb:e1:9b:db:6b:7c:1f:04:47:4f:ab:
78:64:00:db:62:42:fb:13:49:7f:7e:5b:f0:3d:69:
56:7e:33:2c:48:5a:e1:7f:43:c3:42:e9:9e:c0:41:
c3:4c:86:b9:e0:80:47:94:0d:ea:18:b1:bd:4d:d3:
84:8f:c8:09:4f:c0:a6:ed:8d:1a:e6:08:08:d4:52:
e7:1e:05:08:a5:78:1f:3d:6d:ac:23:89:9b:75:8e:
d0:05:b0:89:f9:a7:44:e2:92:cb:2f:d6:2f:16:8c:
8c:ac:0e:60:b3:c3:b7:36:3b:7e:c7:dd:d7:23:61:
1d:60:ff:30:6c:46:f7:87:a2:84:41:13:4a:20:6a:
88:29:cb:5d:4b:06:95:e8:0e:57:f4:54:3c:b3:32:
00:0f:69:e1:5d:65:8a:1b:78:3e:ac:f6:8e:c2:bf:
06:34:53:fb:05:19:5b:fb:21:8b:bb:1c:87:27:58:
9e:ce:28:3d:3a:d6:29:84:b6:10:44:86:c6:0b:be:
76:aa:54:cf:30:b2:81:c7:4b:b1:27:cb:77:c9:e7:
18:92:c0:5f:54:e3:1d:37:e6:20:61:d1:64:1c:29:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:A1:A7:3B:84:4D:56:EB:37:64:62:5E:65:63:14:48:C5:E4:99:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aab48f22-fe1a-3989-8483-a474622591a0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.158.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d4:4a:de:14:71:6d:ee:14:df:41:ac:f1:d1:c9:63:d2:ef:8e:
22:e8:13:31:40:9a:67:16:ce:73:3e:d2:7b:ac:30:04:84:0d:
e2:80:63:d5:29:8e:20:f4:90:68:19:9e:c4:aa:7d:b5:50:7f:
7d:de:b3:e9:95:98:a7:bf:2b:0b:a4:1d:b4:55:63:2b:fd:da:
62:ad:11:af:de:88:93:9b:ee:31:8b:fe:fb:42:97:15:ce:86:
5a:e8:98:8e:5e:e9:40:dc:68:ea:b9:27:a1:c2:9a:46:bd:2e:
a3:80:8f:c1:be:be:64:6e:f6:3f:eb:af:78:2f:87:77:c3:ad:
46:07:41:c1:15:59:41:c9:0f:30:22:c3:a0:dc:e5:91:ae:29:
8f:ef:95:45:f4:a2:89:29:45:8e:0f:03:24:8a:87:a1:35:44:
52:b4:cc:a1:a4:f1:7d:e1:e3:59:53:eb:af:02:f2:b7:ee:27:
a3:4a:52:ee:50:64:73:24:09:ab:c2:52:d8:80:82:40:1c:4d:
36:24:5d:6f:c9:a4:03:99:d8:47:07:eb:c0:20:0a:43:22:ed:
85:ef:7a:29:54:17:11:7e:e2:88:06:27:89:a0:a0:fd:97:25:
91:dc:a1:6d:2e:37:49:46:78:0e:43:9c:08:d7:b9:85:51:c8:
1d:ff:21:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 03:25:37 2026 by rpki-client