
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce564ce-869e-35c2-acd3-22242e71edce.roa
File: 3ce564ce-869e-35c2-acd3-22242e71edce.roa (raw, json)
Hash identifier: 8XypMsBkS+Yfl36ClzVDbku079+awUPu8OQ9n2zEt+Q=
Subject key identifier: B7:83:19:33:5A:A8:77:35:35:9B:87:34:3E:F6:F2:C0:99:C9:98:78
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC5362350ED3A29CC17C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce564ce-869e-35c2-acd3-22242e71edce.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.62.84.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:53:62:35:0e:d3:a2:9c:c1:7c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ce4210cf-25b0-4079-8a9b-84930eb39b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:af:58:d3:79:db:34:33:6c:30:d7:db:49:5f:
98:44:0d:40:8a:a7:60:78:a7:9c:80:32:c9:dc:0c:
38:b9:23:3c:5f:30:d4:6d:c4:e1:d0:23:77:1f:f9:
95:c4:f2:1c:2c:b6:62:11:8d:d4:17:51:9f:a7:c9:
86:37:15:a7:54:95:bf:48:67:00:0b:cf:36:ca:89:
e5:4f:45:21:c5:3c:55:8c:7b:e7:01:40:2c:8b:be:
2e:b4:0d:6e:08:49:15:e9:38:78:3e:3e:54:52:72:
3b:2e:ef:7f:4c:b5:f4:10:24:39:f5:b1:f4:8b:b7:
c3:1d:b9:c5:c7:63:76:38:43:60:b2:b1:1c:46:00:
1b:89:03:1d:d7:35:07:5b:35:ca:a5:cb:76:98:be:
4d:ea:6b:98:12:b2:30:72:3e:f7:be:12:08:fc:61:
98:20:78:0a:d3:5a:06:6a:f3:b9:84:98:84:11:c9:
2a:43:46:78:1f:90:fb:30:f5:a2:9a:40:27:c4:25:
ae:59:9b:e0:b8:d6:3d:f7:7a:a1:c1:1d:bd:28:a0:
84:bb:f1:81:a2:86:66:39:77:b6:7f:4f:3a:94:b2:
4a:f5:5f:46:cd:19:e5:0a:cf:b2:30:8c:2c:47:fc:
d7:8b:f3:39:27:4a:cb:0a:06:6d:78:9b:bb:af:08:
43:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:83:19:33:5A:A8:77:35:35:9B:87:34:3E:F6:F2:C0:99:C9:98:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ce564ce-869e-35c2-acd3-22242e71edce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.62.84.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ac:bc:fe:f3:06:01:50:fb:8e:19:a7:27:ac:58:b2:b1:db:54:
8a:dd:d6:03:5c:7e:ff:69:45:a1:fc:79:50:04:f0:33:f2:81:
e1:f1:d8:b0:df:5d:66:00:4e:19:81:6b:5c:96:e1:a7:07:28:
7c:9a:6b:24:4a:e1:88:ce:26:a3:cc:4a:9b:7f:03:50:8c:b4:
70:50:99:a2:04:4d:5b:05:a2:18:28:77:58:8e:05:b5:44:89:
0b:1c:e1:5f:08:3a:c8:3c:5a:71:22:0f:f3:2f:d9:eb:09:ea:
8e:0b:d5:1f:fc:33:2e:25:79:8d:2d:d8:29:67:54:09:2a:f4:
04:92:65:b0:3b:96:a9:54:de:0f:23:f5:92:df:92:2c:9e:c5:
2c:34:39:bd:6a:ed:ff:32:40:5b:5a:62:09:9f:65:ec:ab:5f:
a3:91:50:2f:23:61:08:91:51:8b:15:f9:45:78:64:b8:44:00:
65:5a:46:7b:92:6c:2b:88:23:12:69:d4:6a:81:2e:9e:7c:46:
67:51:3c:90:93:1d:b0:22:eb:4d:aa:25:d2:50:59:a4:c6:00:
a9:51:9f:0b:ea:fd:ac:32:10:77:a1:fd:03:ba:53:49:7c:b2:
28:c1:f0:49:5f:86:e0:8a:e2:da:17:29:2a:4d:99:1e:d6:b9:
be:4c:71:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvFNiNQ7TopzBfAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
Y2U0MjEwY2YtMjViMC00MDc5LThhOWItODQ5MzBlYjM5YjlhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkK9Y03nbNDNsMNfbSV+YRA1AiqdgeKecgDLJ
3Aw4uSM8XzDUbcTh0CN3H/mVxPIcLLZiEY3UF1Gfp8mGNxWnVJW/SGcAC882yonl
T0UhxTxVjHvnAUAsi74utA1uCEkV6Th4Pj5UUnI7Lu9/TLX0ECQ59bH0i7fDHbnF
x2N2OENgsrEcRgAbiQMd1zUHWzXKpct2mL5N6muYErIwcj73vhII/GGYIHgK01oG
avO5hJiEEckqQ0Z4H5D7MPWimkAnxCWuWZvguNY993qhwR29KKCEu/GBooZmOXe2
f086lLJK9V9GzRnlCs+yMIwsR/zXi/M5J0rLCgZteJu7rwhDvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLeDGTNaqHc1NZuHND728sCZyZh4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvM2NlNTY0Y2UtODY5ZS0z
NWMyLWFjZDMtMjIyNDJlNzFlZGNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRD5UMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKy8/vMGAVD7jhmnJ6xYsrHbVIrd1gNcfv9pRaH8eVAE8DPygeHx2LDf
XWYAThmBa1yW4acHKHyaayRK4YjOJqPMSpt/A1CMtHBQmaIETVsFohgod1iOBbVE
iQsc4V8IOsg8WnEiD/Mv2esJ6o4L1R/8My4leY0t2ClnVAkq9ASSZbA7lqlU3g8j
9ZLfkiyexSw0Ob1q7f8yQFtaYgmfZeyrX6ORUC8jYQiRUYsV+UV4ZLhEAGVaRnuS
bCuIIxJp1GqBLp58RmdRPJCTHbAi602qJdJQWaTGAKlRnwvq/awyEHeh/QO6U0l8
sijB8ElfhuCK4toXKSpNmR7Wub5McZY=
-----END CERTIFICATE-----
Generated at Fri Apr 17 03:21:36 2026 by rpki-client