
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaef224b-3de1-38a3-b296-d0a85df7867e.roa
File: aaef224b-3de1-38a3-b296-d0a85df7867e.roa (raw, json)
Hash identifier: K1oimUrArvvQ+dQvcqDB4HmEjULDMGok4vQF4OUpVAY=
Subject key identifier: 16:DB:00:AB:E9:DD:4D:10:59:A8:68:B3:53:EA:31:2C:7C:E3:36:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF7B00F19C64FCF36A75700
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaef224b-3de1-38a3-b296-d0a85df7867e.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 73.208.162.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:b0:0f:19:c6:4f:cf:36:a7:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=57d506f0-20fd-4532-80bb-85a54eb25dd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:35:0b:1d:e9:dc:95:fa:d9:44:60:6a:7b:
7a:14:31:fa:11:17:5c:b3:db:27:2b:18:dd:60:4c:
61:d5:8d:9a:24:e7:1d:bb:60:bc:fe:db:53:d9:c4:
01:04:cf:64:5d:07:20:96:07:43:52:a4:c3:fb:8d:
20:1f:9a:12:d6:f4:1e:30:6d:a1:a6:7a:22:26:fd:
d6:84:30:70:b5:4b:8e:64:ca:52:1a:1b:d1:d8:0a:
fe:7d:ba:47:93:15:0a:ca:a8:4b:db:4d:2f:be:0b:
6b:c4:e8:ea:79:cd:8a:94:9f:f6:71:14:90:1f:50:
74:ec:8b:2d:7e:b4:2d:85:69:d7:40:03:a2:8f:db:
4d:43:4e:44:8f:5d:72:da:27:80:93:5d:75:21:3f:
14:2c:66:a9:d9:be:9c:5f:5a:b0:0e:1f:94:a5:49:
4d:48:66:7f:bf:34:4e:1c:52:ff:0f:f7:51:55:32:
96:6b:f4:8e:34:4c:83:c5:7b:37:f3:9c:1a:15:cd:
f8:88:04:9a:58:60:63:f1:f9:de:bd:e8:ff:c5:49:
50:b1:e5:e2:1d:8b:a1:7e:ab:86:7d:ab:4f:5a:c4:
7a:1c:c1:65:e8:13:06:b5:17:e3:e2:e2:45:d8:9b:
20:51:9d:3e:c3:e6:01:24:ff:8f:e6:27:58:2c:9c:
2a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:DB:00:AB:E9:DD:4D:10:59:A8:68:B3:53:EA:31:2C:7C:E3:36:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aaef224b-3de1-38a3-b296-d0a85df7867e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.208.162.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:e7:ad:86:70:99:59:b0:e3:b4:82:86:b1:cb:b9:82:48:b0:
78:5e:8e:4b:44:d1:c2:1c:4b:46:73:18:c1:33:b1:f3:68:81:
d1:ba:8e:98:df:2c:90:3b:d3:29:cb:c6:68:42:eb:cb:cd:b7:
fa:7e:d3:0f:4e:50:82:d1:a6:f7:b4:c7:9b:a1:ee:a5:6e:bd:
1d:fa:20:f0:68:0a:20:9e:aa:64:89:4a:4a:30:11:89:56:e4:
3f:66:98:ce:69:6b:0a:fc:f6:fc:81:f5:3b:e4:a2:f8:83:06:
13:96:07:f6:58:2b:18:65:4a:8f:96:f2:41:00:e6:59:ac:eb:
a9:79:44:60:05:fa:91:31:1e:9c:74:14:2a:28:c7:b2:2d:66:
ba:44:15:80:62:b7:94:89:43:41:58:a5:47:37:83:07:58:52:
91:b4:91:ac:61:23:7b:c1:0c:0d:f7:2c:85:6d:62:4a:d6:17:
4e:6a:42:f4:85:b1:97:03:33:f4:1b:94:44:8b:65:31:40:80:
75:91:7a:c4:a5:c9:53:d5:d0:b7:58:1e:f5:8d:c1:e6:a4:d3:
28:1d:53:42:02:fb:48:98:89:a9:34:e1:60:00:9a:ab:ae:3e:
68:71:d8:1e:8f:24:3b:39:18:c0:fe:98:65:96:e9:99:55:66:
a2:3e:f4:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:24:03 2026 by rpki-client