
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2980100-20e1-376b-92b3-76391e475b2a.roa
File: d2980100-20e1-376b-92b3-76391e475b2a.roa (raw, json)
Hash identifier: rBYtSf8HSLZ0lSZTTFbDJUwMfY8IiG/Wejgny34bv/c=
Subject key identifier: 0B:D8:73:CA:CE:45:94:94:85:54:10:5D:90:A1:70:AA:79:42:9B:CB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58C5AD1BBDBB57884F454F
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2980100-20e1-376b-92b3-76391e475b2a.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 67.188.32.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:c5:ad:1b:bd:bb:57:88:4f:45:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=309543f9-6aea-4abd-a483-acce7069f622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:dd:b7:29:4e:c3:43:9e:7b:6b:31:15:95:7b:
f3:70:5a:5f:b7:fd:b3:07:6b:3c:9f:c7:58:45:14:
f2:76:54:50:ca:e0:5a:dc:c7:c7:02:75:be:1a:46:
6a:b2:23:37:31:d8:ed:31:16:8b:36:ad:4f:53:c9:
45:a9:45:a9:7c:ae:85:65:92:2c:d4:a4:88:2a:12:
5d:f4:f8:ae:20:50:c3:81:b7:fd:66:b0:61:c2:0c:
ab:14:fc:e7:68:a3:f2:2d:4b:40:c3:c7:8a:27:97:
60:b1:c8:89:48:c7:a1:3b:cb:ae:78:9d:d8:9d:14:
95:65:77:cc:8c:80:2b:fd:ed:94:ae:60:1d:07:5f:
1c:f3:a1:f0:94:a0:03:64:b7:aa:3f:16:91:c8:b7:
59:a0:d2:ab:c9:6b:a4:a3:ff:f8:8c:f7:58:27:cb:
53:25:ef:58:31:a6:c5:92:18:22:8f:1c:ec:d6:d5:
64:c4:15:63:2e:5a:fa:08:e6:c3:e4:72:99:43:85:
0f:d8:19:ee:68:57:9e:14:ac:ac:a0:29:fe:53:bb:
cb:2e:9b:76:e0:fc:36:1d:36:2a:9d:4e:45:e7:37:
ac:05:44:b2:f8:80:25:69:5e:43:36:d0:90:20:a4:
4e:de:3c:a2:79:cc:77:71:0b:7f:1f:58:e2:24:b0:
cc:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:D8:73:CA:CE:45:94:94:85:54:10:5D:90:A1:70:AA:79:42:9B:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2980100-20e1-376b-92b3-76391e475b2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
67.188.32.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:03:12:97:f5:fa:f5:69:11:ac:fc:bc:e9:77:b7:c0:4b:a9:
e6:7b:4f:aa:66:a0:c8:16:98:dd:f8:ca:bf:1d:38:b3:8c:84:
98:34:94:b5:01:ae:23:66:4a:e2:4d:cc:c6:4b:e8:30:47:1f:
ed:03:08:74:ea:f8:93:37:8b:a6:3f:63:2f:0a:2a:ef:4e:05:
f0:d5:cd:2d:a8:ed:68:bc:b2:18:94:92:b5:e6:d1:e9:f2:a6:
9e:ec:c7:15:2b:5e:b4:44:f4:59:5a:ae:c0:62:f6:19:46:4b:
e7:30:90:b3:7f:2c:06:26:3e:96:37:7a:0f:9b:34:ad:5e:34:
c1:72:66:a2:8e:36:31:a6:ae:15:29:93:ba:02:50:16:58:a4:
5a:be:94:2d:08:0c:df:29:22:ac:ea:66:41:f7:50:bf:d4:f5:
f7:60:4a:93:5d:c4:99:46:59:9c:7b:ff:5a:89:d0:2f:cb:d4:
e7:80:8e:10:b3:60:56:2f:ba:50:64:0f:5c:11:fa:c6:b2:31:
a1:be:5d:5f:94:e0:0c:10:3e:86:f3:f5:50:db:ae:da:61:fe:
cb:e3:8f:5c:9a:c5:7c:58:4a:e7:85:74:94:d6:ba:63:77:cb:
48:a3:5d:0b:de:5c:43:fa:b4:be:7e:da:1e:6e:e1:cf:a7:9b:
df:78:bf:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:49:31 2026 by rpki-client