
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39e70688-4fe6-3aac-9671-0399ec1ff7a1.roa
File: 39e70688-4fe6-3aac-9671-0399ec1ff7a1.roa (raw, json)
Hash identifier: DOFYYF+hxfLDSZAcQ57IF5e/gkLG8pV4nNNGvaK6sxE=
Subject key identifier: 86:0A:78:7C:2A:A7:D7:FF:35:DD:16:FD:9E:51:8D:A6:A2:20:DA:F0
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB162E29D4778D2A386B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39e70688-4fe6-3aac-9671-0399ec1ff7a1.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.48.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:16:2e:29:d4:77:8d:2a:38:6b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=dafa7a95-ea20-4ada-973d-22dadffcd8f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6b:2c:a0:78:8a:af:a9:00:76:41:f0:6f:0b:
d1:b5:99:48:d1:32:65:06:a3:42:03:9e:d1:25:46:
27:b6:f8:15:43:a7:5e:91:36:7a:ba:b9:cd:97:8e:
43:63:de:fd:40:c8:6d:81:98:db:d1:f8:59:70:b9:
5d:57:89:3a:e4:43:a3:f4:fc:9b:b5:69:4f:17:c1:
df:3e:8a:b3:ad:be:9e:2e:a3:0c:27:3d:a3:de:bf:
da:4d:03:bf:f4:05:cc:9b:57:09:62:da:70:4c:d6:
46:dd:cc:3b:b7:63:8d:13:06:3e:b3:9c:a4:63:35:
2b:5d:ee:66:4d:66:4b:98:3e:02:18:43:82:50:97:
f3:39:ad:a0:4d:86:e5:2c:c5:d9:ea:2f:8c:ba:78:
de:2a:7b:3e:6d:7e:d2:3d:3c:7a:1b:a4:79:08:85:
e5:0a:4b:2b:9c:c5:6d:d3:4f:d3:11:dd:8c:57:f6:
cb:af:c0:3a:d6:8c:55:90:86:af:4e:32:a3:6e:d6:
ef:85:bb:bc:d3:a9:c3:2e:6f:96:12:55:3d:2a:fe:
63:27:b6:4b:e0:0b:30:76:a8:55:e2:00:10:d2:19:
0c:ad:08:f1:94:14:7e:0a:98:56:60:2a:af:86:b5:
2f:1e:3c:e9:79:2f:9d:40:72:18:9d:42:ac:5a:36:
de:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:0A:78:7C:2A:A7:D7:FF:35:DD:16:FD:9E:51:8D:A6:A2:20:DA:F0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/39e70688-4fe6-3aac-9671-0399ec1ff7a1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.48.143.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:70:e5:5d:01:d1:bf:32:ca:08:73:7e:36:a7:95:8a:84:b2:
40:b2:5c:0c:3f:d4:53:81:6b:30:bf:b3:d9:4e:e6:1d:b2:bf:
2a:b0:aa:03:43:90:7c:af:08:f0:03:c4:40:91:29:72:df:51:
8d:a0:aa:ff:59:42:06:e9:1f:8b:be:41:3d:0c:46:e0:c2:7c:
30:93:3d:52:0c:56:b2:95:7e:f4:76:61:06:b7:0e:3a:57:7b:
88:70:3b:8c:be:ee:65:96:59:d2:06:3b:61:c8:1f:55:3d:5e:
6d:4d:15:26:a1:77:f9:93:c7:4e:b9:7a:0f:20:5c:49:ed:77:
f2:5a:72:23:61:e0:99:fb:02:22:1e:f1:b8:37:39:09:d7:a5:
25:4e:1f:36:2c:69:70:20:3f:65:34:7a:29:4f:c4:7c:6c:0c:
11:f7:78:0d:87:aa:52:75:60:0f:da:00:d4:e6:6e:f0:45:32:
29:2c:09:07:03:12:7b:12:f3:bc:8c:f7:55:29:4f:a7:37:f5:
a9:a4:83:4a:51:34:b7:87:16:3e:62:b0:4e:6f:58:32:2a:34:
11:8a:d6:e3:25:49:4d:0d:9b:d8:1c:c2:7a:a0:26:e9:a4:41:
71:73:a8:44:bd:db:91:60:24:18:11:0c:5b:24:58:7d:3d:ee:
4f:17:96:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:21:45 2026 by rpki-client