
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b64fd17-086a-30d7-867c-7f74b4fcb564.roa
File: 4b64fd17-086a-30d7-867c-7f74b4fcb564.roa (raw, json)
Hash identifier: BpC3GdbT82wH8ggYFODeHMIUQzQqUKqsFgN0HUQrEeI=
Subject key identifier: 3E:B3:B8:D0:DF:50:9C:7D:E7:88:A9:8F:69:D1:95:10:9C:9F:7E:79
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDEA670C850387E21F569F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b64fd17-086a-30d7-867c-7f74b4fcb564.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33491
IP address blocks: 68.44.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:ea:67:0c:85:03:87:e2:1f:56:9f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=541a1418-90e7-4d6b-860c-4af5eb54e1f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:28:1d:fb:12:a1:30:b3:94:52:fc:a4:93:ad:
de:d4:ae:db:d6:ab:ac:05:05:e6:65:54:e0:30:f0:
7f:ac:04:4e:d5:83:7b:16:09:15:c1:a6:7c:f9:71:
97:98:55:26:67:4a:49:28:6f:da:f3:e7:b1:eb:d1:
9d:33:ff:e2:6c:f2:e8:23:21:5f:8d:a7:fb:5f:7d:
19:32:98:d6:5e:6a:bd:b7:84:e8:a0:ad:ed:8e:99:
19:11:0a:3f:e8:67:d8:e5:ab:26:9f:5a:fb:2c:65:
4b:0d:55:d7:51:a8:ca:8a:3b:5b:4c:b2:86:84:5d:
23:c9:a5:13:a2:3a:9a:64:5d:1b:51:2c:a8:dc:ac:
b8:df:3f:e3:07:da:91:45:9e:cc:a9:9e:cd:ce:0b:
8b:a7:61:11:7c:a8:2c:13:f9:99:9d:14:0d:09:67:
42:70:81:83:15:42:63:2b:67:85:6d:5a:47:58:49:
e7:cc:ed:2b:55:2a:b4:2b:28:3a:cf:7b:82:4a:3a:
6f:ef:86:84:4a:e1:bd:e3:2e:c9:1e:4f:22:61:5d:
ce:77:5c:69:e5:b8:ce:72:79:b1:06:60:9c:bd:ae:
85:3f:8c:1b:db:14:20:24:da:35:09:f7:90:89:4c:
52:88:5c:30:92:a1:17:c1:59:dc:2e:2e:f4:7a:f5:
08:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B3:B8:D0:DF:50:9C:7D:E7:88:A9:8F:69:D1:95:10:9C:9F:7E:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b64fd17-086a-30d7-867c-7f74b4fcb564.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:38:dc:7d:22:f1:9f:71:30:7f:b6:03:c7:4d:92:c8:c5:c1:
e4:59:c8:e2:0c:4c:ca:13:44:01:c8:1d:d8:38:c3:2a:52:47:
a8:28:d4:17:20:b0:e3:30:f2:51:e6:85:d4:72:4a:0c:01:32:
32:01:2d:ee:5d:59:10:8b:d9:9a:25:4d:db:99:8d:33:2b:2f:
77:3e:0f:72:eb:b0:08:dc:99:90:51:5a:c8:ab:9d:1c:e2:0f:
2d:0f:7d:11:a3:d2:63:5a:3f:d6:02:20:84:31:11:ff:37:a6:
3b:4f:8b:58:ba:fd:db:2a:cf:0b:7c:87:99:a3:28:17:8d:de:
80:7e:3c:80:05:b6:ae:75:76:d4:c2:f0:17:7d:5b:b0:42:1b:
80:9d:37:40:b0:22:e7:3b:f2:20:65:ae:5b:34:16:e7:b6:71:
19:89:bd:3a:88:35:a6:ec:f0:4e:32:b0:9e:fa:dc:b9:16:f1:
81:0b:69:25:5c:c7:9d:93:94:d2:8e:a7:d5:00:ac:50:10:f3:
d5:04:c2:f2:ce:05:ec:cd:35:1a:9d:3c:fe:f2:c5:d7:8e:f8:
be:78:13:ee:8d:59:8b:98:fe:42:17:fb:17:08:65:e8:59:2c:
ea:86:5a:93:0e:d6:5f:37:0f:64:67:91:95:d8:90:fd:78:a9:
db:a1:f5:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:53:47 2026 by rpki-client