
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e044951-b3b6-3986-85c1-6c049ba96310.roa
File: 3e044951-b3b6-3986-85c1-6c049ba96310.roa (raw, json)
Hash identifier: b3BSNcUEnH6g/zK0ZKMGDdMskdFNDRAiX+kqxEkxMis=
Subject key identifier: E4:9B:9C:F0:4C:4F:40:E2:65:BE:3A:9D:28:58:50:11:33:5D:B8:4E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B9832007AAB1C0F8CCE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e044951-b3b6-3986-85c1-6c049ba96310.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.39.48.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:98:32:00:7a:ab:1c:0f:8c:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=1409e04a-159b-49b0-a472-4a6a8d731b4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:f9:93:2b:5e:bb:0a:6f:03:53:a3:b8:37:0f:
a9:0e:80:66:0a:a0:bc:04:1d:4f:54:fe:af:b5:f0:
23:44:5a:0b:2e:2f:3e:b1:b3:92:af:bc:59:c8:2a:
d1:dd:8e:2a:22:2c:4c:03:be:54:6d:0b:82:e1:2b:
4d:17:ca:15:2e:3a:d2:69:b3:6d:a4:10:1f:b8:ff:
b0:c6:7a:cb:ed:0f:8b:63:1b:cb:e6:c9:b3:13:69:
e2:6a:6a:e4:b0:d9:d6:7d:ad:34:87:dc:a1:73:4f:
73:4b:00:98:44:89:93:39:48:e5:fa:92:b3:2a:43:
5b:1f:3f:97:2f:a8:0b:f3:e2:9b:f8:ca:e4:35:4c:
57:7a:9b:5c:bf:d3:ee:bb:f7:bb:b2:b4:00:39:0d:
09:50:db:b3:3e:a9:2c:f2:87:56:82:b3:2e:bc:92:
71:40:78:a0:40:28:f6:7b:98:54:c1:50:79:39:ab:
e2:af:f4:19:36:46:31:77:de:a0:08:63:14:d0:2c:
58:3e:e2:19:07:aa:4a:43:71:65:57:05:5b:e4:90:
38:8c:4f:ba:a2:c8:e3:71:b6:e0:b5:77:a8:2d:54:
9d:e7:ec:0d:36:6d:07:42:15:06:da:23:fa:56:6f:
d7:31:ba:51:65:12:ec:21:1f:e1:d6:1d:a9:6a:3a:
ea:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:9B:9C:F0:4C:4F:40:E2:65:BE:3A:9D:28:58:50:11:33:5D:B8:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3e044951-b3b6-3986-85c1-6c049ba96310.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.48.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:fa:3d:69:07:f8:8e:13:7a:9f:4c:2e:4b:86:e1:88:4b:34:
cb:41:49:1a:55:f4:5b:ed:2f:e1:82:4d:39:47:ad:3c:cb:e5:
26:d5:ff:91:09:5d:3a:03:d4:cc:95:00:c6:5d:5b:44:8b:65:
d3:6c:a6:01:be:1f:51:bb:7e:17:38:86:67:bf:3f:d5:e5:e5:
6d:f2:27:d4:29:ec:c7:56:8d:4e:82:f8:69:5c:73:20:e6:2f:
95:82:70:01:54:10:b5:cf:4c:4a:5a:05:3e:78:44:50:3b:cd:
fb:db:55:e8:ae:a1:3b:ea:f2:ea:03:25:1a:b1:7a:ef:38:cb:
89:e9:e2:92:85:c7:9a:51:6f:a1:f3:82:14:18:d9:a2:82:4b:
a3:59:0a:30:20:92:42:68:3c:70:05:99:d3:b7:08:98:8a:65:
a9:5c:36:a3:58:aa:f7:77:78:78:7f:b6:77:6d:81:4d:e9:f5:
10:e0:a3:b8:57:51:4b:fd:42:fc:0a:db:7c:60:3a:ca:9f:82:
b0:3b:ba:21:d7:03:3d:3f:81:62:16:ee:4a:43:0d:a2:f3:ed:
4b:45:7a:ff:4e:4f:3b:4a:8f:fb:16:2f:2e:27:9c:25:48:6f:
0e:e0:d1:9b:f2:81:c5:01:4c:ec:b8:08:39:1e:5f:01:7c:ef:
ab:f4:a3:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5gyAHqrHA+MzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MTQwOWUwNGEtMTU5Yi00OWIwLWE0NzItNGE2YThkNzMxYjRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAovmTK167Cm8DU6O4Nw+pDoBmCqC8BB1PVP6v
tfAjRFoLLi8+sbOSr7xZyCrR3Y4qIixMA75UbQuC4StNF8oVLjrSabNtpBAfuP+w
xnrL7Q+LYxvL5smzE2niamrksNnWfa00h9yhc09zSwCYRImTOUjl+pKzKkNbHz+X
L6gL8+Kb+MrkNUxXeptcv9Puu/e7srQAOQ0JUNuzPqks8odWgrMuvJJxQHigQCj2
e5hUwVB5Oavir/QZNkYxd96gCGMU0CxYPuIZB6pKQ3FlVwVb5JA4jE+6osjjcbbg
tXeoLVSd5+wNNm0HQhUG2iP6Vm/XMbpRZRLsIR/h1h2pajrqsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOSbnPBMT0DiZb46nShYUBEzXbhOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2UwNDQ5NTEtYjNiNi0z
OTg2LTg1YzEtNmMwNDliYTk2MzEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCcwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADP6PWkH+I4Tep9MLkuG4YhLNMtBSRpV9FvtL+GCTTlHrTzL5SbV/5EJ
XToD1MyVAMZdW0SLZdNspgG+H1G7fhc4hme/P9Xl5W3yJ9Qp7MdWjU6C+GlccyDm
L5WCcAFUELXPTEpaBT54RFA7zfvbVeiuoTvq8uoDJRqxeu84y4np4pKFx5pRb6Hz
ghQY2aKCS6NZCjAgkkJoPHAFmdO3CJiKZalcNqNYqvd3eHh/tndtgU3p9RDgo7hX
UUv9QvwK23xgOsqfgrA7uiHXAz0/gWIW7kpDDaLz7UtFev9OTztKj/sWLy4nnCVI
bw7g0ZvygcUBTOy4CDkeXwF876v0o4U=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:00:30 2026 by rpki-client