
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28616b6c-12db-328b-bc03-4d536c67f930.roa
File: 28616b6c-12db-328b-bc03-4d536c67f930.roa (raw, json)
Hash identifier: D/EgVotI/8u4m7qX+kkVMxhbZz43tIXdoCqsaECBJNA=
Subject key identifier: 61:2E:B3:25:8F:02:B3:B3:ED:E2:13:95:C4:C5:33:6E:5D:81:AE:01
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BBB7D8E263ACB99E126F00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28616b6c-12db-328b-bc03-4d536c67f930.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 7015
IP address blocks: 174.168.68.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:b7:d8:e2:63:ac:b9:9e:12:6f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=e09ef8d4-f0f7-4074-ad78-24335bac417c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:05:59:5b:7b:e8:43:8a:d2:1c:21:4f:4f:
c5:c6:e3:01:c2:8e:d3:27:c6:d8:9e:2b:a0:1e:ae:
b6:2f:e1:03:f4:0b:6a:c0:73:06:b9:25:86:7f:26:
9f:5a:88:d4:d5:16:75:38:a6:14:eb:4e:30:bf:ab:
38:42:39:3b:09:98:45:aa:bd:e8:5e:d0:57:f9:e2:
d7:e5:d3:ed:fc:bb:d6:bc:0f:34:d6:27:c8:93:c4:
2d:f8:45:3d:2a:f0:6f:36:bb:20:4d:73:7f:5e:67:
29:5b:e8:45:0f:27:63:a5:fc:55:a5:a7:0f:9a:cc:
51:e6:be:ab:de:c4:01:ef:29:a0:1a:f4:7e:8d:28:
e2:e5:0f:02:9d:35:83:77:fd:6c:7e:0a:58:48:50:
d4:6d:b2:86:ca:30:b6:2f:b6:90:66:79:e2:b2:32:
d1:fe:13:f2:a5:84:f7:35:0c:51:48:e4:76:2d:80:
8b:ab:6e:67:2c:f9:a1:c4:5d:cd:ca:ee:4d:25:5f:
0a:78:7d:83:f6:77:64:12:76:00:75:2b:86:42:99:
a5:6f:d0:f3:ea:f6:26:8b:fb:4d:a2:3c:be:5f:ff:
41:da:0b:7a:58:54:24:db:50:7e:1a:e3:8a:7c:4a:
4e:7f:37:eb:d3:35:92:76:01:24:13:06:87:9c:df:
03:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:2E:B3:25:8F:02:B3:B3:ED:E2:13:95:C4:C5:33:6E:5D:81:AE:01
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/28616b6c-12db-328b-bc03-4d536c67f930.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
174.168.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:22:bb:4f:ec:d5:88:03:d2:bb:bc:2a:6f:31:92:4a:96:6f:
0b:db:79:fe:68:d8:9d:60:30:bc:69:32:78:22:23:c3:7f:f6:
a6:c9:d6:12:24:e6:77:50:80:24:b7:52:59:99:6c:26:c3:ca:
06:6f:ab:ee:f5:18:ca:f8:24:2e:39:7e:d2:9a:da:cf:be:0c:
eb:f2:ea:3a:d7:05:94:4e:7c:2f:61:46:a1:14:50:81:c1:e4:
37:59:99:5d:3f:3c:bd:6d:e2:89:ee:d6:5e:55:80:b8:2a:26:
43:6d:1d:bb:3c:9d:48:80:c3:5a:6a:4f:97:38:39:ce:7e:f2:
4b:de:76:13:e1:b1:6d:c6:65:07:61:1b:61:c8:96:1a:3b:b7:
31:4a:ba:3d:6e:51:bb:95:e7:fa:a4:e7:0a:fd:dd:49:b3:1c:
ff:49:45:a6:7c:cb:ef:38:e7:09:4c:71:cc:0a:77:23:7d:5b:
23:d2:8b:a3:f6:db:d2:0d:08:9f:f2:6e:93:59:55:74:3d:b4:
33:08:37:50:d6:f8:48:37:f2:82:f2:c6:aa:8b:14:7b:f5:e1:
4f:2e:09:fe:30:15:fd:8c:98:cb:43:06:fc:6c:ce:f6:84:19:
c0:40:d2:cb:30:d4:20:a4:a1:5a:7c:3d:1d:82:a5:1d:ff:1c:
b1:75:35:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:53:48 2026 by rpki-client