
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c09320-533d-3a3f-ad12-4662fb5134e2.roa
File: d7c09320-533d-3a3f-ad12-4662fb5134e2.roa (raw, json)
Hash identifier: h9BiTSnQAzlze9nc6DAkxBKDLuChNOz5J0JYadMm8zE=
Subject key identifier: 5A:17:02:03:0F:90:AE:06:FF:3A:91:BA:98:66:3B:32:80:BB:A2:A8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF5F88299753C4EAEB07480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c09320-533d-3a3f-ad12-4662fb5134e2.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 73.233.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:f8:82:99:75:3c:4e:ae:b0:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=e68a5b46-b801-47de-964c-7d925631d8a9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:04:4e:41:a2:eb:d8:18:18:90:f4:a0:cb:33:
eb:64:f4:16:3a:e4:6b:e6:fa:68:28:27:5a:0a:14:
5b:e9:60:e4:f6:c8:59:f4:d5:0f:06:a0:cf:5b:66:
90:45:ae:62:bd:99:5c:6c:7d:28:4a:a0:c4:2d:a0:
8a:71:60:d7:4d:65:98:09:23:11:38:44:ff:86:ea:
64:07:27:80:cd:2d:46:ce:eb:19:2e:2b:0a:50:c3:
5e:63:47:54:fb:56:ce:eb:32:18:eb:0f:b9:26:7b:
b7:9c:62:28:74:27:2c:35:0d:97:32:59:0f:64:42:
af:e7:3b:0d:cc:9f:22:b1:bd:ca:92:80:03:91:ca:
33:60:a5:e3:24:3d:a5:f1:bf:ea:2f:56:44:36:3d:
72:f0:b4:74:c8:fe:ba:50:8e:81:3b:45:3e:82:00:
e0:40:3a:97:96:ce:26:7b:0d:2d:89:83:4c:3f:f9:
0d:60:c1:05:8b:44:78:43:6d:57:d2:58:78:82:a5:
86:71:71:85:b9:f8:52:e2:c4:98:93:6f:a1:7e:67:
d9:47:3f:2b:54:47:a2:3a:51:c8:42:7b:36:00:1d:
ca:4f:02:eb:06:79:31:73:dc:46:18:f1:4f:83:77:
46:f5:93:4c:4c:a3:b5:8a:3f:0a:3b:8a:7b:72:f1:
46:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:17:02:03:0F:90:AE:06:FF:3A:91:BA:98:66:3B:32:80:BB:A2:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c09320-533d-3a3f-ad12-4662fb5134e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.233.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ab:93:01:26:dc:07:7c:80:f4:73:c4:05:99:c4:b3:0d:9c:96:
b6:e1:e1:e7:e1:df:d1:ac:78:d2:ad:7a:1f:86:09:d4:be:0b:
a0:d5:89:73:81:eb:2c:a4:ee:60:21:4a:18:da:11:bf:93:a9:
82:a6:52:4f:17:d8:e9:f1:6e:b7:a3:f8:42:75:c9:72:ce:e1:
c8:0b:32:9c:d0:83:d7:06:42:8f:e8:45:87:02:8d:97:d6:6c:
a7:ed:d4:47:c1:f2:b4:cd:e2:a0:9a:f2:10:1e:17:e5:cc:31:
2d:d1:d8:be:e3:57:59:33:0d:83:f7:85:94:d7:59:85:1a:0b:
46:96:e8:cf:f9:89:04:c6:78:8a:72:49:36:9b:83:bf:88:47:
55:f7:cf:f2:ac:51:85:6d:7c:f3:e2:66:d8:44:83:53:5c:33:
6c:55:f8:f3:c0:29:24:4a:7f:dc:b3:d0:7a:f1:51:ee:79:bb:
97:e1:93:34:d1:b2:60:5a:8f:a2:64:11:a2:51:64:cb:3b:bd:
da:19:5a:29:a3:32:79:3a:3c:7c:1e:69:9b:72:e5:45:8a:0a:
0c:fe:cd:f9:ee:2e:de:9a:ea:29:76:ec:6b:b5:df:cc:f7:4c:
04:c7:d5:25:4d:e2:c4:b3:6a:b4:25:14:8e:de:7a:4e:45:f1:
1c:fe:31:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:22:29 2026 by rpki-client