
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa
File: c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa (raw, json)
Hash identifier: Jg0S0vqPy1Y/ut3heiszfKJfgpa2SunR/8bGklXmq4g=
Subject key identifier: AB:C8:E8:69:87:18:11:F9:29:C6:63:E3:7D:8D:39:2E:87:F3:F7:4C
Certificate issuer: /CN=868a77c4-49cd-4821-b1f2-58d35028b0ed
Certificate serial: 010D0C9F4328584D00B244C804EA61841ECB6740
Authority key identifier: A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa
Signing time: Fri 27 Feb 2026 14:00:40 +0000
ROA not before: Fri 27 Feb 2026 14:00:40 +0000
ROA not after: Thu 28 May 2026 13:00:40 +0000
asID: 46970
IP address blocks: 199.242.28.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:00:b2:44:c8:04:ea:61:84:1e:cb:67:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=868a77c4-49cd-4821-b1f2-58d35028b0ed
Validity
Not Before: Feb 27 14:00:40 2026 GMT
Not After : May 28 13:00:40 2026 GMT
Subject: CN=98ebce6b-8100-44c8-b8fe-37f322c55d0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:a6:e1:08:30:2c:f9:54:ee:d3:f0:93:f1:2a:
40:3c:1f:73:d7:c5:96:77:b7:ca:57:6d:10:1e:42:
78:75:0e:fe:d6:f9:0c:c2:a7:1b:61:1d:85:cf:10:
34:5f:15:8c:71:89:ef:1e:f7:fa:0e:fd:32:84:4a:
da:cf:f7:d8:9c:99:63:7f:af:4c:d2:cc:e8:74:36:
9d:f0:bf:0c:e0:4f:ce:37:4e:31:e4:2f:b0:23:39:
bb:47:33:79:f5:3c:ee:06:f7:b9:2b:c7:03:19:e1:
a7:70:97:7f:74:71:90:7c:4e:66:49:80:45:66:31:
c8:10:ac:c5:99:3a:8b:e1:f2:bf:ac:00:a5:dd:a2:
0c:a1:fd:e6:ab:e5:04:e1:e9:19:5c:fd:ff:45:c5:
21:d6:fc:02:50:46:9c:82:be:d8:5e:e3:41:24:88:
99:52:f3:2c:77:fa:84:42:ba:a6:33:a4:fe:9a:93:
7c:f1:df:67:cc:08:a3:b2:94:68:2f:4c:46:93:7b:
59:e7:6f:e9:77:d7:ac:4a:2d:e7:be:14:ec:61:a7:
66:ba:6c:9f:29:ac:89:b0:0b:93:0e:55:bc:c5:38:
c9:fd:a8:58:f1:5f:61:94:88:6e:3c:f9:9b:84:a3:
23:89:62:1b:68:45:79:c3:8d:06:0f:95:7e:bd:75:
69:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:C8:E8:69:87:18:11:F9:29:C6:63:E3:7D:8D:39:2E:87:F3:F7:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/c8c06edb-b0cf-3405-9d62-91233a2bfcdb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed/868a77c4-49cd-4821-b1f2-58d35028b0ed.crl
X509v3 Authority Key Identifier:
keyid:A2:19:F0:EB:7A:5F:24:BB:20:59:03:C8:AB:8E:28:00:C8:56:AC:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/868a77c4-49cd-4821-b1f2-58d35028b0ed.cer
sbgp-ipAddrBlock: critical
IPv4:
199.242.28.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a8:00:4f:11:9a:4a:f0:39:dc:e8:59:2a:75:1f:2b:df:53:99:
99:d4:2f:ac:7f:a7:ee:8e:47:55:ad:1e:ed:65:fc:42:13:60:
10:ec:e3:11:e5:7b:d2:6f:43:53:25:10:32:cb:c4:ee:77:5d:
62:76:97:c7:14:b6:41:49:1a:d6:00:eb:5b:c8:d4:87:14:8b:
d7:d5:23:da:28:b7:7d:85:54:da:b8:bd:b9:69:50:bf:de:d9:
46:d5:a1:8e:cf:15:d0:8b:d3:50:c3:ac:5a:be:ed:ee:19:e1:
f8:9a:ec:f3:62:f1:66:8d:20:4a:95:2b:e9:3c:f8:68:b1:d8:
5d:34:30:08:e9:c1:10:5d:bb:a5:3c:de:29:f6:0e:c9:b7:31:
13:0e:60:f6:f0:b5:30:b8:3c:55:f9:89:eb:e5:c1:a1:55:6e:
4b:96:df:97:e2:fd:87:83:bf:a1:39:3c:12:57:35:b5:de:7a:
4e:cc:d1:72:e2:f4:f8:b3:d9:7d:b2:88:c2:1e:86:b8:ac:b6:
ff:58:94:ad:37:b0:cf:e0:e1:92:36:22:52:52:01:01:8c:af:
e7:e6:d4:f7:64:86:ed:23:1c:48:c7:dd:39:38:e5:ac:12:74:
c0:59:9c:75:28:d1:89:94:a6:3d:9c:66:eb:14:a2:34:a8:a4:
6c:43:7c:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:52:00 2026 by rpki-client