
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34f299fa-235a-3113-8368-a7809bfbc5cd.roa
File: 34f299fa-235a-3113-8368-a7809bfbc5cd.roa (raw, json)
Hash identifier: f4fOsbFEINeg1KHSTB5jtuL++r+Xg64MTFwdxiPgB7Y=
Subject key identifier: 03:93:51:D1:FD:A1:51:9A:48:1E:1D:10:B1:F4:F8:06:58:9A:B3:CC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC464AE82A08416179C580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34f299fa-235a-3113-8368-a7809bfbc5cd.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.43.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:46:4a:e8:2a:08:41:61:79:c5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=e3af418f-e78d-4217-9ea7-516ced1e8516
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:ef:29:a9:93:1e:f2:8d:05:12:ef:c5:74:ee:
e4:07:07:1a:bf:37:61:22:8a:42:a2:a6:22:ab:37:
be:77:1a:89:ae:42:32:ff:5e:d2:12:da:37:b5:73:
23:f6:51:e3:dc:d0:4e:15:7e:d6:57:d2:5c:97:06:
4a:30:de:f5:14:be:5d:19:03:2d:1f:af:ba:2b:13:
5c:5d:6d:19:90:63:a7:2d:e4:b5:9d:23:68:f1:a9:
77:a6:3c:12:e8:b8:ca:59:88:22:85:0f:05:ad:36:
57:93:15:9e:ae:41:6a:f0:1b:8f:d6:b8:d2:f0:16:
5e:39:ad:96:1f:14:92:98:80:54:7c:86:05:5e:11:
5f:3e:c6:57:9a:93:3a:6e:42:e9:43:09:97:bb:cd:
2f:b2:09:f3:4c:47:6c:e0:19:1a:d1:01:39:82:b8:
61:e7:c8:6c:3e:d5:dd:71:29:c5:5c:ef:a0:5a:d6:
78:5b:84:e2:31:98:16:76:be:00:95:b8:ad:0b:52:
e1:ad:fd:01:bf:d3:63:44:a4:cb:7b:de:c4:3d:5f:
27:3f:5b:37:10:45:84:8b:83:35:5a:02:39:cc:c2:
8e:a7:88:f6:28:2a:9f:07:f0:39:41:a8:58:0c:0b:
28:2e:07:44:39:7c:c6:69:36:08:fa:10:c6:41:fa:
cd:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:93:51:D1:FD:A1:51:9A:48:1E:1D:10:B1:F4:F8:06:58:9A:B3:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/34f299fa-235a-3113-8368-a7809bfbc5cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:67:27:01:a0:ac:25:70:f4:fc:4e:d8:f6:4c:f7:47:8f:6d:
3a:82:3a:7f:aa:55:4f:d0:59:94:b4:09:df:76:c8:85:1e:8a:
41:70:5e:15:5c:6d:4f:57:2c:4c:39:9f:fb:45:47:a4:e3:4b:
d1:3d:3a:14:e8:ca:11:a8:25:91:24:ea:62:c9:f2:d8:f1:92:
64:53:96:7a:ee:82:bc:91:01:bd:a8:79:e1:7e:44:40:c7:b5:
8e:6f:42:f9:c1:36:31:6c:f6:09:17:87:ac:28:9f:da:7f:fb:
7b:2d:a4:8c:7d:6c:15:3f:6e:3a:a9:ed:b6:3c:3b:63:f3:33:
4f:9f:53:3d:8e:7a:bf:28:97:e6:2d:2f:81:b3:68:c1:c4:09:
41:59:66:37:38:ae:f7:2d:ba:a9:55:67:86:ea:dc:9b:5f:be:
45:6e:3b:de:d4:8a:a8:a4:0c:6f:3b:27:9a:93:5f:c5:78:09:
a8:df:59:ee:7c:45:ee:f4:c4:58:93:b4:fe:0b:f0:ab:04:e3:
65:7e:f8:c3:20:7a:cf:0e:b6:54:92:c4:ea:50:95:8c:5f:05:
f4:41:8c:55:d1:4d:90:e6:96:cb:27:d1:a9:bd:15:ec:73:cb:
b4:02:9e:ac:76:5c:49:64:ae:65:ca:0b:48:40:ad:e3:f2:eb:
b9:6b:3d:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:14:26 2026 by rpki-client