
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d6113e1-a38b-3cbc-bd0d-c440d0d9f3c1.roa
File: 1d6113e1-a38b-3cbc-bd0d-c440d0d9f3c1.roa (raw, json)
Hash identifier: vEIQgxi+3CKMDPxLPChUmtUigb+kKF1Zf3FLvJifRs0=
Subject key identifier: D4:34:A9:35:81:CB:75:63:CB:4E:17:FF:24:60:03:69:67:7B:0E:CF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5AB24E7356C8E5399CDB80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d6113e1-a38b-3cbc-bd0d-c440d0d9f3c1.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 68.82.212.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:b2:4e:73:56:c8:e5:39:9c:db:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=4b878d0f-c713-479c-9a7f-774aeda9fabb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:64:18:ad:ec:44:01:3e:da:1b:d9:7c:bb:2e:
84:76:e7:98:4d:5e:bd:97:25:4e:ee:b4:71:7a:f8:
ab:88:74:00:9c:fd:e2:3a:7d:0d:98:01:9d:7f:7d:
e7:8c:c5:af:54:f8:b3:fc:e1:75:1c:25:60:e7:8c:
77:fd:e9:9e:37:ff:b0:a9:a0:c0:8b:75:f2:22:b0:
85:5a:b3:f2:74:66:e5:1f:ab:ea:26:f9:11:82:60:
fe:a9:dc:ef:53:38:64:17:d2:25:b1:3c:4f:5c:e9:
fb:8b:aa:0e:7c:32:75:fd:01:ed:24:a9:57:85:3b:
ec:c8:a5:52:16:4b:af:c9:cd:2a:52:8c:ad:22:59:
c3:cb:d2:2b:ef:29:8b:11:9c:7a:ad:10:ed:0d:34:
5c:c1:59:a2:9d:0a:30:66:c1:aa:30:c1:06:ab:a4:
29:b7:66:73:13:4e:e3:a4:82:3b:6b:df:44:9c:76:
82:b3:db:bf:83:5f:5c:bc:43:49:c7:45:35:a5:a5:
77:da:e5:b4:34:5f:66:27:97:a9:07:47:ab:85:f5:
d3:22:5d:74:a4:5d:dc:86:70:8e:ac:10:88:e2:40:
48:c2:08:32:8d:cb:66:59:65:bb:5c:94:9e:ff:91:
5e:63:00:5c:72:22:78:26:dc:70:8f:30:17:55:e9:
d4:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:34:A9:35:81:CB:75:63:CB:4E:17:FF:24:60:03:69:67:7B:0E:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1d6113e1-a38b-3cbc-bd0d-c440d0d9f3c1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.212.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6e:8c:44:e3:1b:55:fb:01:87:a8:46:16:2f:9f:3b:3f:85:ae:
9c:12:5c:b3:a3:11:39:5e:fa:8f:c2:9a:38:63:c5:4a:5d:bd:
9a:a8:07:70:ee:1b:23:7a:fc:94:8f:3a:cc:51:3c:f1:f7:a4:
1f:d7:54:89:2e:20:99:0e:a5:c5:5d:15:e0:ef:25:79:b1:f9:
8e:f2:d5:34:98:bf:a1:79:56:36:52:5d:38:a4:ac:37:75:a5:
e1:53:60:0f:15:1c:c3:46:38:b7:09:1d:f8:ba:e0:8a:56:64:
1f:2d:07:5d:39:15:ad:34:8d:63:30:ed:20:46:d7:ad:af:6f:
2d:b7:7f:ce:a1:e7:ef:a5:cb:ad:8b:ff:4a:ff:30:c1:81:d4:
95:69:e5:1e:e4:61:0c:ac:0d:be:e5:d9:4b:05:be:de:a6:17:
c3:f9:22:d1:0c:25:94:6d:ff:b0:87:72:38:bc:f4:06:a6:e5:
07:c8:f7:7d:c9:96:80:80:fe:bd:a4:36:ef:b5:75:5e:34:00:
1d:3e:5b:38:ad:f1:76:67:5d:f4:de:1f:95:d0:dc:68:f4:6e:
0e:de:75:15:c7:05:61:8c:1a:07:3c:29:94:b0:2a:1c:e4:80:
99:58:ba:fe:11:90:80:77:d2:ab:0c:5e:c6:fd:86:68:d8:43:
7f:69:d2:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:11:17 2026 by rpki-client