
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a557f53-7f57-312a-a4b9-7caaba2d2632.roa
File: 1a557f53-7f57-312a-a4b9-7caaba2d2632.roa (raw, json)
Hash identifier: 8GOS2yFsi99td+3WMZ21xPSnKPO7DiTWE+LYrqq5Ku0=
Subject key identifier: 9E:0D:40:C2:5E:85:F1:31:D5:41:35:2F:8A:F1:9C:23:05:D5:8B:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB23A10B95A3AE8BAF5D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a557f53-7f57-312a-a4b9-7caaba2d2632.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.61.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:23:a1:0b:95:a3:ae:8b:af:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=abc0e12f-fcf0-43f4-81bd-fb49c23f182b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:87:c8:0a:ea:62:88:ab:26:71:b6:b4:c8:cf:
86:5c:c4:8e:ca:b7:55:db:11:f7:2e:7a:1c:4a:0e:
8c:c1:7c:78:d5:ad:8f:bf:1b:f1:cf:80:f3:44:1e:
ce:07:a5:f8:98:9c:35:ee:dd:a1:37:fd:34:d0:9c:
2f:43:24:32:d7:1d:f5:ec:de:55:f4:d2:18:7c:36:
44:eb:b4:46:7e:e9:c0:06:9f:7f:72:30:63:eb:b4:
55:e6:f5:40:7c:8a:c2:26:f1:4b:a2:fc:ac:1a:c3:
8c:21:c4:42:2d:d3:98:4e:a7:60:c3:7d:d7:35:d1:
ff:85:90:4c:1c:d0:53:e9:a7:b9:1a:96:64:8e:b6:
8f:ce:19:59:90:95:ba:4d:51:66:9b:de:32:63:1a:
ad:64:a2:6c:3a:f3:21:27:12:b2:9a:fa:59:fc:97:
78:05:d0:53:8d:2b:ad:b0:23:68:e6:32:55:ef:08:
2f:6e:7d:59:d7:72:3f:40:06:c8:7e:11:6e:19:00:
3e:01:21:e0:09:96:c7:1d:c3:f4:66:24:31:ee:c1:
dc:55:a9:28:91:df:94:95:26:c9:59:79:01:fd:60:
51:a6:51:0c:9f:a5:ba:3d:17:5a:67:64:a2:c6:80:
50:8a:94:1e:73:be:21:e7:5f:4b:da:ed:b5:11:cf:
b3:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:0D:40:C2:5E:85:F1:31:D5:41:35:2F:8A:F1:9C:23:05:D5:8B:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1a557f53-7f57-312a-a4b9-7caaba2d2632.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:3e:05:19:fc:9c:a8:62:24:b7:00:f9:fa:c0:cd:f1:da:82:
23:d8:34:e5:73:0c:c7:b5:9d:b9:8e:42:36:11:32:fc:0f:2a:
4f:fe:42:4e:01:f8:f7:fd:e3:8e:d8:a6:20:30:e2:42:69:b1:
05:95:ff:74:a1:8f:0d:59:db:7c:6b:dc:90:ab:8c:f2:a1:4e:
03:38:63:df:ee:67:05:23:47:fe:66:7f:4c:c5:f3:02:a8:8e:
dc:49:9a:3a:66:5c:85:2d:66:82:0f:b9:b1:73:ac:4e:bf:d7:
d1:25:15:64:37:b3:53:ed:69:49:9c:21:fc:6a:23:72:84:2f:
6f:25:11:03:12:f0:3f:9f:7a:a1:25:a3:24:34:1b:6b:d9:93:
80:c1:42:d4:2c:26:78:08:68:63:96:d1:10:30:01:ca:e9:de:
7e:27:d8:2e:3f:7e:f3:09:2c:23:25:82:e9:5a:21:29:c2:f0:
94:1e:96:18:fa:a0:70:0a:b4:a3:8e:ac:83:5c:f4:27:08:63:
db:c6:e0:eb:bb:5f:4d:d6:94:81:75:29:92:c3:6e:1a:38:b8:
2f:06:04:92:10:b1:45:ed:91:bd:ab:45:20:31:1f:e6:fd:b1:
30:0a:bb:ba:6e:47:a0:55:70:51:ff:8b:1a:cc:48:0b:47:98:
11:e1:91:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:52:14 2026 by rpki-client