
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24798a7e-934a-3a88-8723-95fb8c3ae114.roa
File: 24798a7e-934a-3a88-8723-95fb8c3ae114.roa (raw, json)
Hash identifier: Yz0lEXoow4qqJ+mpWNxukfc2vSMoARbQsS2VB7yvXOA=
Subject key identifier: FC:D5:83:6E:FB:DC:62:87:FD:D2:15:A7:25:88:C7:20:62:40:2C:AD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CA32C7B01CB4FBD8BA2108B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24798a7e-934a-3a88-8723-95fb8c3ae114.roa
Signing time: Sun 25 Jan 2026 02:00:31 +0000
ROA not before: Sun 25 Jan 2026 02:00:31 +0000
ROA not after: Sat 25 Apr 2026 01:00:31 +0000
asID: 33656
IP address blocks: 68.86.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a3:2c:7b:01:cb:4f:bd:8b:a2:10:8b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 25 02:00:31 2026 GMT
Not After : Apr 25 01:00:31 2026 GMT
Subject: CN=d4b9afda-cfc9-4d94-8a32-549406ff1fb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:3d:2e:61:a0:31:4d:19:05:13:37:7c:6f:16:
91:7a:6d:e5:bc:5c:9d:e2:0d:75:1e:d1:bf:6b:c9:
1e:a9:7d:a3:d5:93:ab:39:0b:cd:4e:6f:41:7a:2c:
b0:7d:a9:72:bd:d4:68:cb:54:09:02:88:c4:97:0e:
ec:49:ee:a2:64:1d:d8:43:4b:80:31:3f:fc:51:fb:
43:e2:da:71:d0:f5:42:71:fc:d5:9b:5c:e6:bf:55:
cc:4f:ec:50:23:51:d8:fa:2c:4a:44:e0:90:aa:4f:
53:f4:a5:52:76:10:1e:db:8c:8a:e3:d2:6c:6b:1d:
ba:ab:96:b4:45:f2:c0:84:ad:64:2a:b9:a3:31:08:
8a:5f:52:8e:50:15:ca:8a:a2:1d:a0:a8:b5:db:bf:
ca:e4:0a:de:73:ba:35:35:47:76:ac:c8:68:0b:88:
d5:8d:d0:49:92:13:70:79:ee:ca:bf:41:be:07:41:
ba:b2:f1:6c:48:4a:64:ec:06:0d:b1:57:85:59:e4:
c4:a9:dd:b1:47:e5:ea:f1:69:d4:9b:af:2d:bb:98:
0c:4e:15:f0:e2:fe:49:68:3d:85:d5:64:71:93:f2:
f9:b2:95:82:8c:5e:dd:f3:51:e7:d5:bd:d7:91:e6:
13:a1:b6:22:34:f2:cf:f8:6a:74:bc:fc:bc:e6:d0:
8d:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:D5:83:6E:FB:DC:62:87:FD:D2:15:A7:25:88:C7:20:62:40:2C:AD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24798a7e-934a-3a88-8723-95fb8c3ae114.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.178.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:7e:bb:45:32:02:7d:87:79:3e:67:c0:e5:74:08:b0:09:2a:
40:8a:ea:f3:7c:4a:2a:cc:1d:8b:07:f6:84:1f:27:a3:77:20:
1c:8b:6f:2b:3e:aa:cf:2e:d0:c5:a8:6e:5a:58:3d:8a:f4:c4:
7c:6b:94:b3:c9:46:04:62:99:ec:59:cf:99:b7:e7:59:da:ee:
3c:18:a5:80:c8:18:b7:07:0f:bc:cf:11:a6:8c:ce:7a:3a:87:
d9:bf:c9:ee:01:44:a1:72:e2:4e:36:ee:69:7e:b9:38:d2:a2:
82:50:08:7f:aa:12:bb:49:04:00:23:26:d1:89:7d:9d:8c:19:
0b:8d:ce:59:b3:e4:36:c8:c2:52:38:fd:ea:c8:56:6b:fb:98:
3e:6a:68:ef:c2:2c:c5:5e:86:a4:52:98:ac:e8:b9:7c:25:73:
1b:02:5e:dc:79:1f:0d:a5:11:7e:a7:32:90:df:af:17:9b:22:
15:2c:7d:84:2b:47:a1:9d:e8:f0:c9:ad:04:95:e1:26:79:25:
4d:1a:a3:ba:45:0b:49:a7:1c:ba:32:19:ec:76:a9:82:61:34:
42:47:7c:32:56:a0:2a:25:cd:a0:2b:e7:d3:03:14:23:08:b2:
07:5f:11:dc:4c:e4:a7:54:39:5e:95:2a:6d:a4:bb:37:f5:20:
78:45:2f:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 20:06:39 2026 by rpki-client