
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d1497d-3223-394e-9edb-47f9cc041cf9.roa
File: 64d1497d-3223-394e-9edb-47f9cc041cf9.roa (raw, json)
Hash identifier: OMi10CZq4HYkL+NDev3/+wbmQkqCjwMsRgms6rIx0u8=
Subject key identifier: 8B:1B:5E:8D:E8:A4:32:FF:A6:53:14:A1:A7:83:8B:CF:F4:BF:23:F4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5AAED9B8AFE5CABD505C20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d1497d-3223-394e-9edb-47f9cc041cf9.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 68.82.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:ae:d9:b8:af:e5:ca:bd:50:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=bfa27457-a7b5-4c62-9b15-eba086f0f7f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:73:5e:1c:c5:94:bb:2e:cd:d0:c8:3f:67:02:
2a:30:29:55:e6:86:f7:54:28:ce:3f:48:f7:9f:6f:
7e:b3:91:68:9f:b0:db:3b:36:2a:1d:cc:e2:f9:9f:
f9:29:54:8e:b8:fe:58:10:3f:5d:5d:40:b4:5e:8f:
74:f3:64:92:22:b5:d8:15:0a:3f:64:86:0a:1d:cb:
82:72:e8:3a:02:4c:b6:37:c2:15:55:ee:e5:ac:47:
20:55:09:f8:6a:c4:20:07:aa:a1:18:bc:60:0c:ae:
73:f2:cf:a7:f0:62:bb:66:b2:db:3c:84:87:15:0d:
43:be:0e:ab:1e:5e:43:4d:c5:39:3c:c4:5f:78:ce:
45:96:b9:fa:32:d7:56:b0:65:bb:9b:4a:2e:a4:0b:
65:e4:6f:7f:a9:78:41:78:7e:9f:b2:42:ce:ac:1a:
02:5f:6d:aa:f4:fc:57:32:78:56:9e:60:9b:83:94:
cf:f5:a2:ed:52:8a:db:b4:82:a9:a8:77:a3:12:76:
27:f5:11:1d:93:e4:93:6f:1f:e7:38:12:cc:2a:b4:
84:cb:26:60:97:a9:db:aa:ac:d8:1b:56:5b:79:ec:
ee:03:89:af:bf:d6:b2:b4:1b:3a:a2:b1:21:9c:63:
a4:42:3f:7e:7c:74:b3:e8:63:6d:49:52:3c:7c:f8:
e2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:1B:5E:8D:E8:A4:32:FF:A6:53:14:A1:A7:83:8B:CF:F4:BF:23:F4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/64d1497d-3223-394e-9edb-47f9cc041cf9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.82.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:9a:fe:4f:65:f9:15:69:35:89:fc:39:31:b9:ba:c4:90:37:
2f:bb:96:1c:e8:23:06:c5:bc:f6:4c:8b:50:20:08:a2:2d:91:
d4:99:6f:9d:9d:d0:9a:de:82:70:08:62:10:86:e2:95:13:ea:
cf:e7:35:12:0b:19:8a:ad:be:21:13:85:58:b8:e7:0d:61:cf:
91:d0:37:f3:87:a3:0a:13:48:b7:4e:fc:85:79:df:29:6e:1c:
8b:67:68:2c:7c:70:84:ee:92:a4:39:2c:01:18:93:b0:46:55:
03:ca:52:8f:0f:11:3d:cd:4d:74:11:ee:97:06:be:02:2b:35:
5a:b5:03:98:c9:75:68:aa:49:67:38:3a:ee:4d:bb:8d:4c:ea:
5f:f8:03:a9:cc:a0:77:ca:9f:56:7f:89:4e:e8:54:44:fb:7e:
88:94:2a:e9:1f:6c:dc:1f:40:e0:7a:41:01:bd:f9:5d:1d:43:
31:64:83:b1:d4:be:bd:a1:0e:89:5e:f5:5a:4b:a8:04:4a:80:
ee:aa:1d:06:f7:34:c0:27:45:42:64:18:6c:f7:7c:6f:62:2f:
4c:58:a3:c1:80:9e:bb:aa:db:3f:79:f0:45:2a:5f:a3:f3:b0:
72:a9:4e:66:00:f1:46:dd:b2:c3:38:af:63:38:8a:60:b8:db:
8e:c7:70:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:51:18 2026 by rpki-client