
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16031bb8-c08f-3102-829c-43c4deff47c2.roa
File: 16031bb8-c08f-3102-829c-43c4deff47c2.roa (raw, json)
Hash identifier: gxbbhElAkQ1oHOZqev3YOpICpJFqRJeEgbdWFUCtcSk=
Subject key identifier: 9F:41:CD:6F:2F:0E:E7:0C:D3:B7:53:E2:B5:55:0C:E5:A5:F0:53:C7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE581E562261804B525BC080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16031bb8-c08f-3102-829c-43c4deff47c2.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.51.115.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:1e:56:22:61:80:4b:52:5b:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=899ffcb5-ff9c-4952-ba2a-49a6cce2422e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ce:4b:c3:da:f0:fd:8f:6e:cc:27:f4:15:12:
d0:16:28:91:e7:c0:d6:e4:dc:46:7d:13:8c:8f:c2:
39:70:8b:e5:ce:5f:8b:fd:5f:67:52:90:01:2b:c9:
0c:fa:69:45:fb:a6:9f:26:bc:71:3c:c7:0a:67:08:
1e:28:05:cc:dd:6a:58:33:75:ec:16:3c:10:1a:9d:
e6:5c:4e:87:cc:fc:8d:c1:dc:db:7c:07:4a:f9:5d:
ac:b6:7c:c8:16:a4:e5:7a:bf:5d:34:0e:97:d9:53:
73:30:4a:5d:5b:7a:81:1c:1b:6c:8d:d8:8d:0b:ec:
5c:f0:5d:5e:2f:13:98:30:1d:27:43:f6:a1:97:79:
6b:04:a4:87:7c:be:e3:e6:3b:51:07:99:4e:10:99:
c0:e4:4b:2f:70:19:1b:e2:fb:cd:66:b2:88:6f:0c:
67:6e:13:c3:4e:99:2e:27:c4:2c:1a:b1:45:19:cb:
2e:23:f6:33:d8:5f:19:48:42:4d:4a:dc:98:0e:86:
07:a7:48:eb:e2:b9:66:f6:0d:2b:89:88:3a:61:b1:
2b:e5:ac:53:32:f5:85:4a:25:2e:32:7b:9e:18:06:
3c:2f:11:04:c0:a0:30:cc:47:06:52:ab:77:fa:53:
1f:eb:40:65:28:c2:0e:ef:f8:d8:21:d9:75:eb:82:
0a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:41:CD:6F:2F:0E:E7:0C:D3:B7:53:E2:B5:55:0C:E5:A5:F0:53:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/16031bb8-c08f-3102-829c-43c4deff47c2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.51.115.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0e:38:3a:a9:59:91:58:f0:d2:a5:2e:f2:5c:ce:8c:a5:d9:9b:
63:f5:3c:52:67:dd:6c:71:fb:08:d2:d1:f5:0f:40:80:7a:0f:
8e:54:75:bb:54:bc:ed:45:ae:47:b3:29:39:30:f2:cc:c6:11:
62:71:31:a7:65:e7:62:81:24:84:8d:a4:3d:a7:83:56:af:fc:
3d:f0:7a:a4:f3:e0:27:63:90:5f:49:df:8e:2e:2e:47:4e:13:
86:e5:e5:9d:6a:f6:39:43:98:3e:ea:89:83:9f:47:58:c4:9f:
60:b6:be:39:79:76:36:6d:b5:6d:48:c6:77:1c:43:f4:1d:3f:
4b:77:4d:82:43:49:d6:3e:78:a5:42:c4:54:d3:7e:e0:36:86:
1c:1e:37:7e:5c:27:52:84:1b:7c:a4:d1:58:a8:e2:19:08:54:
b4:8e:e6:95:76:78:d0:71:cc:0a:19:47:eb:ce:d3:2d:07:c4:
7b:57:92:e5:13:8f:29:aa:eb:78:9b:4c:bc:80:ce:77:be:96:
f5:d0:d2:55:5a:d5:83:f1:0a:e1:e5:39:2b:a3:c4:25:90:af:
54:05:01:54:ca:a0:ae:e1:d6:35:2e:76:26:4e:ce:72:1e:f1:
69:77:1f:9e:5e:63:b1:a8:a7:e3:ab:64:9b:76:2d:27:6e:ed:
a7:54:c4:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:48:22 2026 by rpki-client