
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41a90356-5d66-3dae-a38c-ae60f1a33907.roa
File: 41a90356-5d66-3dae-a38c-ae60f1a33907.roa (raw, json)
Hash identifier: ix6mLxpTsBmNaColUFTjUsSycOGMnrm+vNd6U6I4DtA=
Subject key identifier: E5:8B:50:7C:57:5B:6B:30:8E:A9:1F:01:B3:C1:46:BB:11:F2:4F:72
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE87C9E59711D80AB61CDD80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41a90356-5d66-3dae-a38c-ae60f1a33907.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 33491
IP address blocks: 68.59.160.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:87:c9:e5:97:11:d8:0a:b6:1c:dd:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=ec33fd23-4f4f-4c32-8f89-ee1a311f3ca5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:04:37:46:ad:13:cc:30:98:2b:67:02:ef:5b:
22:20:7a:0b:29:9a:64:37:6e:b6:83:4b:16:25:6a:
64:33:b7:49:d1:3e:5d:8b:3b:93:72:d3:94:2d:2b:
01:78:4d:68:bd:cd:ad:79:f2:1e:16:3b:1e:c0:5b:
91:dc:59:65:a8:d8:f2:0c:d4:00:3b:b1:5b:1f:89:
c2:f5:2c:e8:a1:d5:c7:a7:da:cc:3c:fa:42:ba:b3:
20:ff:c2:3b:9f:05:c8:03:ee:70:b4:09:72:c9:0b:
b7:33:c9:7e:9b:2c:5c:27:69:9e:bd:08:f0:8b:16:
cf:21:29:87:88:cf:76:79:38:58:6a:b1:63:bc:c0:
a1:50:54:69:cf:df:9a:7e:79:ee:5f:9d:17:82:ca:
5b:4f:4c:ec:05:b4:73:78:2f:3a:fc:45:f3:ab:5e:
30:e6:2e:81:b6:48:b8:ff:90:1f:ff:18:99:34:fe:
ba:f1:8f:44:f7:dd:32:e6:de:23:75:22:35:fc:19:
4e:4d:cc:80:3f:48:e8:0b:66:64:a5:cb:07:04:c8:
07:90:85:f4:36:b7:bf:ab:1a:77:ee:e2:a5:70:28:
a2:cf:2f:f9:f0:00:80:cc:b4:42:5d:8f:4b:51:18:
b8:ac:74:e1:dc:db:53:9c:f9:ee:ae:bf:cc:c4:38:
aa:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:8B:50:7C:57:5B:6B:30:8E:A9:1F:01:B3:C1:46:BB:11:F2:4F:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/41a90356-5d66-3dae-a38c-ae60f1a33907.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.59.160.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a0:6b:86:53:a2:05:13:55:4f:8a:bf:8a:89:06:89:6e:0d:e1:
83:11:d4:8f:cd:25:81:3f:c5:b9:65:81:3c:73:29:11:4f:d9:
08:b6:15:4c:53:0c:c8:9d:aa:88:e8:95:92:36:0e:2c:b2:5b:
0e:8c:f1:76:91:23:f1:b2:96:2f:a9:a4:d1:ee:c6:1b:05:0b:
ca:7b:ca:f2:a1:72:d8:59:c0:c5:92:8f:33:5c:06:89:ed:6e:
f0:97:a3:c6:d6:bb:d6:81:13:91:d4:6a:3f:b0:0d:ae:d7:2e:
8f:a8:8a:1d:cf:a9:1b:20:3f:5e:9d:64:88:11:ed:13:bc:f8:
82:c2:86:60:64:aa:1e:ca:da:bd:1d:91:cd:20:76:83:c5:7e:
1b:35:ab:60:c6:bf:91:5d:18:2b:02:d2:31:06:20:44:56:86:
85:6f:f0:80:3a:e8:84:3d:50:f4:14:5a:b1:86:a4:ca:3b:83:
07:7e:6c:f4:ca:19:27:d6:0d:f1:69:ee:6c:77:e2:47:22:92:
57:f8:fd:a7:65:c2:cd:53:a6:82:1a:1a:b1:5f:34:79:da:36:
ed:08:d7:5f:e1:36:95:c6:35:ee:be:85:00:f8:c5:73:ac:c6:
02:11:7b:a2:16:c1:73:fe:e2:9d:e9:9b:93:bb:02:9e:ee:49:
0a:c9:bc:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:43:56 2026 by rpki-client