
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c9ab05-a1dc-3113-b9e4-c59177a4defd.roa
File: d7c9ab05-a1dc-3113-b9e4-c59177a4defd.roa (raw, json)
Hash identifier: zFXllN2Hj3ka6dspdNzx8M4w0R5lsO/T5uynCVdYcpI=
Subject key identifier: 12:D4:84:B2:4B:93:E2:37:43:F1:27:77:9E:B0:D2:29:92:3B:4F:E1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED86213EDBF04DF5173BB8500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c9ab05-a1dc-3113-b9e4-c59177a4defd.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33490
IP address blocks: 73.67.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:13:ed:bf:04:df:51:73:bb:85:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=f9613dfd-fb03-4a84-9fd4-ec71509980e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:70:46:5a:3b:41:6f:28:96:dd:fe:5c:3c:f6:
9b:2a:ec:c9:e3:93:0a:bc:53:8c:27:ad:d7:06:64:
a9:9b:29:5d:b2:74:33:5f:00:71:96:c8:17:5c:1a:
02:ed:91:cb:f8:5b:22:e7:61:12:1d:a1:e6:12:e6:
4a:94:de:a7:32:57:c1:49:b7:f2:e3:eb:ad:dc:be:
e3:e2:2d:af:16:14:32:14:60:a0:1d:ee:7d:ef:9f:
45:30:19:82:98:6f:3d:f3:b5:8f:ce:b5:fb:5a:a6:
96:d0:03:48:81:29:1e:5d:03:7a:d0:85:e3:76:7e:
37:cd:43:f9:ce:de:f8:09:69:e2:42:61:e3:46:38:
38:ad:aa:6a:15:bc:fd:7a:6d:c7:a8:bc:71:8d:3b:
07:5c:f4:26:2f:94:19:6f:ec:9c:19:d0:54:dd:0f:
fb:18:c0:17:17:cb:91:60:46:09:9a:29:72:e9:a9:
e9:8d:8e:14:1c:3d:66:7c:34:d1:ca:73:91:d7:25:
af:e2:1b:8c:40:eb:b0:d0:f9:15:fd:40:b1:64:85:
b6:09:61:7b:3d:a9:5a:65:34:d7:99:c6:fc:68:4b:
79:36:b2:4b:81:49:5a:85:75:ca:b3:b1:f5:b8:e1:
42:88:46:c9:09:5a:b9:a6:4e:b7:40:90:25:4e:7f:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D4:84:B2:4B:93:E2:37:43:F1:27:77:9E:B0:D2:29:92:3B:4F:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d7c9ab05-a1dc-3113-b9e4-c59177a4defd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.67.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0a:81:27:f7:20:c4:4d:20:cc:84:54:9a:1f:e8:06:e6:43:d4:
1d:40:63:cd:a1:14:38:fd:4f:30:72:43:a1:37:2f:58:f9:74:
20:63:a7:40:92:7b:f3:2a:09:d4:03:0a:41:a9:6e:ca:c1:31:
68:1f:1d:4d:82:8c:2a:df:93:e9:38:78:e9:98:f3:d4:0a:36:
d4:64:64:5b:e1:03:c1:d4:8e:a3:b4:02:0a:af:38:72:91:7d:
f9:91:fe:66:45:55:f0:0c:e1:30:27:82:e3:65:cc:b4:fa:ea:
cb:d8:89:ee:80:89:5a:e6:17:40:f1:4f:7a:9b:cc:ec:a8:8c:
d7:a9:50:6e:ff:8e:28:2b:1a:52:71:a6:ec:fe:ac:03:03:48:
3e:19:c5:86:2b:a1:80:d5:55:11:ae:ab:f8:54:ed:e6:30:de:
97:af:52:58:79:b2:14:1d:69:0a:60:52:26:8d:74:7e:72:e3:
c8:fa:0f:a0:01:e4:84:df:0f:29:a2:d5:d4:11:b3:c5:ea:29:
da:66:54:6b:d6:fa:96:12:cf:81:ac:4c:ee:c5:41:73:c1:1b:
7c:64:e1:0d:4e:84:aa:3d:bc:d4:90:29:de:fc:14:91:29:42:
19:99:22:a9:36:3f:b4:cf:b3:45:f5:40:46:34:ab:4b:58:72:
4d:2c:b5:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:08:17 2026 by rpki-client