
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19085812-c51d-35bf-8139-1553f9c0273a.roa
File: 19085812-c51d-35bf-8139-1553f9c0273a.roa (raw, json)
Hash identifier: SpjFhje+UJXa18Yn33u1Pt6wuSO6FSgDNRUg4WvDGuA=
Subject key identifier: DA:4C:92:D2:07:07:E6:E0:CE:AE:1C:A9:A8:84:74:3D:DC:F0:B9:FC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB14E6C1F627FD4DBA3880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19085812-c51d-35bf-8139-1553f9c0273a.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.43.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:14:e6:c1:f6:27:fd:4d:ba:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=c0caeeb6-fcda-4b3f-86df-2616116d71cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8e:ee:2c:b9:d3:0a:7f:36:0e:aa:d2:d3:62:
87:0d:76:37:aa:e6:fc:62:bf:24:d3:56:59:42:cb:
6c:2a:bc:94:0b:2e:31:3e:32:9b:47:e2:2e:f5:d6:
25:dd:57:ac:50:5f:5c:51:d9:40:09:f7:99:5b:da:
97:f1:9b:e6:24:84:2e:29:2e:dd:96:11:e7:02:87:
a8:b6:45:bc:9f:e2:8f:c3:5e:45:3e:ae:20:e0:2e:
0a:7f:32:32:a6:66:18:97:c6:a1:bb:ea:0b:a3:5d:
fc:a0:41:ab:25:59:fb:da:50:fc:40:69:4f:fe:1c:
86:82:d8:29:98:46:11:1d:fb:d7:95:a5:f8:76:44:
b5:71:90:42:ee:af:dd:0f:82:6e:92:43:60:38:84:
6b:00:78:d1:00:a6:90:18:42:8b:4b:7a:b7:ee:c9:
ab:e1:09:e0:eb:fd:74:e9:24:c0:38:48:43:a3:23:
9f:2d:49:73:d9:67:6f:6d:72:5e:0e:0d:de:db:85:
e0:3e:43:42:18:57:11:c3:1b:ac:42:31:ad:38:48:
be:06:8d:e1:e7:19:d8:9e:3b:27:2a:06:a1:59:46:
ea:90:ab:5f:d7:96:02:72:15:26:46:31:c9:99:b8:
06:58:1d:2a:81:6f:f0:98:43:64:20:95:4b:69:77:
68:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:4C:92:D2:07:07:E6:E0:CE:AE:1C:A9:A8:84:74:3D:DC:F0:B9:FC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/19085812-c51d-35bf-8139-1553f9c0273a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:af:78:0c:61:fd:10:10:fc:35:14:bc:b3:37:3f:21:90:0b:
b5:67:ed:99:ae:1a:a5:b9:71:bb:6a:3f:85:dd:16:af:24:e1:
c6:10:e4:5a:16:4f:d8:eb:07:22:5c:2f:f1:58:0d:45:91:08:
bb:10:f9:25:4e:f1:08:20:ca:a0:2f:72:07:da:3c:cc:1c:8f:
61:90:75:ca:cc:87:f6:6c:fa:cf:2a:56:59:32:69:63:91:a9:
b1:92:5c:f6:ce:86:de:8a:46:eb:2d:eb:af:b4:5e:b5:96:08:
d7:1d:00:7f:cf:e3:9d:86:7f:b4:9a:ee:0b:76:ba:dc:3d:59:
1c:18:28:31:29:69:17:a8:a8:b2:46:eb:da:d7:c2:1f:5b:8b:
39:b5:7d:d1:91:b4:2c:73:f5:7f:d3:aa:32:14:84:5e:11:24:
59:25:c9:71:90:9e:ee:5b:00:78:86:32:5a:6d:a2:3c:10:de:
c4:c4:31:66:cc:14:c2:2c:5b:0f:98:3a:9d:9b:fe:c9:43:2d:
f4:92:5b:b0:8d:8e:84:73:9c:e5:e8:fd:03:7d:79:ab:59:28:
21:72:a2:b7:47:67:3a:e9:4b:69:ca:7f:81:d5:64:b3:7e:23:
85:84:e8:e8:9d:51:b1:34:b2:a0:79:ad:08:95:42:19:45:00:
4f:8b:5f:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:45:50 2026 by rpki-client