
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/144dfb68-1da8-311f-8729-b802f3176095.roa
File: 144dfb68-1da8-311f-8729-b802f3176095.roa (raw, json)
Hash identifier: 5omM5+ZOTCl3b0oSciHHvy1EojwyectZcF9c/RXpk9s=
Subject key identifier: 2C:4F:E8:35:F4:32:18:C7:4C:6E:4C:38:49:25:27:9F:4B:33:F5:DD
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB229CD2A2AEAEA976D560
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/144dfb68-1da8-311f-8729-b802f3176095.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.61.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:22:9c:d2:a2:ae:ae:a9:76:d5:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=79a9cb75-ee56-43f8-957e-76954cedd2db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:0c:1d:9c:1a:af:56:77:bd:74:ca:13:d2:80:
07:92:42:7b:bc:e3:0e:5e:cf:47:43:37:3d:90:96:
24:bf:c6:26:17:53:2e:32:f6:09:02:ee:01:6e:de:
a3:60:8e:f8:23:09:bf:c7:05:a2:cc:35:e6:70:36:
89:35:84:79:28:e8:48:f8:b0:8c:43:7f:b7:d9:fc:
52:ae:91:e5:fa:fb:be:ef:02:8d:05:48:85:a1:fd:
80:73:81:03:6d:ee:2c:e3:2f:80:d6:55:4f:20:77:
e1:61:2c:66:2b:d2:bc:b7:98:fd:1b:79:62:71:9d:
d8:e5:cd:17:3b:09:bd:49:29:cf:77:a1:22:ec:34:
58:a2:f0:b7:06:2e:3f:3a:08:af:66:74:9a:69:3e:
10:0b:b3:39:a7:cc:4e:45:e9:d1:8d:c3:8a:d2:09:
4e:97:7e:ab:37:ee:b7:03:f9:84:28:1c:8b:6d:b4:
ba:ad:2b:64:05:6c:ee:26:9f:35:f9:6d:54:8c:b4:
5a:7e:87:93:1b:e2:a0:70:68:fd:30:0c:24:da:25:
1e:38:b9:07:44:32:08:38:f4:ad:66:35:c0:15:06:
e6:10:0c:e1:ba:c5:1f:f8:4c:e6:27:24:9d:fc:90:
6d:51:f8:d6:1e:ac:0b:15:52:35:8f:b5:77:af:49:
b1:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:4F:E8:35:F4:32:18:C7:4C:6E:4C:38:49:25:27:9F:4B:33:F5:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/144dfb68-1da8-311f-8729-b802f3176095.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
88:bf:af:8f:0d:a6:ee:c4:15:95:1e:e8:13:ae:ca:d9:c2:34:
78:66:77:d7:1e:6c:27:95:70:a5:9e:5b:5f:cb:e9:eb:35:7f:
d5:b9:5f:60:16:6c:fd:f0:c8:09:9e:9f:ae:e1:0a:14:70:e6:
b8:c3:c0:7d:ef:66:ee:b2:1e:85:f9:12:0e:31:c5:09:0c:4b:
5f:30:f1:b3:55:8d:df:b4:b3:c2:56:ec:dd:df:e5:37:e4:31:
e9:e2:28:f4:51:06:12:15:f5:09:4b:5b:3d:b8:17:2c:41:53:
a3:66:2e:c6:d6:82:03:6b:70:a6:e3:8d:80:e2:2e:ef:85:01:
e4:5d:cb:91:42:45:88:b0:66:fb:72:22:75:ed:5a:c6:ef:43:
d9:21:0c:bd:26:f5:ce:21:f4:17:00:8f:00:09:08:77:57:fe:
59:65:27:62:c1:c5:0b:5a:85:82:5d:a2:c8:5f:e8:dd:24:06:
36:9f:92:5f:20:58:5c:c7:79:12:17:36:b6:bb:a7:aa:23:c6:
1f:5b:2c:6f:7a:d3:5e:c5:79:5a:69:a5:4e:e5:c3:0f:2b:13:
a5:ca:52:48:e4:54:ad:bc:7b:d8:6b:2a:40:ed:6e:9b:90:78:
4e:86:85:be:9f:e1:40:99:26:88:e1:b5:48:16:1b:90:96:83:
80:86:8b:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:43:13 2026 by rpki-client