
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4313d958-c7c7-32a6-a02d-04ad1fe97389.roa
File: 4313d958-c7c7-32a6-a02d-04ad1fe97389.roa (raw, json)
Hash identifier: H6y2A4vblZUGoYdjT3cEM6Ha1ubPBlOBQPzsaPYO1sI=
Subject key identifier: 81:6F:4F:06:C5:40:92:D0:A5:D5:BD:7D:7F:41:A5:14:88:5D:4A:2C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57B28DB69D0FE4653F6FF0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4313d958-c7c7-32a6-a02d-04ad1fe97389.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 68.81.200.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:b2:8d:b6:9d:0f:e4:65:3f:6f:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=3c9b58a9-9514-4a49-8ad6-36231aad99bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ba:14:dc:95:dd:5d:36:cc:4d:30:e3:ca:28:
79:50:89:b1:56:64:28:f0:89:22:cf:39:12:81:a8:
b0:01:14:7c:19:d1:6b:05:a7:2f:4a:9d:18:a2:50:
84:eb:14:02:ca:cb:1e:f7:3b:0a:32:90:37:78:07:
be:df:b5:ea:56:7e:e5:2e:a5:b9:77:34:50:47:a5:
f3:c1:1b:da:88:84:dd:90:94:a0:20:d2:36:f8:3d:
69:c7:03:9b:ef:64:2a:5d:24:de:ad:58:4f:8c:69:
9d:d7:07:56:e3:7a:62:47:74:c0:a8:05:19:a9:02:
06:fa:d8:e7:d2:ce:a8:a7:71:ba:b4:85:b2:d5:79:
5b:a9:55:0f:ff:e8:41:b4:2a:b4:53:c5:47:d5:24:
82:07:81:b1:00:e4:06:1c:4d:4c:46:53:2d:f5:af:
4c:b1:4b:00:a7:a3:e3:c7:b7:ab:02:0e:fc:bc:a1:
43:d8:d7:a9:01:b9:bc:de:7a:71:44:3d:c9:16:09:
d9:e7:82:40:33:4d:91:a1:4f:2e:f1:a4:9c:ce:30:
c1:38:04:25:05:dc:db:8d:88:aa:3b:6b:a2:e1:17:
5e:3a:24:91:21:6b:08:1f:96:27:1f:36:8e:d6:9c:
e1:39:36:9a:f3:5d:df:53:55:94:b0:35:d6:ad:bd:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:6F:4F:06:C5:40:92:D0:A5:D5:BD:7D:7F:41:A5:14:88:5D:4A:2C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4313d958-c7c7-32a6-a02d-04ad1fe97389.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.81.200.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6a:cf:c5:59:86:a1:c5:f2:a2:96:64:f0:97:d5:ce:86:94:de:
a6:50:f3:da:1f:b8:41:ec:f8:5b:04:b4:aa:e4:8c:fd:d0:24:
aa:f2:44:1d:45:47:40:8e:7f:3c:7d:a8:1e:e9:08:32:d5:6b:
3a:38:a1:95:6f:e4:5a:62:2f:2c:3c:46:9e:2f:96:dc:9d:b1:
bd:9c:57:5f:6c:35:a8:75:ed:b5:47:a6:6b:c2:1a:bc:69:ef:
d4:40:fd:1d:ef:de:c3:32:d8:8a:b7:fb:c1:8e:97:e9:f1:7e:
d9:40:3f:c4:fd:20:0a:fa:b2:94:79:a7:45:d9:95:ab:40:bc:
46:52:72:9f:04:ab:67:1a:51:76:7b:20:81:00:0d:97:d7:03:
5f:06:d9:e4:51:b2:77:05:fd:09:cd:e7:3b:44:ab:74:68:3f:
d8:19:ef:f5:84:f4:ae:b5:16:af:fa:86:e9:44:fa:6f:ff:6b:
5b:03:fa:b5:b1:6e:40:5a:70:b1:e0:bf:8b:e2:b6:e9:7e:04:
db:8f:c1:0d:38:16:32:d1:4f:39:7f:d6:24:5d:4e:cb:54:f8:
8b:1e:62:bf:a6:a5:44:52:e2:2f:e2:49:6c:4f:29:92:37:d0:
1a:a8:80:58:4f:0a:1c:6e:04:5e:1f:73:60:9c:ac:af:6a:d9:
b2:89:a7:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:23:52 2026 by rpki-client