
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3738d3-4b9f-374a-913f-4ddccd13fe29.roa
File: ca3738d3-4b9f-374a-913f-4ddccd13fe29.roa (raw, json)
Hash identifier: OaaQ114cfJn0WGxh8EA9k/9gGdQ/AqrivK41OtqCjKA=
Subject key identifier: FC:EA:8D:60:09:BF:93:D7:0F:25:EA:AF:5E:8B:A3:82:BD:58:84:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE8F04CE697309CB28E0C80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3738d3-4b9f-374a-913f-4ddccd13fe29.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33657
IP address blocks: 68.85.31.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:f0:4c:e6:97:30:9c:b2:8e:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=cb574434-63ae-4643-bbcf-e2ac91d184a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d3:63:03:0c:85:e1:00:ff:a5:31:2d:e0:0e:
0e:e6:52:fa:bd:14:5f:dc:ec:f8:7b:23:47:9e:72:
e7:be:59:5b:04:52:b4:24:66:f9:5e:a4:cd:7c:63:
0e:fd:dd:80:a6:95:b7:f2:fa:aa:da:c3:81:3f:b7:
ab:4d:b3:bc:95:59:db:11:22:89:aa:4b:2e:72:84:
b9:24:d2:69:52:a8:a0:70:78:9e:47:5a:00:18:96:
40:e9:fe:31:39:96:23:54:ba:ad:3e:76:e8:aa:6a:
a6:98:a3:83:2c:8c:27:da:00:39:19:9a:71:2e:fc:
ae:06:d3:09:97:52:94:e0:c3:52:93:5d:7a:ff:25:
d6:bd:81:52:fa:3e:95:15:ea:6e:32:5d:5c:4e:d3:
e4:05:ed:f1:5c:a3:2d:64:f3:72:a6:df:a4:31:f3:
82:a0:77:38:be:36:77:6d:5f:83:9b:fb:8b:ee:4c:
5e:17:a9:49:ba:6f:4e:ec:6b:be:49:a0:e3:c3:c4:
9e:7c:1e:06:7f:ff:10:76:98:fe:b4:f0:c0:54:20:
4a:08:ce:3e:e5:d5:a3:9f:33:ad:e2:89:80:f0:b3:
14:eb:24:cc:26:f6:80:96:6b:fa:80:64:a6:01:57:
91:20:64:3d:23:c6:73:a5:d0:f5:9d:04:5f:d7:f9:
a5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:EA:8D:60:09:BF:93:D7:0F:25:EA:AF:5E:8B:A3:82:BD:58:84:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca3738d3-4b9f-374a-913f-4ddccd13fe29.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.31.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:30:12:2f:d3:83:13:8f:da:22:8c:ce:10:09:89:66:36:6a:
e0:6a:ea:80:8c:d6:f2:ee:6b:67:55:12:d8:80:40:9d:96:cf:
53:cd:e4:db:52:15:56:20:ab:6f:73:71:dd:ee:31:88:8d:db:
75:26:b7:16:9e:b1:ce:c0:65:71:17:0f:64:da:e9:77:fc:48:
a2:8c:5f:75:2b:9d:b1:b2:10:44:a0:aa:00:1d:82:1b:25:d1:
30:74:b2:40:cc:0e:a9:27:f1:2b:b2:24:f8:d3:a7:e9:e5:af:
8f:20:4d:d4:da:ac:69:a3:89:89:78:d3:a4:ff:2d:fb:c9:ac:
67:52:d9:9c:2f:ae:5a:ae:1c:b3:06:47:cd:d0:7a:63:9b:8f:
4f:c4:4b:43:47:7d:6b:3d:b8:83:5e:06:b3:0b:5e:52:f7:f1:
c6:a7:e1:e9:66:a8:91:9d:e5:7d:62:f4:af:cd:cd:76:8d:e9:
c9:ea:74:a7:6b:83:b9:0d:8e:96:59:b4:41:6e:c2:ba:24:6e:
55:6b:82:08:d0:c5:80:15:c5:b7:69:64:24:99:0a:c7:ab:d1:
9c:27:c7:40:fb:55:24:b7:bf:ac:6e:01:98:eb:59:70:08:41:
5e:ac:b9:62:18:f6:09:1d:d2:74:e5:0a:de:ba:a9:ad:7b:be:
07:02:2f:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 02:32:49 2026 by rpki-client