
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db9aabc8-51e5-36e7-a3a2-419b08679d0f.roa
File: db9aabc8-51e5-36e7-a3a2-419b08679d0f.roa (raw, json)
Hash identifier: 7s+odXTAR25xWG0gOCQT6mIA1kAbRX+AXHCkaQ67qcU=
Subject key identifier: 51:A6:AF:19:45:A4:63:E7:33:5C:8F:30:A0:4E:90:E8:60:47:C9:C2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF721C9FDF06922F72B13B8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db9aabc8-51e5-36e7-a3a2-419b08679d0f.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33659
IP address blocks: 73.193.188.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:21:c9:fd:f0:69:22:f7:2b:13:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=4a4373e3-eb6f-4577-a3fa-bace899e3d30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:8c:fc:9c:4c:f1:e3:39:e4:47:0c:f0:b5:d5:
5e:cc:0c:10:fa:eb:83:c2:45:4f:78:93:73:40:c3:
d7:b4:a0:c6:f0:ca:8d:f1:c1:b4:67:b8:f5:c7:5f:
fb:68:ed:31:e7:0f:92:4f:c3:23:cb:c5:4a:87:88:
9a:60:a1:05:5c:ab:02:43:28:00:01:f9:d7:84:10:
52:9e:c6:64:21:90:93:b7:1a:a6:fa:69:de:f3:1e:
2e:b8:83:87:0e:e3:16:51:91:0d:09:ca:2f:61:d9:
dc:54:ce:6d:10:a8:3a:8a:27:b1:95:5f:9e:3e:94:
2d:c6:0f:37:1a:b7:67:0b:cb:0a:a1:6b:4c:a6:f4:
77:5e:22:9f:cb:d6:1c:7f:e9:05:ad:eb:24:4c:13:
45:dc:60:e0:e9:5c:5e:93:00:76:cd:97:7e:f8:8d:
2f:ce:31:02:e0:c9:f1:83:25:a9:15:8c:5f:c7:c8:
0e:b0:b8:52:db:8a:f7:2e:6d:b0:83:1d:ba:e3:9c:
1b:47:52:ea:54:16:a1:1f:59:b7:30:a3:22:3f:c0:
78:5b:d5:0e:0d:7e:c6:0b:d6:aa:bf:c1:4b:ed:17:
1b:fe:5d:bb:42:62:53:89:d6:a6:74:ff:fb:13:d6:
7c:31:db:87:09:b1:5c:da:90:e3:82:c0:97:25:a8:
95:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:A6:AF:19:45:A4:63:E7:33:5C:8F:30:A0:4E:90:E8:60:47:C9:C2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/db9aabc8-51e5-36e7-a3a2-419b08679d0f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
73.193.188.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:0a:29:bd:b1:b0:c3:bf:f0:0d:0b:1f:b4:4b:a8:1b:54:3b:
bb:3e:0b:0a:c4:ec:13:84:fa:1f:a3:dd:02:16:31:ad:95:00:
d7:5f:31:a9:89:88:0b:73:81:e1:1a:20:ae:df:61:e8:f2:1f:
06:cc:d0:f3:73:50:7a:1a:9c:3e:b0:73:73:d9:ce:dd:75:bc:
bd:c0:2c:88:6f:28:d3:82:2f:59:70:8e:7c:20:9a:13:4e:2d:
86:16:c8:4c:b5:53:02:9f:27:3f:9e:7e:73:fe:ab:b8:ef:6c:
84:6b:4d:55:60:12:00:bf:2f:19:99:7e:75:3b:4d:c4:32:bc:
af:0b:6b:97:d3:17:a0:b8:8a:90:f0:43:f8:ef:ae:91:81:4a:
06:0c:da:f5:f7:77:25:74:15:07:65:9d:4e:51:19:ea:54:3b:
70:7d:71:5c:80:20:a2:45:34:0c:d2:2b:6a:91:5e:84:d8:bb:
fe:a4:4c:83:bf:58:fd:74:40:6a:c9:0b:ac:4f:2e:a5:49:ba:
36:87:46:c3:d7:cd:76:af:bb:cc:21:8a:0d:da:67:12:d0:56:
c0:76:28:10:21:d2:5c:fb:8b:5d:97:fa:0b:d4:42:f7:76:49:
66:26:5c:bd:16:2e:2d:58:9b:47:b9:07:6c:ba:ac:3b:93:4b:
73:c4:04:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:30:53 2026 by rpki-client