
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a1a00f-6109-3172-8541-1e0d58ab807a.roa
File: 89a1a00f-6109-3172-8541-1e0d58ab807a.roa (raw, json)
Hash identifier: Jstkhp68350JtvJnb5jDjgTdMNOzEbMDTcusMvpWhyI=
Subject key identifier: 10:29:3A:E0:7A:A7:AF:4E:BF:65:E1:1F:F9:84:66:CC:A7:37:6A:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE85452CE4038CF47411900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a1a00f-6109-3172-8541-1e0d58ab807a.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33662
IP address blocks: 68.85.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:54:52:ce:40:38:cf:47:41:19:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=c1787fe2-b8e0-4f9f-82f2-e215ef9d57f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:26:b3:31:29:cd:76:a4:a1:f2:91:e5:d8:
21:96:8b:f7:05:a6:0f:54:86:b6:3c:9a:f1:0a:0d:
12:67:a9:19:c8:e1:59:5d:95:77:d2:49:90:f0:84:
e6:c9:05:64:34:c8:e0:45:95:4f:ac:d3:0a:fe:1b:
56:75:6e:4d:53:92:4e:b8:8d:3f:d0:fd:0f:64:de:
8a:cf:37:d2:7e:95:00:3e:e4:0a:78:af:63:24:f2:
39:67:ec:0b:b1:73:ba:b8:a8:ca:19:71:32:3c:97:
d6:88:b4:d8:1a:c1:f1:b5:24:58:5b:cd:79:45:cd:
93:15:4e:40:ea:af:26:5f:f7:50:43:00:34:0e:8d:
66:9b:e5:fa:55:ab:e1:72:49:db:7e:33:35:d1:ec:
da:8d:65:16:50:34:61:21:0d:78:77:cf:48:c2:29:
b8:27:6b:3b:26:29:58:08:af:6a:83:53:2a:d0:97:
7a:3f:55:f2:80:b4:40:a1:04:59:20:d0:eb:db:1e:
30:b7:5f:19:bb:60:96:b6:8c:25:4c:e7:6b:f1:10:
cb:d7:ef:4e:36:b3:09:19:d8:19:9a:ba:06:46:42:
2e:df:ec:ab:cf:e9:8e:64:7a:06:9d:ba:d8:27:74:
5f:13:f4:17:76:eb:ad:24:07:17:82:08:94:f0:38:
83:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:3A:E0:7A:A7:AF:4E:BF:65:E1:1F:F9:84:66:CC:A7:37:6A:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/89a1a00f-6109-3172-8541-1e0d58ab807a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.87.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b7:c8:09:53:26:bd:17:b5:68:0e:51:0c:9d:19:8c:6b:89:9b:
47:6b:78:5f:e4:9f:17:b4:a5:35:54:5d:fd:b2:ac:08:28:c7:
58:be:51:2e:91:b1:42:6d:95:0a:3f:79:5f:54:75:99:a6:e4:
9a:b3:15:9d:ac:7f:ba:21:79:03:4c:47:22:40:89:82:e4:46:
cb:03:bb:b1:93:12:ba:11:42:e0:d7:4a:23:f3:db:de:1f:7d:
b9:30:a8:f6:4a:74:4a:2b:e4:02:ba:f4:ee:fe:1a:00:68:42:
44:1e:cc:65:e0:45:b0:43:9d:42:81:96:91:87:3f:9f:d6:42:
7f:e8:a0:a1:0b:67:10:fe:4c:76:67:16:52:f5:ee:25:96:31:
60:c2:06:12:25:a2:61:f5:b9:0a:3e:6d:f3:8a:20:31:43:84:
e0:bd:31:38:0f:45:26:ac:a4:30:19:2b:21:72:25:c5:19:77:
21:4d:a1:c1:5a:1b:92:f9:11:eb:48:3d:14:ed:25:ab:78:d4:
03:7a:18:20:4c:d2:38:aa:af:c5:dc:10:12:ef:7f:e2:ce:86:
24:8e:25:25:63:7c:eb:04:2e:6d:8a:aa:11:43:1d:ac:25:99:
9f:7e:18:c3:42:d8:29:b6:d5:e5:cc:a5:e1:b4:c1:84:4a:ac:
5d:e9:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:33:38 2026 by rpki-client