
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad24c1c5-6f23-342e-a730-e9943b74d6fe.roa
File: ad24c1c5-6f23-342e-a730-e9943b74d6fe.roa (raw, json)
Hash identifier: C85YaNMLTzdFyzdGRkY3zMI08EMCDrtW059Ya48ZBzo=
Subject key identifier: CD:BF:4E:31:7C:96:A4:AD:58:92:55:9F:DB:1F:FD:3A:8B:D7:DE:4B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57FEBABC7F1AE3C924B5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad24c1c5-6f23-342e-a730-e9943b74d6fe.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 67.167.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:fe:ba:bc:7f:1a:e3:c9:24:b5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=04841a88-f36a-4b7d-97a2-21bdeedebdb1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:31:5b:c7:34:ea:84:0e:d9:81:33:bd:69:8c:
1b:97:8c:b6:40:71:d1:5a:05:67:7c:55:80:61:06:
28:60:7c:82:85:b2:54:e4:80:00:e3:ec:87:9a:48:
84:e7:78:2a:45:82:a5:a8:65:7d:bf:e6:37:4c:c2:
a9:3e:20:1d:1a:f8:30:99:f0:dc:08:dd:e6:f5:e4:
74:19:46:5d:4a:fa:bd:6c:39:2c:37:b2:a5:dc:17:
c0:15:2c:24:29:c8:b4:c7:4c:6d:0a:e6:8d:f7:56:
a6:b6:2a:e5:37:fc:d1:31:93:e5:b5:5b:2d:34:9a:
66:09:6d:25:60:a5:9e:25:32:a5:4d:a6:23:8e:ca:
f9:5b:c9:69:41:6d:f8:9c:08:22:3c:1e:77:f3:1b:
12:79:2e:f8:45:3c:af:87:2e:67:eb:4d:fd:75:98:
f2:14:c1:e3:c7:7b:98:57:34:04:b9:ec:86:4f:c7:
4b:86:04:bb:1d:18:9d:4c:20:35:87:f0:0d:94:69:
d8:5b:c1:33:1d:1e:92:3b:8d:3f:dd:67:2d:13:4a:
41:f0:ce:4e:41:8e:cc:2b:d3:17:5a:3c:d6:3e:e1:
ea:d4:ea:bf:48:fb:23:8b:4d:8c:17:26:e2:b4:10:
1a:8c:c0:dd:26:bf:60:12:94:77:50:ce:d6:0b:48:
d4:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:BF:4E:31:7C:96:A4:AD:58:92:55:9F:DB:1F:FD:3A:8B:D7:DE:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ad24c1c5-6f23-342e-a730-e9943b74d6fe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.167.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:95:d7:50:82:f9:83:32:ee:e6:24:3c:6d:d3:40:34:90:22:
cf:9b:72:31:a9:5a:90:23:be:32:55:b7:03:f6:c6:6c:56:fc:
b1:81:e4:dd:07:43:05:eb:08:7c:9f:f7:31:59:f3:33:e4:be:
4a:29:74:f8:f7:4b:52:86:27:d9:f7:bb:0b:64:29:4d:aa:99:
ba:4e:db:54:88:74:9c:5a:46:b7:39:af:61:0a:5d:4b:39:8d:
d1:be:73:80:23:57:2a:b1:4c:01:97:8b:0f:ad:70:a9:96:bd:
4c:3a:91:11:35:0c:12:57:d4:01:b7:f8:89:9d:d5:ea:7c:b9:
ae:ad:5f:9a:6f:55:42:47:a0:84:d3:96:e4:b7:0a:db:81:66:
0a:13:11:87:c9:6a:de:c7:5f:e2:3c:f6:bb:5a:16:6c:f7:78:
61:bf:4d:c5:be:49:50:bb:de:09:d2:37:94:7d:22:d6:3a:4e:
a9:e7:44:6a:a2:2a:45:1d:1d:c5:56:5c:f9:c7:56:90:60:2f:
6e:31:8e:0b:32:b0:af:2a:27:3d:b9:10:aa:bd:78:32:2b:67:
bc:61:20:da:11:22:d6:79:67:5f:a9:48:de:e0:a9:26:e4:16:
b8:14:55:ff:67:37:28:8f:ee:3f:2f:60:65:bb:d2:e8:a7:60:
6c:b0:d1:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:45:02 2026 by rpki-client