
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8f333f-c882-3245-b439-fd5e2217b5de.roa
File: cf8f333f-c882-3245-b439-fd5e2217b5de.roa (raw, json)
Hash identifier: +sKW8jkuTy5VMrOQhMz88fjyWi+FuvvohJqEZOneHTA=
Subject key identifier: F4:64:F0:07:DB:B9:F6:3C:57:C6:2E:6C:ED:44:AD:D4:56:75:9F:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E7F4B165B81FB77A3B140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8f333f-c882-3245-b439-fd5e2217b5de.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 73.161.106.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:7f:4b:16:5b:81:fb:77:a3:b1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=08e7c45a-c96d-4f7d-b191-057599c65c1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:f8:24:fc:57:6c:a9:97:7d:17:d5:c8:bf:e9:
ff:7c:9f:6f:42:38:8e:69:5b:2b:2c:47:87:85:03:
55:3b:60:18:d4:9a:a8:93:f4:9d:98:46:cf:6a:98:
64:85:41:4e:92:af:68:8d:74:89:40:59:b6:db:d0:
e7:74:7c:59:d4:6f:40:79:30:43:cc:fa:9d:75:81:
58:3c:dc:7e:dd:e6:a8:69:82:2b:35:8c:21:81:07:
c2:ce:a2:9e:74:74:8b:40:8e:3c:7b:76:de:2c:32:
f0:42:f1:c8:2d:f2:14:84:41:0f:61:81:38:75:9b:
f6:20:76:02:46:1a:4a:74:50:65:d8:e1:61:d5:b7:
18:c7:e4:8b:65:f4:b1:1b:07:3d:5f:73:3d:0b:00:
2a:a2:4d:11:82:9e:df:0b:a3:89:b5:ed:64:70:1c:
ef:c6:9a:be:c5:30:d3:23:86:6a:f3:86:2b:1e:2c:
c2:df:73:b1:8b:14:5c:8d:62:ff:88:7d:f9:b3:73:
d2:21:63:36:ff:c6:51:91:a9:b4:14:7c:aa:40:a5:
96:e0:a3:46:32:36:97:5f:ab:dd:9f:d4:dc:8c:88:
7b:b6:a8:3d:54:cc:0d:a4:d0:42:98:c9:24:e5:ca:
f0:b1:91:94:d9:0c:9a:0a:d1:ab:4a:e4:8e:76:fd:
8c:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:64:F0:07:DB:B9:F6:3C:57:C6:2E:6C:ED:44:AD:D4:56:75:9F:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf8f333f-c882-3245-b439-fd5e2217b5de.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.161.106.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
be:f6:4b:13:2e:aa:1c:1c:f2:d3:7a:8f:8c:dc:e0:43:2c:7f:
88:54:9c:7b:dd:7b:c7:3b:75:81:b1:99:35:4d:c9:aa:4b:eb:
73:fc:96:9b:b7:dc:90:02:5d:1f:1b:e6:8b:12:fe:96:52:2d:
27:32:be:35:23:8e:c3:86:00:72:8e:ed:db:13:42:45:55:1b:
d5:c6:05:5d:2e:76:c8:98:05:e4:b6:c9:15:9b:b1:c8:25:68:
21:af:49:fa:fe:26:71:35:c5:d6:98:c0:88:2d:50:22:b2:d3:
39:9c:b2:a0:9a:29:94:67:a9:7e:5e:df:1f:12:07:73:d4:fe:
b8:f4:eb:ae:a1:39:77:8f:f5:79:bb:7b:75:da:c9:05:33:33:
ae:f5:05:44:a2:10:2b:9e:13:9e:23:c6:80:c7:71:f5:ce:fd:
c9:63:01:08:31:1e:fb:5a:0d:8f:9c:a4:6e:10:3b:f2:43:fd:
e1:f1:19:9d:89:51:57:34:b7:15:33:bb:4a:32:eb:02:71:76:
f6:45:58:da:4d:a3:92:03:28:95:cc:ff:b3:dc:d6:c0:d4:66:
b2:89:6e:e3:be:4c:31:16:76:ed:7a:ae:d9:ad:b6:33:d4:44:
df:84:04:0d:30:4d:13:cb:13:a2:b0:12:13:3d:79:9d:de:74:
e1:fa:60:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96Tn9LFluB+3ejsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
MDhlN2M0NWEtYzk2ZC00ZjdkLWIxOTEtMDU3NTk5YzY1YzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvgk/FdsqZd9F9XIv+n/fJ9vQjiOaVsrLEeH
hQNVO2AY1Jqok/SdmEbPaphkhUFOkq9ojXSJQFm229DndHxZ1G9AeTBDzPqddYFY
PNx+3eaoaYIrNYwhgQfCzqKedHSLQI48e3beLDLwQvHILfIUhEEPYYE4dZv2IHYC
RhpKdFBl2OFh1bcYx+SLZfSxGwc9X3M9CwAqok0Rgp7fC6OJte1kcBzvxpq+xTDT
I4Zq84YrHizC33OxixRcjWL/iH35s3PSIWM2/8ZRkam0FHyqQKWW4KNGMjaXX6vd
n9TcjIh7tqg9VMwNpNBCmMkk5crwsZGU2QyaCtGrSuSOdv2MzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPRk8AfbufY8V8YubO1ErdRWdZ9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2Y4ZjMzM2YtYzg4Mi0z
MjQ1LWI0MzktZmQ1ZTIyMTdiNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSaFqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL72SxMuqhwc8tN6j4zc4EMsf4hUnHvde8c7dYGxmTVNyapL63P8lpu3
3JACXR8b5osS/pZSLScyvjUjjsOGAHKO7dsTQkVVG9XGBV0udsiYBeS2yRWbscgl
aCGvSfr+JnE1xdaYwIgtUCKy0zmcsqCaKZRnqX5e3x8SB3PU/rj0666hOXeP9Xm7
e3XayQUzM671BUSiECueE54jxoDHcfXO/cljAQgxHvtaDY+cpG4QO/JD/eHxGZ2J
UVc0txUzu0oy6wJxdvZFWNpNo5IDKJXM/7Pc1sDUZrKJbuO+TDEWdu16rtmttjPU
RN+EBA0wTRPLE6KwEhM9eZ3edOH6YNo=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:39:51 2026 by rpki-client