
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f1a655-f555-3f33-86e1-811a140a1c50.roa
File: 53f1a655-f555-3f33-86e1-811a140a1c50.roa (raw, json)
Hash identifier: sLmBWQW9x82ByOAeTA7tiOFNNMDIyO6TLisIuNOBy/g=
Subject key identifier: 02:45:98:28:78:72:63:B6:F3:08:0E:AA:05:CC:52:2B:E5:1E:4E:31
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58097B889036B3FAF26780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f1a655-f555-3f33-86e1-811a140a1c50.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.38.248.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:09:7b:88:90:36:b3:fa:f2:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=5870c402-47e7-4494-9a2f-5e33dbafb2cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:a6:c6:2e:18:36:9a:43:93:2c:13:40:a1:a8:
cc:6d:e3:84:0f:fb:2f:fa:31:68:65:41:14:8e:90:
96:be:7a:40:62:f5:05:18:0a:87:3f:e3:a7:07:f1:
81:4e:0c:e8:d7:31:b8:a5:99:01:0f:3d:c0:fc:89:
36:c8:28:4c:22:97:99:20:57:1d:b1:19:bb:35:25:
f1:2b:98:25:c9:61:2e:cb:cc:52:39:79:9e:d9:ae:
5d:d6:12:05:0d:fa:be:d3:0a:9c:74:a8:f9:60:96:
c4:df:4e:00:09:e4:7c:74:5e:97:e1:ac:8d:10:7b:
d3:b5:33:6b:98:88:42:e3:61:48:b7:d0:f1:f5:a9:
39:55:6b:30:53:19:e1:5c:87:71:8e:a0:23:98:53:
f3:26:22:f8:03:df:b1:49:94:74:bf:d4:10:db:66:
be:a7:18:3e:cc:af:a5:7d:91:62:bf:0f:1d:9c:54:
dc:a2:5f:d7:1f:a4:84:3d:b2:8b:72:01:e5:72:5b:
f2:2a:1d:42:d6:0b:21:21:79:d1:c6:d9:81:70:14:
e4:2f:ed:66:55:47:2c:37:64:d8:71:4d:e8:a6:3a:
13:36:22:23:49:4f:04:fe:f1:4b:69:c4:f4:1f:79:
4e:f2:db:4a:df:c9:50:a3:66:c8:58:ca:45:96:d6:
92:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:45:98:28:78:72:63:B6:F3:08:0E:AA:05:CC:52:2B:E5:1E:4E:31
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53f1a655-f555-3f33-86e1-811a140a1c50.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.248.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:5e:f3:2c:24:fc:3d:65:59:09:f3:53:5e:84:80:ca:46:bb:
b7:52:06:24:d2:de:36:a6:6e:75:2c:09:76:75:a9:81:1b:a3:
4c:43:54:32:e6:8c:7b:9b:9f:a9:52:31:1b:02:07:a0:cf:d6:
4f:3a:9e:d8:a1:6f:8c:59:78:93:49:9c:7d:21:25:fe:be:04:
32:37:ae:7c:ff:75:75:0b:a5:a4:7d:1a:2a:d9:24:40:3f:c9:
3e:91:d4:fc:b6:5a:43:bc:25:d0:d9:0d:8b:bc:13:d1:94:05:
55:85:bc:4c:28:06:31:94:48:97:68:57:5a:5f:6f:df:28:81:
82:9c:68:d2:64:b3:90:55:4e:f2:c7:ab:55:91:03:f6:2b:90:
26:bf:6e:b3:64:2d:bf:db:41:55:e9:4c:52:3a:16:de:9d:01:
4f:a1:c5:a1:c0:81:d9:a4:55:3e:f6:7b:d1:86:95:ea:f5:63:
cc:e3:a9:df:cc:8b:ef:38:c8:b0:c0:43:b7:6f:71:81:4a:a7:
10:5c:4b:16:7a:28:97:60:03:e0:0d:94:43:e7:2e:d0:fe:88:
6e:45:1e:78:c6:30:57:86:ea:25:7d:64:06:54:40:1c:16:85:
5e:24:37:e3:c7:ab:0f:a9:00:89:94:ef:f5:ab:81:59:d9:ca:
75:31:d7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:21:14 2026 by rpki-client