
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e02f403e-2fef-3e4e-ba17-400a893e7b2c.roa
File: e02f403e-2fef-3e4e-ba17-400a893e7b2c.roa (raw, json)
Hash identifier: hMcXQffi+Vc51cnf+XdVxA2hnnCiR479En3GoUhYptA=
Subject key identifier: 7B:B3:1C:7D:73:51:E3:6E:37:A7:28:1D:EF:A6:60:1C:B7:A0:FD:47
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDEA4DC8293C986CC0185E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e02f403e-2fef-3e4e-ba17-400a893e7b2c.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33287
IP address blocks: 68.84.64.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:ea:4d:c8:29:3c:98:6c:c0:18:5e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=2dd9cb84-67f5-4f9f-ac1b-8eccceef05a5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:be:4c:37:c9:c5:cc:9d:78:46:ae:7f:81:4e:
0f:d1:47:a8:84:83:86:ef:ce:de:76:00:48:8a:01:
f7:35:51:90:5a:4e:61:95:af:0a:26:c0:3d:a2:bd:
18:7d:88:34:9f:32:2f:64:e4:cd:ad:fe:d1:5b:72:
bf:cd:eb:45:82:1e:7f:ee:19:25:c2:7c:a1:aa:da:
2c:b9:0d:8d:7c:86:6f:66:3f:09:e9:eb:6f:fd:98:
33:34:75:ef:82:5b:89:e6:49:6f:31:64:14:37:e7:
4a:72:44:e0:23:f3:ef:5a:bd:86:9f:94:41:48:c9:
bc:12:73:0e:13:61:27:c0:7f:33:a9:7d:cd:7e:3b:
0f:b3:82:c6:84:0f:44:7c:76:7d:85:0d:1e:83:98:
5c:dd:55:5b:51:1a:35:ba:ef:c4:65:a5:ce:fc:c1:
a8:de:50:c7:11:be:96:8e:85:fb:e9:dd:9c:03:89:
22:e8:c0:a2:0f:84:a0:b4:b5:23:af:de:0e:4f:7d:
7e:30:da:c4:c3:72:31:7c:ff:61:de:24:dd:19:c7:
21:da:ba:27:73:67:71:5a:05:05:3a:74:63:62:7b:
21:82:39:a5:88:d1:f0:94:ba:8e:5a:d2:52:85:bf:
68:84:93:58:ab:41:e8:16:08:0f:7c:72:b6:5b:7d:
d8:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:B3:1C:7D:73:51:E3:6E:37:A7:28:1D:EF:A6:60:1C:B7:A0:FD:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e02f403e-2fef-3e4e-ba17-400a893e7b2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.84.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c4:e1:ca:64:0f:28:90:d6:c5:f8:5c:88:1d:32:fd:ac:30:a6:
33:91:6b:17:e2:a8:f7:2e:7e:dc:63:15:4c:6f:96:c5:cf:d2:
5e:44:ec:40:1c:e8:e7:63:68:44:c8:28:94:f0:e4:5f:c3:5b:
24:7d:02:cd:2c:c2:c0:af:e3:29:12:1d:19:5b:35:1f:74:28:
40:60:d1:f7:45:50:8f:dd:1d:f3:89:d7:6f:26:73:53:ab:e3:
8a:8e:32:d3:f0:8f:d0:85:f3:83:9d:f4:ce:0f:50:48:ed:ca:
29:ea:6e:bc:30:27:55:ec:10:0b:88:da:81:2b:87:2b:b6:e3:
77:66:cf:e3:c3:6c:12:60:00:04:11:9e:7a:d7:63:fc:82:53:
d8:72:04:0a:d7:6f:2d:f5:1b:31:04:de:71:85:24:a0:a4:44:
45:0f:a0:d4:70:82:16:26:14:28:c7:a0:f6:36:17:20:b0:a3:
da:28:0e:bb:d2:45:6c:69:ba:77:d3:29:92:50:a9:31:7c:92:
60:9a:87:65:83:fb:57:d8:6c:e6:99:29:f7:2c:fd:60:b2:75:
bb:d4:f8:41:f4:61:11:b8:b2:b8:50:a7:d6:f2:6c:97:79:e4:
11:74:1b:49:eb:c5:12:22:cb:a6:0f:af:3d:e4:f8:d3:2c:86:
42:78:97:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:21:34 2026 by rpki-client