
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa
File: d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa (raw, json)
Hash identifier: Vir1rURXa4ePFPO0kI6JN8z9W9ow3deYt8hG7V/GQJg=
Subject key identifier: 22:73:5F:C1:60:09:55:A7:38:E8:EC:E1:E7:8A:F1:30:C2:4C:8A:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE934B123B42D16048DE600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 22909
IP address blocks: 68.52.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:34:b1:23:b4:2d:16:04:8d:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=1dc22fdc-b246-4c6e-a5b4-7138ca15c57e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1c:51:c6:0b:ac:66:33:e5:84:a4:bd:5f:23:
31:30:ff:6a:eb:10:48:dc:97:ce:e9:a2:e0:62:8a:
e2:38:d5:92:3a:df:5f:5b:e9:60:d5:ea:7f:31:98:
4e:e1:0f:03:43:1d:1a:86:51:9c:35:e6:dc:1d:28:
3d:07:59:dd:cc:9d:43:c0:ba:51:11:b6:8a:e4:0f:
4a:8f:90:d3:46:bb:38:e7:ea:3b:67:61:6d:7c:46:
39:8c:1b:ca:1e:fd:38:90:a8:db:7c:e7:a0:b5:cd:
88:ea:85:c9:da:3d:d2:4c:ec:a1:f8:e6:ea:4a:76:
ee:7f:20:b7:fb:c1:0e:b9:ae:21:5f:24:e3:ca:29:
cf:79:5a:17:23:02:d2:3f:21:c9:2f:4c:60:ba:13:
0d:64:2f:f1:37:a3:dc:01:f5:05:fa:36:47:3e:8f:
b7:e5:f3:8b:32:58:e8:b6:55:50:3e:84:f7:bc:dd:
b9:0f:80:0c:3a:25:97:97:8b:99:a1:1b:bb:59:69:
e8:c4:79:5c:3f:f0:13:29:a4:d2:e5:26:8d:4e:ca:
6d:01:5f:ea:f1:27:46:d0:55:6b:e8:9f:ca:4c:3e:
22:56:6f:83:b2:c2:e9:f5:82:56:90:11:e9:5a:e4:
d1:15:c5:f2:69:c2:2a:3f:25:74:52:9f:30:2c:2d:
12:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:73:5F:C1:60:09:55:A7:38:E8:EC:E1:E7:8A:F1:30:C2:4C:8A:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d96d5d1c-3c85-3b6c-8f34-124675eae7d6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.107.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:13:78:99:20:d6:c8:c4:23:98:e8:4a:02:e2:41:3c:51:a0:
94:a5:a6:db:f3:dc:6d:22:a2:cf:02:4b:e3:96:96:6c:6f:8c:
f2:af:da:c3:a3:00:88:20:cc:4d:99:10:61:ad:a1:9f:e5:9c:
88:20:5d:77:4a:18:28:48:82:0e:30:b5:e2:32:26:c1:97:0a:
66:b3:fb:48:26:a3:ae:bb:c5:6a:36:17:43:a1:28:9e:90:a1:
b7:f3:4f:cc:6b:8f:49:0d:ae:cd:82:3f:18:f0:1d:61:40:0e:
e7:3a:b7:02:51:31:48:8f:fc:53:69:64:2c:74:ed:c5:3e:05:
43:6f:82:d2:40:18:a2:55:b8:75:16:ac:96:d4:89:d5:a3:5b:
00:3d:4b:a0:e2:e5:a6:e9:26:64:ac:ad:c0:e9:90:88:b2:07:
4a:ca:85:1e:56:40:fe:32:96:a9:0f:b3:ad:46:1e:43:7f:58:
0f:83:74:79:46:18:a4:26:d7:0e:61:05:7f:2e:51:a1:db:93:
29:8a:b2:b0:21:03:d4:3c:ec:cd:47:a5:69:d9:48:39:7d:73:
59:32:5c:f5:54:2f:3a:8e:8f:92:e6:4c:c4:b8:aa:79:87:d4:
e8:36:90:de:50:5d:8e:af:99:ab:0f:77:0d:44:74:54:6c:48:
ef:4c:5d:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:44:31 2026 by rpki-client