
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fb240f4-0762-3907-b1b0-2dda4d16f601.roa
File: 7fb240f4-0762-3907-b1b0-2dda4d16f601.roa (raw, json)
Hash identifier: uGfu5d1H0SA1qWcRmBshvtJu3SmqpQ1esKMyMdxGrWs=
Subject key identifier: C4:3A:2E:39:68:93:88:66:D0:9E:87:27:D9:1A:17:10:7F:4B:D9:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5813B06EC87D010B1A42A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fb240f4-0762-3907-b1b0-2dda4d16f601.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.44.192.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:13:b0:6e:c8:7d:01:0b:1a:42:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=09f2cac5-ff9c-472e-9b3a-2f2cf080a6b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:21:92:ab:4f:40:2d:24:21:65:fa:8b:d0:e6:
90:90:60:67:8e:fe:0a:bb:7e:d0:21:b6:c8:7f:6d:
12:d0:dd:a4:99:bb:11:ea:1d:41:86:69:61:1c:5b:
b7:eb:86:16:6d:2d:5f:08:e2:70:c5:c6:97:60:b8:
a2:6a:07:f8:71:e2:77:6a:82:fa:b5:a6:d7:48:89:
b4:51:42:9f:1e:f5:0a:10:f6:09:f4:32:ca:49:f4:
3b:b7:b0:07:ef:06:c5:d5:0f:ec:cf:ee:f4:94:82:
56:fa:63:69:3b:a0:f6:3d:13:9c:ff:5d:38:9d:47:
21:fa:b5:5b:48:55:8c:2b:4e:e5:98:72:1f:f0:30:
2e:b5:73:66:cf:b3:d9:d1:3c:4c:2b:a7:48:af:b4:
f6:d8:6d:0a:65:a1:4d:72:f4:16:8c:15:71:ec:2e:
6e:61:e3:a2:db:c1:7f:7e:ad:9e:fb:e7:77:83:e8:
e6:ae:48:62:fd:bb:90:08:75:8d:76:d4:e5:0c:dc:
e9:4b:2b:a9:a6:cf:17:4a:55:00:e7:49:ee:04:75:
61:c5:dd:49:92:4e:09:a5:ac:8a:38:1c:a0:7e:3f:
1b:99:bd:cb:d4:e6:bb:73:c4:bb:2d:35:32:75:a6:
60:72:1e:d5:19:e6:99:4f:07:0e:99:47:be:40:5c:
1f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:3A:2E:39:68:93:88:66:D0:9E:87:27:D9:1A:17:10:7F:4B:D9:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7fb240f4-0762-3907-b1b0-2dda4d16f601.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.192.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:5d:af:9a:73:44:62:a3:af:3e:2c:45:a3:d6:12:80:7b:80:
cf:f3:e5:cf:3a:fc:71:08:8e:69:f3:40:96:c4:3c:56:20:9b:
40:e9:e5:58:fe:a7:66:b3:57:7b:a1:ec:41:89:21:90:9e:82:
5f:26:e9:27:8e:d6:55:70:e6:aa:c8:f0:98:2a:23:50:63:3b:
aa:58:63:6b:47:3e:80:aa:7b:78:7b:9a:44:42:2a:c0:bd:5b:
a0:73:4f:a5:97:63:53:57:7a:a0:73:99:76:8a:75:3e:fd:b9:
2a:96:49:dd:db:4a:16:1f:bd:5e:38:dd:1c:c9:92:01:f8:2b:
3c:76:ef:1f:d1:9d:f4:82:26:38:e5:05:d6:a1:83:1d:09:7f:
0b:ad:8e:3c:46:58:ea:2b:2c:89:29:6a:f0:a0:97:7a:28:b9:
8c:e9:6e:57:12:70:20:d2:ba:d0:48:2a:80:6b:78:76:57:c9:
df:02:38:5c:3f:78:a1:2a:1d:bc:b1:83:f8:32:3e:8d:bc:ef:
da:aa:32:39:a6:d0:7a:a5:85:6e:99:18:f9:22:7b:7f:76:83:
27:fa:6b:fb:3b:36:0a:e3:22:d6:de:9f:ce:85:27:60:71:40:
52:ef:e3:0d:3d:a8:6b:d3:11:ea:44:ce:35:6a:98:f8:ba:c9:
b1:b7:f2:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWBOwbsh9AQsaQqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MDlmMmNhYzUtZmY5Yy00NzJlLTliM2EtMmYyY2YwODBhNmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnyGSq09ALSQhZfqL0OaQkGBnjv4Ku37QIbbI
f20S0N2kmbsR6h1BhmlhHFu364YWbS1fCOJwxcaXYLiiagf4ceJ3aoL6tabXSIm0
UUKfHvUKEPYJ9DLKSfQ7t7AH7wbF1Q/sz+70lIJW+mNpO6D2PROc/104nUch+rVb
SFWMK07lmHIf8DAutXNmz7PZ0TxMK6dIr7T22G0KZaFNcvQWjBVx7C5uYeOi28F/
fq2e++d3g+jmrkhi/buQCHWNdtTlDNzpSyupps8XSlUA50nuBHVhxd1Jkk4JpayK
OBygfj8bmb3L1Oa7c8S7LTUydaZgch7VGeaZTwcOmUe+QFwfIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQ6Ljlok4hm0J6HJ9kaFxB/S9k0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvN2ZiMjQwZjQtMDc2Mi0z
OTA3LWIxYjAtMmRkYTRkMTZmNjAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRdr5pzRGKjrz4sRaPWEoB7gM/z5c86/HEIjmnzQJbEPFYgm0Dp5Vj+
p2azV3uh7EGJIZCegl8m6SeO1lVw5qrI8JgqI1BjO6pYY2tHPoCqe3h7mkRCKsC9
W6BzT6WXY1NXeqBzmXaKdT79uSqWSd3bShYfvV443RzJkgH4Kzx27x/RnfSCJjjl
Bdahgx0JfwutjjxGWOorLIkpavCgl3oouYzpblcScCDSutBIKoBreHZXyd8COFw/
eKEqHbyxg/gyPo2879qqMjmm0HqlhW6ZGPkie392gyf6a/s7NgrjItben86FJ2Bx
QFLv4w09qGvTEepEzjVqmPi6ybG38uk=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:55:18 2026 by rpki-client