
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6f8072-5014-32e0-9ea9-65b907e455c0.roa
File: 8a6f8072-5014-32e0-9ea9-65b907e455c0.roa (raw, json)
Hash identifier: Vi7ywPjoDdAC6VGhjv6rJnbDFsADrJhkWxCx+ogo3ao=
Subject key identifier: 32:67:27:61:88:EF:CB:75:78:2E:CE:7E:40:B6:F8:5B:F1:43:38:21
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B9D12804E5BB9AB0B2580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6f8072-5014-32e0-9ea9-65b907e455c0.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.44.98.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:9d:12:80:4e:5b:b9:ab:0b:25:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=16fc1b54-74d6-4139-a7be-5a08f458490f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:4f:1f:83:b8:2d:c2:eb:ec:ee:18:35:a6:01:
03:64:3c:6f:62:f7:fb:3b:df:cc:60:de:28:39:df:
ee:84:51:88:8e:01:78:3f:6d:02:31:2a:0a:04:34:
d4:af:dd:9b:b3:ec:a7:88:fa:e6:a6:94:98:39:2b:
92:48:8f:d4:b5:05:9d:3a:27:0d:b8:6c:18:a9:f2:
b3:52:b0:36:75:69:21:7c:7b:40:9b:47:ca:7b:c2:
4a:03:28:a6:d1:0f:d3:39:76:7f:c3:ff:94:20:eb:
09:4c:a5:2b:62:b3:f0:4b:16:6c:1d:59:76:40:4a:
54:c8:86:68:0d:42:16:ae:14:ac:86:d7:77:f9:57:
79:6a:57:fc:7a:b9:54:e9:44:16:5c:5f:64:66:18:
82:db:a1:52:cb:62:e4:3e:1f:76:be:78:72:f6:28:
e1:08:4b:c7:56:53:f1:44:91:05:a5:be:aa:d0:e0:
fc:2c:3f:14:9a:72:59:94:7e:d9:58:a3:ee:ad:82:
73:96:fc:64:96:2d:41:34:87:49:b9:21:8a:c1:6f:
a1:7b:43:16:c7:43:03:75:05:4f:f1:3d:fe:73:ad:
91:55:ac:51:66:51:d0:85:67:1a:9c:d7:2e:ad:c2:
8c:44:f9:90:17:c1:23:9c:cb:3b:8b:de:b4:a0:f7:
f8:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:67:27:61:88:EF:CB:75:78:2E:CE:7E:40:B6:F8:5B:F1:43:38:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8a6f8072-5014-32e0-9ea9-65b907e455c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.98.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:7f:aa:f8:a7:bb:9b:2b:93:63:6a:a7:56:30:52:bd:4a:43:
0e:14:a0:0b:2c:31:7a:c9:a3:a3:b3:18:16:66:7e:0a:16:18:
83:49:68:fc:d7:b6:fc:16:97:af:a2:86:84:c1:be:0b:dd:f4:
a1:99:3f:ab:ba:0a:dc:c7:fb:70:8b:6b:39:99:d7:67:bf:fb:
f9:75:8f:2f:ff:27:1c:1d:a1:c4:f8:69:26:92:d3:77:56:55:
9f:fc:51:a8:15:92:25:94:1a:f7:a0:ed:4d:22:41:cd:bc:51:
a9:96:99:51:5f:04:43:0a:c5:69:aa:47:96:a3:d9:1e:9c:f8:
75:9e:97:ad:8e:f1:c8:88:62:9a:dd:e9:6f:66:07:21:a4:44:
70:ba:99:e6:f2:8b:75:26:94:9e:c3:e2:3d:44:79:ba:e2:58:
a6:5c:5b:d2:76:8e:ec:22:19:7b:8e:28:af:0e:f7:d6:0d:5d:
97:fc:49:46:54:9d:79:8f:7f:3b:ae:85:49:27:72:13:c4:3e:
4b:05:64:89:61:e8:46:64:13:4d:ea:9f:fd:0a:c3:82:8a:e4:
41:69:3f:62:5a:1d:13:b9:cf:67:cb:fe:6e:06:6b:b5:c4:83:
81:ee:a3:9b:9e:ca:73:c4:7d:8e:6e:08:3d:5f:fc:56:5b:12:
83:01:b0:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:40:30 2026 by rpki-client