
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d89a4e4-ef3a-3773-90a5-d8b2f6db2cd3.roa
File: 3d89a4e4-ef3a-3773-90a5-d8b2f6db2cd3.roa (raw, json)
Hash identifier: GfkkiRxGQvOyjy75BVfOlC+DiSPn3W31NHRgCyos7QQ=
Subject key identifier: F1:D0:EC:26:C3:AD:56:E0:AA:27:94:35:C1:2F:19:51:5A:E1:35:BF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58BE36C9470F3CCE15C580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d89a4e4-ef3a-3773-90a5-d8b2f6db2cd3.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 67.160.200.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:be:36:c9:47:0f:3c:ce:15:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b53fd072-642b-4b88-9fe7-77696a7f8527
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:68:4c:8a:22:79:40:52:3d:5f:4b:fb:fd:e5:
6e:49:6e:aa:e7:df:bb:65:2a:61:3e:48:14:7a:af:
f6:24:05:fe:47:6d:e3:5e:ab:c3:f5:82:32:65:a6:
f9:6c:39:a7:6b:85:b4:02:db:7e:76:35:26:d4:53:
e1:c9:a0:4c:01:4e:9c:3f:d8:b9:f0:44:c1:a2:b8:
0b:85:83:c8:15:4e:95:61:36:21:e2:8f:36:d9:f7:
e4:a5:bb:35:df:d2:c2:58:7e:a3:98:8a:20:cc:a4:
93:0e:8b:21:92:33:46:b1:1d:ca:f4:11:7d:ce:9a:
15:ac:0d:da:bc:09:3c:d3:a3:42:4d:2d:b8:d3:31:
ab:d4:44:57:6b:51:ea:fb:80:2e:77:66:f9:ae:8c:
dd:a6:28:54:ee:9e:40:ef:95:18:b5:c3:c7:9c:bd:
37:6b:b9:68:2d:1d:e4:c4:31:07:d2:2d:75:3a:70:
be:07:96:11:19:32:f5:bf:4b:43:43:89:32:d6:06:
f3:0c:15:4f:d8:12:70:eb:16:e0:06:0b:e6:fa:57:
c8:3c:d4:79:0e:a5:58:82:ef:15:e7:b0:99:bc:22:
f7:ab:22:ba:12:65:ff:f5:f6:53:50:87:97:55:fc:
9b:07:e4:21:4a:2f:a9:49:de:e0:c3:36:18:8a:15:
97:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:D0:EC:26:C3:AD:56:E0:AA:27:94:35:C1:2F:19:51:5A:E1:35:BF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3d89a4e4-ef3a-3773-90a5-d8b2f6db2cd3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.160.200.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:2c:a1:34:db:85:eb:ad:65:8a:73:6c:86:4b:4f:8c:d5:1c:
69:59:5e:45:05:97:42:40:b9:fc:8f:9f:32:4c:f3:4c:c2:90:
f3:8f:39:9c:3f:a9:ad:de:0a:55:08:3e:16:66:f2:c6:f8:cd:
d5:c0:b6:1a:f7:03:f0:87:8d:7d:82:c3:65:19:0a:24:ea:0f:
16:34:f2:7e:0e:3a:66:e6:44:b4:d8:af:45:60:bf:a6:86:2c:
c6:e5:11:0d:f1:96:7b:c1:f9:47:24:25:1c:b9:0b:d9:c6:28:
a8:7c:8b:fd:d0:1c:39:ff:39:28:3b:81:99:3d:f4:68:8d:76:
60:d9:7c:5c:1e:f6:b9:44:af:5d:be:7f:3a:0d:8b:a6:d4:ce:
95:93:b4:71:36:63:fe:ff:0a:51:84:57:f9:f8:61:2c:f3:e9:
bb:d4:1f:da:3f:3a:db:65:87:4a:15:03:ed:a8:3b:99:1d:df:
f3:ba:45:b7:86:c8:81:c9:4c:4e:e7:91:5b:28:30:5b:fe:bd:
64:e4:42:44:2c:43:29:cc:f9:22:a0:8e:2d:ab:22:25:c1:78:
3b:7c:7c:c8:08:e5:af:c4:01:42:72:70:46:59:81:75:b9:2e:
6a:11:c8:bd:18:fd:20:b6:15:de:0a:91:c5:2a:46:a0:73:c4:
ec:64:6a:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:24:39 2026 by rpki-client