
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89dc3cc-0979-38c8-9ffd-880bfe0b9eaa.roa
File: c89dc3cc-0979-38c8-9ffd-880bfe0b9eaa.roa (raw, json)
Hash identifier: mcWB4dOo/7Kxj9Rh42UnkJT6EDjwiYuHGj91sFc+l+c=
Subject key identifier: 94:93:9A:3C:0E:19:07:83:44:85:65:9E:68:1E:AA:0D:30:AF:C7:77
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE581358120C7CBED93CB230
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89dc3cc-0979-38c8-9ffd-880bfe0b9eaa.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.44.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:13:58:12:0c:7c:be:d9:3c:b2:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=662efec5-9d98-437c-8ee5-b27de890ba6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:87:03:fd:28:36:78:f4:01:dc:be:70:91:30:
49:d6:02:82:a3:ef:cc:7e:ef:d4:f1:a3:18:16:0b:
57:f2:0b:92:d6:3f:be:d8:62:95:55:18:b8:5c:6f:
6e:4e:61:dc:1c:c0:73:5e:72:6a:39:75:a0:69:ff:
98:a2:a1:b9:37:6c:35:f6:e9:3a:da:26:57:3f:5d:
ab:9d:36:d7:d3:58:e1:35:5c:3f:cf:80:e0:b0:ad:
bb:8a:e6:ea:8a:5f:6e:6a:0c:25:8c:23:13:e0:a7:
1f:f3:a3:08:2e:a9:c0:33:57:67:b5:68:db:8e:d8:
aa:f5:00:1c:bc:3f:4b:4d:4c:a2:0e:20:5d:a3:a2:
c5:2e:0c:7f:d2:cf:c4:ff:a5:a8:d8:26:cf:61:26:
17:33:cc:71:19:21:00:4d:00:c3:3c:46:e6:dd:e9:
bc:ce:b0:ec:7b:22:a0:5f:7d:6b:d6:d4:53:18:86:
23:22:4d:f1:35:f4:60:18:40:80:69:5c:13:63:2f:
82:f7:7c:89:87:ef:51:44:f1:ab:41:b1:f0:59:40:
fe:fd:d6:6b:02:61:4f:ae:69:4a:bc:a1:35:e4:a3:
ab:ce:e7:1f:53:c6:84:12:ef:aa:cf:8a:16:bb:fe:
ca:c1:b4:ea:e5:31:be:75:b9:aa:30:06:0c:1b:ea:
1c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:93:9A:3C:0E:19:07:83:44:85:65:9E:68:1E:AA:0D:30:AF:C7:77
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c89dc3cc-0979-38c8-9ffd-880bfe0b9eaa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c6:e7:16:b4:7c:bc:1b:de:ab:c6:69:4c:0a:17:5c:cb:f9:29:
9f:0a:67:1a:e3:67:82:e6:04:f2:d3:91:f1:9a:ed:14:2e:1c:
1e:45:82:b4:df:d0:6f:6c:2f:fc:4b:3f:c5:72:25:6a:8c:5c:
1e:b8:bc:6a:76:c1:43:b7:0d:61:45:27:70:34:79:35:04:22:
dd:e9:f0:56:b2:67:1c:9d:eb:cd:87:27:9b:bc:d2:11:02:d7:
a7:45:8e:69:e9:23:a6:61:30:51:a2:17:e9:0a:05:e9:8e:8f:
7f:b2:64:94:a1:ae:0c:a9:90:6e:9a:d7:df:9b:75:3c:72:5b:
c1:bb:c5:2b:fb:36:3e:47:36:e3:66:e0:8c:58:4f:75:ae:89:
64:ee:b3:66:c5:da:ee:75:2b:7d:46:c7:0b:5a:40:4d:ec:55:
f2:9e:0e:a2:f8:b6:91:97:a1:ab:f9:79:49:10:bd:20:de:7c:
2a:71:b3:a2:41:ba:c3:85:34:43:d1:d6:8f:0a:9e:eb:75:e1:
32:e9:2f:ec:12:22:56:5f:90:62:f1:2f:99:77:5c:c2:b5:62:
19:3a:b9:ac:23:59:ec:d5:ca:39:cd:f8:c6:65:5c:b2:44:b0:
21:7c:74:11:ca:8a:4f:75:48:34:8d:29:20:5c:6b:96:69:56:
48:ed:b0:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 22:56:46 2026 by rpki-client