
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b032f96-df76-38a3-ab3c-0722890ef917.roa
File: 4b032f96-df76-38a3-ab3c-0722890ef917.roa (raw, json)
Hash identifier: sRYmANrEQKBMs1pHJuF0vJvQRK5RNKqT2SQ8l8VJY4w=
Subject key identifier: DE:73:E7:0A:67:33:02:48:27:A8:FF:EB:02:BF:84:6B:23:11:08:67
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE92F359CA63B84ED5D6900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b032f96-df76-38a3-ab3c-0722890ef917.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 22909
IP address blocks: 68.32.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:2f:35:9c:a6:3b:84:ed:5d:69:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=d2f986f0-87c8-43f4-9ce4-b65013cb351f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:56:55:ea:24:f3:ca:72:90:0c:39:a6:0a:f2:
a3:52:ae:4a:bb:97:8f:2d:f5:f5:5b:aa:0c:6e:b8:
cd:05:30:81:b5:c9:20:0b:1b:0e:ec:0a:52:9a:df:
fe:a0:7b:a8:f6:18:ee:97:bc:77:39:90:e7:ea:ed:
01:86:d1:2e:47:ae:87:ed:7f:a4:e6:b3:ed:75:b5:
79:d7:d0:22:16:a6:5e:b7:4a:e1:7a:46:1d:47:18:
f8:dc:ac:ad:88:20:ed:b0:e9:a7:c0:8e:13:e4:7b:
a5:17:80:8c:55:22:1a:c6:65:15:9b:7b:c1:45:69:
c7:0b:fb:07:d5:2c:6a:c6:5b:23:ab:a4:ae:b8:8d:
74:b3:ae:b4:b6:7b:ab:92:55:9d:63:46:94:e0:79:
56:34:99:9a:5a:8a:29:8c:7c:cb:32:82:a3:20:7a:
dc:c0:52:23:b7:ca:bd:10:05:ad:cd:a4:bd:a0:02:
45:bd:b4:5f:83:cb:32:88:ef:9c:b6:ec:55:6c:f3:
7a:a1:ec:55:79:12:d1:3c:21:bb:86:08:1c:31:aa:
bb:ea:99:fd:d9:70:1d:c2:5f:6a:80:5f:bc:db:02:
5e:69:eb:df:10:6c:5d:1d:a0:c6:fd:fe:32:c2:6d:
09:b6:ba:bc:6f:66:94:1a:2b:09:18:5d:85:c5:29:
09:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:73:E7:0A:67:33:02:48:27:A8:FF:EB:02:BF:84:6B:23:11:08:67
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b032f96-df76-38a3-ab3c-0722890ef917.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1f:20:92:56:ab:f2:dd:36:59:b5:be:fc:33:9b:65:d1:74:89:
2d:68:3e:45:52:b7:bb:29:dc:f3:3d:12:ba:f0:fe:27:44:f6:
07:24:8a:5d:79:4d:5d:8b:f4:e2:c0:65:74:fe:25:b8:6a:b1:
46:be:d2:65:7c:82:85:d3:48:97:27:bb:1e:d8:b2:0f:98:ba:
f9:e3:f9:8a:d9:b8:5b:62:39:9c:02:96:96:0d:af:5d:01:30:
ba:47:a9:fd:94:6d:78:6c:8e:ff:ee:65:87:36:9c:d8:c3:5c:
25:51:37:e0:50:a2:70:80:1e:25:6e:87:9f:be:3c:ab:9a:5b:
e9:f8:f2:a2:ff:c0:39:ba:7f:e6:a9:85:0a:7d:1e:43:b4:65:
05:d2:18:f1:4d:70:0c:3f:b0:7a:f3:4f:9c:9f:75:ae:c9:ad:
47:7c:77:56:1d:ed:02:b4:33:8c:c5:21:a1:8d:e8:8a:a0:52:
bb:47:2b:67:db:e5:be:08:6d:4b:d0:cd:c6:18:99:d7:c2:cc:
1c:cf:99:4f:5d:eb:fd:b7:14:b3:5c:ab:2c:5c:f4:f7:f2:e3:
b5:69:f0:cf:f7:fe:87:63:92:91:c0:59:ee:61:d3:ef:c4:ac:
5b:fd:52:d1:46:bc:a6:89:18:6b:26:f6:e4:8d:0a:2e:36:dd:
72:38:e0:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:17:26 2026 by rpki-client