
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa
File: 4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa (raw, json)
Hash identifier: TIFS5SEPDuQ0BVYatdx0B1cGo6Ycx2gcTy8ThjoEJY4=
Subject key identifier: AF:16:C0:B0:98:0E:CD:B4:31:44:62:57:7A:67:F6:24:7B:25:80:D5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5AACDBA5D1127268E47580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 68.82.14.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:ac:db:a5:d1:12:72:68:e4:75:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c3e90e89-8a62-4883-8ab5-e6b7fe5842ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:1a:1b:4a:3c:10:88:c8:3d:d8:6d:94:19:d0:
9e:a3:82:6d:b0:c4:de:c9:15:9a:0e:db:ff:a7:15:
5d:85:8b:f7:90:02:63:a0:de:b6:68:ea:1c:ef:83:
a5:4f:d5:aa:d9:4e:2b:2d:59:13:2b:f1:93:0d:15:
47:a7:69:40:5d:97:4e:90:47:bf:58:9e:a7:6e:1d:
92:4e:e4:7c:9e:ac:26:4a:57:fa:a3:60:98:1b:6b:
eb:db:ec:66:d3:26:52:9b:b5:41:89:ac:4f:98:cd:
64:36:e3:48:c1:6b:a8:05:d0:cf:88:ce:e8:37:3b:
b1:0f:54:e5:6a:09:0f:43:c0:78:23:8d:32:19:dc:
65:33:0a:3f:3f:21:17:5d:43:30:fc:65:06:d8:3a:
54:51:67:39:89:84:c0:b4:01:39:fc:a4:a7:87:3e:
e7:bc:87:05:cd:31:b4:d9:53:36:fe:e6:6f:a9:37:
4d:5e:f6:06:73:d9:98:71:c2:64:0a:07:7d:ad:61:
1a:2f:53:26:5f:86:ca:32:02:24:ad:eb:5f:6c:fa:
8e:28:58:18:02:83:b6:21:48:85:8a:6d:a9:79:18:
ec:fe:5c:61:39:94:46:00:4e:5f:ec:2b:cd:7b:79:
21:6b:3a:f1:aa:8a:c7:0a:20:c5:be:d4:59:6b:8a:
0b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:16:C0:B0:98:0E:CD:B4:31:44:62:57:7A:67:F6:24:7B:25:80:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4d85c790-ef3a-3bb8-a261-ada2c09fb2fc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.14.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:8a:d3:fd:bb:df:0f:7e:f6:68:9c:63:42:e1:d8:d0:b0:69:
5e:b7:66:a0:fe:47:0a:57:b1:a7:54:1e:29:fd:da:7b:35:7f:
26:cb:08:cf:3d:e8:65:b2:ae:91:86:8d:64:b1:be:b0:48:b4:
bf:ed:ad:10:32:8a:96:8f:88:c5:b5:60:31:c1:4b:54:3a:1d:
6f:7a:76:1c:ea:0c:7c:85:49:df:9d:08:71:7d:3b:e0:dd:f8:
41:ea:72:6a:61:df:83:42:8b:e6:03:e9:87:e2:68:eb:88:10:
46:9a:21:af:49:34:88:81:a0:9c:71:da:0f:af:ae:2a:86:18:
a6:15:a6:45:c0:d7:c3:99:eb:61:a8:62:8b:b2:04:79:e3:31:
cb:3a:70:51:7b:21:32:e9:e8:2e:e2:72:6d:1d:9d:2a:d1:95:
72:75:60:e2:ff:80:9b:dd:d5:16:03:eb:86:d4:87:e9:66:ab:
97:14:a3:51:35:8a:e9:08:4d:94:a1:77:6b:5b:38:49:01:a3:
8a:92:aa:9c:d0:d1:51:6d:e6:d3:b9:cd:0c:4e:39:03:e9:61:
0a:10:b2:37:7c:69:82:74:a7:2f:5e:ce:60:66:47:d1:9e:86:
d2:39:cd:d8:35:3c:67:03:9a:68:60:49:67:35:94:a2:2d:b3:
d4:5d:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:29:20 2026 by rpki-client