
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0b1931c-40c4-3465-93a6-a66f2ce027c9.roa
File: a0b1931c-40c4-3465-93a6-a66f2ce027c9.roa (raw, json)
Hash identifier: C+KMmm3G3pHYna23gI0BfbH9AaJrKgzbnyxedS8VMCg=
Subject key identifier: 23:5C:32:D6:72:95:6B:DC:A3:73:C7:3E:34:8F:AD:6D:81:11:B0:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5765FD8A40319C89ADB280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0b1931c-40c4-3465-93a6-a66f2ce027c9.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 68.83.32.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:65:fd:8a:40:31:9c:89:ad:b2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=db578edb-8f8f-4a30-a0d9-aaf5c1323e29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:99:6f:d0:2b:67:dd:8d:2f:ca:3a:ee:2f:87:
60:cb:17:30:12:13:d9:2d:ed:0b:4b:c6:b1:03:55:
e5:0c:10:1a:da:b0:c3:dd:fb:e2:b5:9d:40:16:18:
23:74:6e:fd:78:08:3d:99:48:55:6f:62:c7:d7:3c:
ca:26:34:01:74:e8:a3:05:fd:36:ab:1c:c8:33:ed:
a4:9e:42:03:d4:0d:b5:df:20:b2:76:e8:f3:b6:d2:
37:38:1a:38:fd:99:0f:93:a3:fa:35:57:5c:2a:1c:
13:f1:38:57:a6:14:b0:6e:62:19:e9:3e:cc:4f:f0:
01:30:87:0b:04:c4:07:df:1d:26:0d:c7:ef:ac:06:
c0:11:f1:e0:8e:c7:2b:a7:9a:48:e7:ff:f6:cf:74:
ac:02:7a:26:9f:39:da:73:74:f5:a7:96:e3:61:3e:
c0:9f:28:30:34:19:3f:43:1b:95:ca:85:59:e8:70:
38:86:09:84:6c:31:40:b8:53:01:dc:5e:f4:95:db:
b9:4c:00:6f:5a:0a:ee:a5:e0:f9:b1:75:cc:48:5b:
bf:ef:52:9d:8b:41:95:9b:1d:23:31:fb:b8:14:b7:
2a:29:ea:6d:03:55:fd:b7:35:a9:c3:be:74:cc:e5:
13:e6:dd:07:32:d7:fb:5f:67:cf:7a:95:c9:01:7a:
48:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:5C:32:D6:72:95:6B:DC:A3:73:C7:3E:34:8F:AD:6D:81:11:B0:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a0b1931c-40c4-3465-93a6-a66f2ce027c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.32.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5e:8b:51:50:34:05:e6:59:59:48:4b:65:96:fd:f3:2a:8a:47:
14:87:22:f0:17:72:b4:b9:ec:d2:12:b3:95:94:b5:32:5c:3d:
12:5c:7c:8e:8e:fb:d4:67:38:42:ca:6c:7a:99:11:b9:4f:19:
ac:ed:2b:50:5d:cc:a3:b1:de:31:2b:6e:bf:53:17:11:d5:60:
33:a2:ae:df:51:09:3a:52:3d:7c:27:ff:6d:ec:e6:39:e4:63:
c1:c7:38:f3:27:32:43:1a:25:12:89:18:fb:82:b3:a7:6f:a6:
70:97:c4:2b:b6:e3:30:3f:75:9c:ce:09:20:ca:b4:72:04:64:
f4:23:4b:b3:2d:d2:6f:3a:36:2f:85:ac:92:32:c8:f1:14:9c:
b0:59:57:ae:a2:43:c1:79:a0:83:e3:b9:40:7b:ec:03:23:97:
64:68:be:08:7c:59:3c:d2:9e:95:8d:15:68:d0:2d:0f:79:86:
d9:03:5c:50:7a:0a:88:30:6d:b9:88:02:61:1b:aa:d3:c6:a8:
e6:da:d4:bd:9a:a6:a5:a7:14:3a:61:62:6f:43:02:33:09:4d:
c2:c5:eb:b5:59:99:27:3a:11:cb:8e:75:9f:f9:77:10:11:ac:
64:5b:0c:08:3b:93:3b:7b:44:c4:af:e7:8a:f4:67:ea:7a:40:
46:43:12:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:01:18 2026 by rpki-client