
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dce8705-6002-3627-be38-5f5540521ee8.roa
File: 3dce8705-6002-3627-be38-5f5540521ee8.roa (raw, json)
Hash identifier: U9XMn2z72Td1Ot/2x07I0QQD3xflRAy9rE6YOfdmNDk=
Subject key identifier: 9A:36:0F:DD:8E:85:A5:DD:F0:6C:37:ED:DC:24:EF:A5:0B:A1:2E:F6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE581685CE1237F2CAFD9900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dce8705-6002-3627-be38-5f5540521ee8.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.44.8.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:16:85:ce:12:37:f2:ca:fd:99:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=ccecf463-129c-4625-8842-f4b40025bd53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:00:be:c3:88:d0:9c:f8:80:bc:e9:74:68:4b:
ff:2a:f2:1a:9d:f8:fa:46:6e:1c:ca:45:79:e7:88:
e6:0b:5c:d8:cb:eb:46:6f:f3:6a:c1:9e:8e:75:20:
9b:b6:74:56:86:4b:29:2d:77:22:a5:4e:a1:18:4c:
bd:e4:a0:a7:a3:8b:88:16:34:5e:da:68:1a:8d:90:
3c:cc:99:b6:64:ee:33:d6:8f:b6:5d:28:8b:53:f8:
57:dd:aa:c4:ee:31:f7:29:46:3c:b8:b5:03:cd:95:
ff:f3:7e:71:3e:7c:cf:ce:87:7b:8d:09:19:2e:cb:
14:af:7e:5b:38:02:40:0d:16:85:00:8b:35:fe:b4:
f2:d5:02:8f:8c:10:73:d3:f2:3b:2b:92:53:26:3b:
6e:fe:19:d6:46:e8:b1:bf:c1:46:d2:4d:7e:55:06:
96:df:98:59:d1:40:ef:fa:db:a5:76:81:77:7e:4f:
c4:3b:66:9d:8c:50:97:71:41:58:fd:52:81:47:a9:
cb:5b:30:58:55:15:95:46:7f:cd:8a:df:1e:8e:a6:
53:0b:be:a9:91:b4:08:20:4c:57:d4:78:1f:14:26:
8a:85:90:88:b2:1a:be:dc:d6:11:55:17:49:75:17:
2b:a7:fe:c6:bd:8f:d3:dd:e9:59:f9:0b:62:b6:06:
e2:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:36:0F:DD:8E:85:A5:DD:F0:6C:37:ED:DC:24:EF:A5:0B:A1:2E:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3dce8705-6002-3627-be38-5f5540521ee8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.8.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:7a:86:4d:ec:b8:aa:e9:1e:db:8c:1b:cd:fb:d8:78:b7:37:
f4:7e:01:26:53:38:8a:0f:93:12:cc:d6:56:8f:78:44:ac:2c:
4e:d4:b4:cb:b2:e4:a0:1b:f3:f6:68:1e:38:1b:39:2a:fe:84:
c6:06:77:8d:cd:70:9e:72:51:41:1f:62:8b:c9:d7:f8:19:04:
be:fd:60:f1:61:ef:6b:66:c7:f1:29:65:ac:6f:7f:ea:99:c2:
bc:cb:1c:a6:b4:c3:38:fc:12:93:a9:43:62:27:b9:8c:bf:94:
89:87:4c:cc:bb:49:06:bc:37:f6:11:2f:8a:3b:ac:14:35:bc:
cf:fb:93:79:89:9a:06:67:8d:1e:f4:56:1d:9b:65:a4:b1:af:
f5:70:08:12:45:bb:9c:6e:50:10:ff:b9:18:38:37:1f:22:2b:
f6:2d:07:27:0c:78:45:06:f5:68:df:7c:9c:05:50:20:39:f1:
4d:ec:99:65:63:23:81:08:77:b8:17:4e:b0:2a:dd:ab:6b:9e:
62:28:07:51:b5:12:55:65:97:ba:70:28:c0:3e:29:43:58:56:
29:f0:90:03:30:03:db:f3:70:e3:c1:6c:9b:b6:01:e4:83:f5:
fe:06:1d:de:38:5b:4b:ae:c1:ec:ea:78:1f:c6:f8:22:b7:6c:
a9:57:2c:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:25:30 2026 by rpki-client