
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/221c88f6-6e0e-35d1-9370-3bdfc734046a.roa
File: 221c88f6-6e0e-35d1-9370-3bdfc734046a.roa (raw, json)
Hash identifier: p8JnNIyq7IKwRo3TUv8KbhmgHjW/56zCYJNOJ93LCLQ=
Subject key identifier: EB:1B:C1:BE:F2:7E:F2:F8:FE:E1:5F:1A:C9:ED:FB:BA:91:F7:6F:10
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE8F02F09D863373994C200
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/221c88f6-6e0e-35d1-9370-3bdfc734046a.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 33657
IP address blocks: 68.84.128.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e8:f0:2f:09:d8:63:37:39:94:c2:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=cbd5abcc-628c-4351-b045-8f6d81a73547
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:7c:a6:e4:38:b4:ac:4f:ef:b2:10:93:8c:3e:
8c:c2:69:41:c4:47:40:aa:74:13:b3:1f:0c:2a:f0:
b1:c5:2b:59:a1:c3:66:82:8d:40:2d:77:ab:fc:c5:
ad:ce:10:db:02:dc:eb:04:c9:01:cc:02:47:d6:97:
94:98:3c:88:a6:89:80:24:8e:91:e1:5d:7b:cf:5a:
6a:b4:ac:8a:89:f5:ea:1b:4d:f9:8a:df:a1:fd:e2:
a6:56:9d:ab:f6:f1:e3:0e:78:b1:34:cc:55:44:32:
00:fe:d2:fb:89:20:25:44:6a:7a:1f:ae:3a:c0:22:
92:b6:a3:93:d9:32:53:46:08:c5:cc:a5:de:b9:4b:
8f:43:ee:f3:16:b8:65:73:f7:aa:0c:04:0e:a6:0b:
e5:42:92:90:6b:1e:3b:26:57:88:8a:8d:61:8c:24:
a5:05:85:a1:6a:a2:c4:30:47:04:3d:cc:ad:f8:7b:
1f:46:61:94:26:3c:bf:8d:8a:57:d4:3b:25:fe:fb:
84:3b:65:94:52:eb:3c:78:1c:3b:16:1d:44:1e:7b:
f8:74:a7:37:d9:b9:03:13:07:83:2b:bb:52:b2:85:
b4:5c:68:39:86:48:23:9c:ac:89:80:13:01:a9:97:
d9:9b:51:d0:8f:19:29:1a:f3:3a:0c:ee:0b:0a:69:
79:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:1B:C1:BE:F2:7E:F2:F8:FE:E1:5F:1A:C9:ED:FB:BA:91:F7:6F:10
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/221c88f6-6e0e-35d1-9370-3bdfc734046a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.84.128.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0d:7c:c5:5e:7e:16:b9:ff:12:b2:cd:a5:20:5f:c7:8a:04:c0:
1b:61:63:ab:2f:23:90:8a:93:5a:24:0f:91:7b:e4:af:45:73:
50:e7:a9:05:ed:47:26:38:5e:28:01:0d:ab:6f:13:af:2a:cb:
01:65:a6:5a:d7:fe:c9:9f:0b:6f:3d:e6:eb:8b:1f:c0:83:7b:
21:69:f7:f0:0c:90:71:0d:03:e8:70:40:d8:63:e0:60:b1:a7:
67:6c:9b:1a:8a:0e:bd:33:3c:e0:e0:0b:cc:83:72:82:23:f6:
19:1d:0b:f7:d3:7d:e3:0d:b4:79:10:25:a7:68:ea:56:27:3e:
98:49:79:ac:87:42:46:ea:f3:63:ef:53:15:46:4a:26:eb:f7:
ca:26:e3:cc:18:d2:3b:89:a6:81:0c:0b:ae:d7:9a:88:95:c9:
c6:d4:bd:b2:9e:99:6f:67:54:3f:45:cf:dd:99:70:1f:f6:f7:
07:1e:4e:59:cf:aa:cb:6f:23:a2:57:66:e2:15:77:d0:94:ea:
d1:2c:db:81:e1:68:71:f6:57:3a:15:83:5f:0b:c0:40:89:21:
ae:db:aa:f6:c3:a3:9f:1c:82:ae:75:51:5f:8b:20:a7:ad:ba:
70:e1:d4:f7:30:2d:3a:9c:cb:49:bc:b8:3b:52:42:94:7b:28:
e9:e5:c6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 10:41:35 2026 by rpki-client