
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa
File: 3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa (raw, json)
Hash identifier: A9/npTa5cTDrpn4YyIv4e+P34083jhXRV+EFL8PMj8w=
Subject key identifier: BF:1B:4F:61:B1:02:5A:F6:B6:33:54:2C:A1:5B:00:E3:2B:E0:2B:CE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5AB6EE6C2F89AE62CBA380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 68.83.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:b6:ee:6c:2f:89:ae:62:cb:a3:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=d93219da-9b19-45d6-b5ba-af4e1beffc4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:c0:10:93:99:cb:08:2e:9c:3b:b7:14:03:f1:
43:58:de:91:ef:67:57:ed:0c:3d:d7:70:06:0d:b1:
4e:e3:20:65:7a:49:54:f2:4e:66:a3:03:5a:4c:bc:
fc:5b:2d:5f:2f:02:02:42:e4:48:63:27:5f:05:29:
ca:bb:3a:a1:46:20:a3:04:32:ca:62:f8:c2:e0:d4:
0c:16:51:6b:92:d0:c1:18:fe:9e:b7:53:7c:7f:46:
44:2b:a6:81:c5:d0:39:e7:9a:d5:5b:15:12:01:3d:
af:d6:07:be:6d:47:ca:8d:09:d9:00:27:29:ad:96:
62:4b:23:e0:67:0a:50:ed:2f:05:a1:09:8a:59:69:
30:01:68:02:ac:3d:f4:d6:14:2b:8f:26:8e:92:9c:
51:5d:81:ab:9d:94:12:e3:4b:66:00:7f:5c:9d:8e:
6b:34:4e:a9:6c:e3:33:96:60:ad:6c:c7:3c:77:b2:
d6:86:57:49:d8:f2:5c:1c:2d:d2:ad:c9:83:1e:ac:
a5:f8:1e:f5:7f:50:0c:93:b0:d5:7e:40:d2:8b:26:
77:86:60:17:de:b8:ee:0e:8c:a3:80:c6:14:43:e5:
b1:3c:9f:0a:75:62:84:0e:c2:83:ef:90:a4:aa:e4:
70:86:6f:8c:8a:3b:08:63:6c:10:b4:0f:3b:d7:42:
89:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:1B:4F:61:B1:02:5A:F6:B6:33:54:2C:A1:5B:00:E3:2B:E0:2B:CE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3efe1dce-ae4f-3f54-83aa-c92016ae6bc7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:09:e6:31:f9:ee:f5:f5:da:a1:0f:6c:9f:01:35:3a:54:84:
79:9e:19:ec:52:8c:53:d0:81:6e:e6:4a:6f:92:9a:14:5d:9d:
a5:53:8b:5a:d8:fe:47:4d:e2:f5:32:ab:ba:61:7d:21:9b:e2:
ae:03:d7:db:d4:07:5d:7f:5e:68:6c:ba:79:91:ad:07:21:b6:
de:42:01:ea:fe:1f:1d:64:8c:2d:ab:c7:d1:17:b1:16:ba:2e:
7d:bd:aa:16:a8:d3:d1:e7:17:52:8f:9d:96:0a:1e:60:46:e6:
73:a1:ea:0e:d1:5e:94:6e:42:35:90:55:f5:45:16:18:77:79:
df:04:82:2f:8a:99:4e:5c:ad:27:82:31:7a:f1:66:62:3c:bd:
c9:cc:a7:cd:e8:48:c6:b6:f3:87:b0:6d:c2:6f:04:44:f2:0b:
e2:79:f5:e9:03:ef:d9:5c:af:74:6c:b8:4e:84:d4:f4:ad:80:
33:95:6e:8e:01:c3:47:d5:86:1a:7d:77:18:d3:c4:26:7c:46:
f6:46:b0:89:bd:62:1e:9a:49:8d:d8:de:27:8f:b5:d8:32:96:
2a:ce:62:63:ae:a2:2f:a4:e8:0c:f9:51:f6:e9:24:af:0d:97:
96:2f:61:00:ef:36:8d:f7:18:fd:1d:c6:76:12:29:d3:e2:6d:
a5:7a:0e:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:40:39 2026 by rpki-client