
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b0cb80-f765-32a4-9cb5-66ca853421a5.roa
File: 43b0cb80-f765-32a4-9cb5-66ca853421a5.roa (raw, json)
Hash identifier: LIhaTe4sJ23uwmFaKSR/B4AKDMQcwcpuinFXjES/UaI=
Subject key identifier: 4F:EE:4F:DD:1F:5F:DC:DA:BC:06:3B:DD:B6:EC:B2:F5:CB:6A:16:89
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58243F299333EAA4598380
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b0cb80-f765-32a4-9cb5-66ca853421a5.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.60.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:24:3f:29:93:33:ea:a4:59:83:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=bca53b52-512b-4625-8475-00df0737e47a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b1:b7:d5:33:43:a0:10:07:dd:55:ff:16:3b:
58:31:57:1e:c9:9c:33:d7:99:be:0a:2c:42:a0:e0:
a7:f1:77:f1:1a:d4:14:f3:d9:f4:cd:f0:e5:c3:1a:
9c:ab:1e:4a:4c:81:23:31:ef:4d:69:2b:a3:34:dc:
fb:f0:8c:58:d3:3e:8e:c6:7d:8a:a9:1a:a2:37:f3:
c7:13:6a:87:30:0d:33:17:aa:af:88:45:25:21:8f:
3c:5b:d1:43:ae:d6:5a:41:bb:26:df:07:c5:b8:22:
67:60:0b:f7:26:06:59:47:1d:bb:73:cc:bd:ec:97:
2e:be:93:18:7c:83:8d:e1:82:06:66:fb:2e:03:e1:
14:9e:ce:54:60:f4:16:9c:69:fa:56:5a:99:95:10:
af:22:ab:61:8c:4b:f1:c3:68:30:b4:ba:d3:0d:c6:
11:26:2e:db:d1:e0:df:79:59:d8:a5:73:53:ce:93:
a3:fc:77:c0:d5:47:93:bb:e4:c9:81:04:64:da:41:
89:d7:2d:e3:4c:27:86:99:b0:a2:17:2e:7a:f2:eb:
f2:07:ce:db:7c:76:e6:70:ca:56:70:37:10:8b:76:
5d:59:e9:04:c9:ea:16:4d:12:be:5b:09:8f:9d:7b:
fa:0d:0a:f7:c0:3b:bf:62:d3:81:a3:82:64:09:72:
72:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:EE:4F:DD:1F:5F:DC:DA:BC:06:3B:DD:B6:EC:B2:F5:CB:6A:16:89
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/43b0cb80-f765-32a4-9cb5-66ca853421a5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.60.244.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cf:69:df:8c:31:e3:a8:4e:25:6e:3f:2e:bf:8d:d2:61:46:c2:
27:b3:5a:23:5b:96:89:d8:0a:41:3e:ab:18:ef:7f:d3:f7:ba:
f6:86:1c:cf:b5:75:65:af:49:05:44:4c:e8:aa:b7:4d:b3:b0:
6d:12:d2:5c:06:d4:12:e5:9e:1e:65:19:40:3c:60:48:c1:eb:
74:eb:6d:01:52:ce:a4:fb:cc:21:37:e7:7a:3f:4a:67:42:7c:
1a:2d:84:cb:97:4f:a3:96:c5:1c:3e:72:ae:57:2a:5e:2e:b1:
5d:4d:9e:74:03:76:5a:df:c7:36:77:fb:a9:27:f1:5c:9f:57:
38:1a:4e:71:1a:82:2c:5d:a1:1c:e7:ef:f3:81:59:a0:18:22:
17:d2:e4:3c:68:59:65:fd:98:ca:6a:99:ba:7f:b2:e3:b1:49:
4e:98:3b:ed:a8:b6:d1:9c:56:d2:ab:ac:da:5e:7e:dd:26:29:
2b:61:a4:5e:c3:88:39:d6:75:13:fd:f0:2c:4e:65:40:f5:25:
e4:97:81:23:ec:56:c0:0c:70:5f:94:66:ad:b4:58:54:df:12:
b2:f9:27:01:24:9c:4f:45:1a:1a:e4:2c:e7:c5:62:79:e7:b6:
ae:16:39:07:ee:6f:63:33:8c:00:0d:53:a3:cd:bd:c4:32:ba:
f0:ab:f7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:17:01 2026 by rpki-client