
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3a23a14-7982-3d36-a105-59d020254867.roa
File: e3a23a14-7982-3d36-a105-59d020254867.roa (raw, json)
Hash identifier: R6U0PbMyEAuJ99u3VhBtbE3LYUudM0WlDNPY1YWPjLU=
Subject key identifier: 34:83:17:FC:92:91:7F:C6:F1:07:8B:4C:19:49:F9:BF:2B:01:86:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5AB7EECF0183F8DD399D00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3a23a14-7982-3d36-a105-59d020254867.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33287
IP address blocks: 68.84.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5a:b7:ee:cf:01:83:f8:dd:39:9d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=b308a2af-53f8-442f-be83-e28011ac5fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:59:49:0f:73:3d:bd:63:ce:e6:52:70:3f:1e:
b5:3f:0d:db:f4:0f:74:44:0a:97:c7:33:9b:93:bf:
1e:e7:98:62:11:f4:6f:7e:40:5b:a6:a6:1c:dd:f9:
ae:ac:59:df:dc:7f:8c:4f:9e:fd:7f:ad:af:00:03:
5a:dc:ab:af:1f:d9:39:d1:07:5d:ef:78:e5:ca:d2:
66:d9:91:90:70:e9:aa:45:89:2d:92:91:3a:6b:94:
af:aa:ca:77:35:53:4a:e8:cc:ca:55:13:5f:70:5a:
1c:86:72:3d:89:a1:3e:d0:92:ed:3c:6a:bd:ff:ea:
75:65:f1:f6:f7:05:55:10:34:69:88:c2:d9:7b:e9:
fa:99:18:38:bc:18:89:20:df:f8:4b:54:1d:6b:12:
49:92:86:8a:1c:27:61:3d:a6:ba:4c:af:67:7d:4c:
c8:74:0a:3d:72:5a:e5:79:95:dd:50:2b:ea:fb:61:
20:14:61:18:9e:c5:8a:3f:87:f8:78:55:56:b3:0c:
61:d1:c9:42:01:a8:93:f5:dc:a8:f4:6f:a9:7c:b6:
9b:87:f5:37:9d:a2:ae:81:90:14:d5:1e:6b:2c:ca:
99:de:64:db:05:14:88:4c:76:98:38:8b:1e:92:5f:
6e:d1:fe:17:da:ed:12:71:ec:9e:8b:cb:d3:65:a7:
37:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:83:17:FC:92:91:7F:C6:F1:07:8B:4C:19:49:F9:BF:2B:01:86:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/e3a23a14-7982-3d36-a105-59d020254867.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.84.39.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:12:52:3d:e3:6e:e2:81:f1:f7:95:e5:5a:0f:3f:af:e0:71:
25:28:3d:b9:13:5a:cf:26:56:83:3d:c0:8a:d4:0c:f3:65:27:
c9:1b:d7:11:b5:1e:f9:76:d4:37:a6:5a:41:01:bf:68:29:cd:
84:74:10:f1:47:46:cb:20:57:dd:ee:ba:6e:7d:26:85:53:ef:
b2:65:c8:11:ff:19:29:c1:b6:50:09:f4:f5:ca:87:9b:15:e1:
99:b9:9c:8f:51:93:c9:f7:9f:1d:a6:a9:a7:7c:1c:35:54:99:
15:5b:d8:ba:e8:76:a7:e3:a5:e0:c0:8c:60:f9:ae:df:b9:91:
bf:fb:b5:fb:41:ce:32:b4:f4:23:94:85:bb:93:68:97:fb:f2:
79:62:a8:e9:47:1e:93:4c:7c:2e:e3:59:f7:3b:91:10:75:87:
a2:27:e6:e7:29:4b:9e:78:13:a2:8e:a1:eb:4b:43:ab:57:cf:
b9:6e:3b:8d:2b:27:4a:53:09:8d:09:55:0b:32:18:7f:f5:91:
3c:e4:55:12:90:37:13:a4:56:f4:d7:29:06:a4:ed:d1:f5:09:
98:23:91:6b:3b:ab:b0:c6:c1:94:34:7f:81:07:c0:a2:3b:6e:
b0:87:60:f5:62:10:ab:e5:27:36:76:d1:1c:c8:d8:f9:0b:a4:
e0:58:c4:14
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWrfuzwGD+N05nQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YjMwOGEyYWYtNTNmOC00NDJmLWJlODMtZTI4MDExYWM1ZmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1lJD3M9vWPO5lJwPx61Pw3b9A90RAqXxzOb
k78e55hiEfRvfkBbpqYc3fmurFnf3H+MT579f62vAANa3KuvH9k50Qdd73jlytJm
2ZGQcOmqRYktkpE6a5Svqsp3NVNK6MzKVRNfcFochnI9iaE+0JLtPGq9/+p1ZfH2
9wVVEDRpiMLZe+n6mRg4vBiJIN/4S1QdaxJJkoaKHCdhPaa6TK9nfUzIdAo9clrl
eZXdUCvq+2EgFGEYnsWKP4f4eFVWswxh0clCAaiT9dyo9G+pfLabh/U3naKugZAU
1R5rLMqZ3mTbBRSITHaYOIsekl9u0f4X2u0Sceyei8vTZac3iwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSDF/ySkX/G8QeLTBlJ+b8rAYarMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZTNhMjNhMTQtNzk4Mi0z
ZDM2LWExMDUtNTlkMDIwMjU0ODY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFQnMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsSUj3jbuKB8feV5VoPP6/gcSUoPbkTWs8mVoM9wIrUDPNlJ8kb1xG1
Hvl21DemWkEBv2gpzYR0EPFHRssgV93uum59JoVT77JlyBH/GSnBtlAJ9PXKh5sV
4Zm5nI9Rk8n3nx2mqad8HDVUmRVb2LrodqfjpeDAjGD5rt+5kb/7tftBzjK09COU
hbuTaJf78nliqOlHHpNMfC7jWfc7kRB1h6In5ucpS554E6KOoetLQ6tXz7luO40r
J0pTCY0JVQsyGH/1kTzkVRKQNxOkVvTXKQak7dH1CZgjkWs7q7DGwZQ0f4EHwKI7
brCHYPViEKvlJzZ20RzI2PkLpOBYxBQ=
-----END CERTIFICATE-----
Generated at Mon Mar 2 12:44:10 2026 by rpki-client