
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b85044c-2591-3341-931f-2c7b6e428aaf.roa
File: 4b85044c-2591-3341-931f-2c7b6e428aaf.roa (raw, json)
Hash identifier: LIPoWxZkOrm71tnbFXoqidmcFvBjh14jmJeKKH9lsfs=
Subject key identifier: 06:BF:19:74:68:B3:6D:BD:B0:4A:80:14:0A:9A:83:0C:AC:2B:49:1D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC5378734308E3F4150A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b85044c-2591-3341-931f-2c7b6e428aaf.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.62.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:53:78:73:43:08:e3:f4:15:0a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=2f931c85-60a1-4368-bf53-21b1c49d203b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ab:68:c3:51:47:91:0c:25:ec:02:9f:d7:c2:
82:dd:21:bf:7e:80:15:21:32:0b:b6:f2:10:51:16:
60:97:a4:f6:ea:f8:e8:f1:04:bd:af:a6:b1:d8:b4:
cd:3f:b3:6a:41:17:f4:7a:04:b9:eb:9c:d7:97:8d:
56:53:35:76:fd:fb:3b:f4:86:42:ee:00:5c:7a:ce:
74:ac:d5:db:c3:19:12:fb:0e:40:50:ed:95:ca:39:
2a:07:b5:d6:87:12:b6:5d:1d:0d:4c:6f:7d:eb:51:
f1:5d:da:ca:1e:71:e3:e4:d3:fc:39:41:50:00:d7:
de:3e:86:48:c9:15:0a:94:21:66:5f:0d:da:c7:63:
50:60:84:3b:a3:93:4d:9e:da:a5:26:8b:db:b1:fc:
1a:2b:69:73:62:60:b5:75:33:fd:8a:cd:4a:14:04:
51:ad:62:4b:e4:03:3e:89:3a:9a:61:24:6a:36:9c:
a0:00:1b:64:d7:4e:f8:42:e0:3c:74:0f:20:46:86:
c1:6b:b0:b5:70:4f:14:cf:da:f4:70:b4:1b:b7:3d:
d8:f1:a3:06:e9:66:41:f5:1d:ce:24:f2:e7:98:db:
fa:bf:45:0d:75:49:9c:28:45:7b:fb:61:f9:4b:fc:
85:46:ca:52:26:49:db:80:17:3b:1e:d4:cc:09:25:
37:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:BF:19:74:68:B3:6D:BD:B0:4A:80:14:0A:9A:83:0C:AC:2B:49:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4b85044c-2591-3341-931f-2c7b6e428aaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.62.96.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:89:72:74:22:44:37:7c:ec:6a:4d:dd:46:6e:80:32:34:b5:
37:dc:a1:4c:fb:48:0b:0a:11:8c:83:22:72:8b:74:7b:6b:25:
d8:d2:37:d6:b6:90:df:e1:48:c1:d2:62:9c:aa:62:50:73:49:
0c:0e:93:67:c6:63:22:ba:66:74:55:9d:e0:ca:d9:3e:f0:31:
f3:7e:74:09:35:c5:ce:f7:86:82:21:ac:8f:4f:4a:b6:55:01:
c0:b9:84:e3:ef:70:02:4f:80:e8:58:15:d5:3f:91:fe:46:51:
6e:f0:f6:8c:e3:c4:e3:4f:a3:3e:e6:d7:b6:7c:be:e0:76:fb:
cd:69:8a:30:98:64:fd:32:b9:a2:01:ec:dc:e4:22:4c:65:95:
0c:dc:73:7f:58:63:0a:2e:26:e7:b9:d3:f1:b5:ab:c0:35:e6:
f7:8c:77:c4:0a:96:35:7a:a7:4f:6e:4f:ea:b4:ab:f4:5b:62:
f3:26:fc:fe:41:ac:0c:ae:20:01:cf:a4:51:be:68:bc:97:8e:
5c:44:c3:ed:9d:a8:8c:56:3e:bd:5e:58:7d:70:63:9f:50:5d:
22:1f:d0:79:30:21:ba:25:29:14:a9:fa:b5:25:d1:38:65:40:
fb:e9:7c:9f:60:ee:f9:29:97:29:aa:78:6a:00:b3:00:28:6c:
b8:0e:2f:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvFN4c0MI4/QVCoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MmY5MzFjODUtNjBhMS00MzY4LWJmNTMtMjFiMWM0OWQyMDNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApqtow1FHkQwl7AKf18KC3SG/foAVITILtvIQ
URZgl6T26vjo8QS9r6ax2LTNP7NqQRf0egS565zXl41WUzV2/fs79IZC7gBces50
rNXbwxkS+w5AUO2VyjkqB7XWhxK2XR0NTG9961HxXdrKHnHj5NP8OUFQANfePoZI
yRUKlCFmXw3ax2NQYIQ7o5NNntqlJovbsfwaK2lzYmC1dTP9is1KFARRrWJL5AM+
iTqaYSRqNpygABtk1074QuA8dA8gRobBa7C1cE8Uz9r0cLQbtz3Y8aMG6WZB9R3O
JPLnmNv6v0UNdUmcKEV7+2H5S/yFRspSJknbgBc7HtTMCSU3YwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAa/GXRos229sEqAFAqagwysK0kdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGI4NTA0NGMtMjU5MS0z
MzQxLTkzMWYtMmM3YjZlNDI4YWFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARD5gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHyJcnQiRDd87GpN3UZugDI0tTfcoUz7SAsKEYyDInKLdHtrJdjSN9a2
kN/hSMHSYpyqYlBzSQwOk2fGYyK6ZnRVneDK2T7wMfN+dAk1xc73hoIhrI9PSrZV
AcC5hOPvcAJPgOhYFdU/kf5GUW7w9ozjxONPoz7m17Z8vuB2+81pijCYZP0yuaIB
7NzkIkxllQzcc39YYwouJue50/G1q8A15veMd8QKljV6p09uT+q0q/RbYvMm/P5B
rAyuIAHPpFG+aLyXjlxEw+2dqIxWPr1eWH1wY59QXSIf0HkwIbolKRSp+rUl0Thl
QPvpfJ9g7vkplymqeGoAswAobLgOL1U=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:27:58 2026 by rpki-client