
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6490f0db-c6a7-3d15-901a-cb66d9389008.roa
File: 6490f0db-c6a7-3d15-901a-cb66d9389008.roa (raw, json)
Hash identifier: kCTn9puenCuAxRyvS7xagfKCAsbxco1DxZb90CyyQE8=
Subject key identifier: E1:34:13:2C:1E:76:28:3D:FC:CF:1C:01:24:51:5E:3B:24:D5:D0:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB14981EB1A660367B2120
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6490f0db-c6a7-3d15-901a-cb66d9389008.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.43.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:14:98:1e:b1:a6:60:36:7b:21:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=264118b7-ab43-4f5f-bb03-9360f9a31a61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:6c:c7:34:f3:d6:ba:fd:3b:3c:96:0f:02:8d:
9b:59:42:1b:ca:bf:3a:a4:99:cf:d8:43:bd:b4:07:
5f:24:8c:1a:ef:56:99:04:76:e0:cb:4b:98:b0:32:
2a:b4:0b:a3:58:6c:d6:dd:4e:cd:19:95:43:02:5c:
85:45:48:02:5f:7b:dd:18:b4:9a:9b:e2:89:bd:5e:
02:81:33:b9:f4:f9:0e:36:10:86:e4:02:c0:91:b8:
e6:e2:b8:ba:e3:d4:aa:e4:80:c2:c9:bf:ae:4f:54:
e6:a5:d1:38:82:36:de:03:c4:15:3d:74:3a:e0:99:
6b:69:6b:c3:3d:f1:83:8e:16:36:38:cb:d5:3e:03:
39:16:b6:5d:16:5a:99:16:2a:dd:a6:b3:7c:76:b0:
6d:7a:d2:61:e0:38:d3:d4:a5:24:46:ab:8e:a5:cf:
75:3c:be:51:17:8b:65:bb:04:ea:cb:6f:1d:88:f6:
41:e2:03:3d:4a:a4:e4:db:b2:1f:ae:21:2c:c7:d6:
1a:0a:1a:76:87:65:5c:d7:83:3b:15:17:42:1b:af:
cc:55:38:11:0a:83:15:3c:18:a0:74:70:25:c0:89:
c8:80:54:9c:b6:3e:e6:8a:63:6e:aa:49:c4:48:57:
26:eb:3f:b9:23:b0:a8:c4:84:6b:6c:df:97:8f:84:
cc:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:34:13:2C:1E:76:28:3D:FC:CF:1C:01:24:51:5E:3B:24:D5:D0:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/6490f0db-c6a7-3d15-901a-cb66d9389008.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:43:76:ef:7b:c7:41:9f:e2:ee:53:26:3e:17:94:65:9d:f6:
49:3a:85:a8:b3:9f:74:2a:c6:bc:cc:ef:e0:f2:fa:98:c3:c1:
aa:0e:cb:c9:5b:d8:18:2f:29:fc:7c:ae:dd:ac:1f:51:e9:bd:
51:75:f0:3b:43:5b:94:b0:c8:95:98:b8:65:f8:ac:99:43:55:
4b:cd:f5:0a:3e:98:fd:03:e4:50:74:ac:c5:4b:b9:dd:6c:5d:
20:11:9a:b7:aa:d5:83:ec:51:e9:38:d4:fa:0f:92:2e:cd:3a:
2a:11:0e:cc:a5:0d:0d:57:73:1e:89:a6:0b:fe:ba:a7:c0:cd:
1e:3c:b1:7a:a8:7a:11:32:2d:fb:4c:02:a2:7d:fc:5e:f3:c5:
33:5c:2e:b7:e3:8b:70:4a:e8:72:e6:6c:35:18:b5:8b:5d:2e:
82:e7:26:81:37:96:97:08:a9:f5:43:89:44:2a:d7:d8:27:aa:
27:89:60:29:93:32:3a:10:2c:74:51:bd:6a:f4:12:1e:3e:fc:
31:48:95:3e:bc:c0:51:02:e3:05:c4:6a:e7:c5:6b:4d:80:2b:
65:dd:c8:c3:38:9f:79:35:1b:4a:5c:e1:27:76:c1:fd:d6:6a:
ee:17:10:53:be:ee:71:cf:e7:dc:cd:b1:4d:31:fd:21:83:cb:
01:9b:1d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:00:36 2026 by rpki-client