
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651fc2ca-26f1-370c-b388-0981fc029af8.roa
File: 651fc2ca-26f1-370c-b388-0981fc029af8.roa (raw, json)
Hash identifier: 48IAtd4o5x4rsCWt5TQUJNZbOdc2q0UcrYQcIeu4yO0=
Subject key identifier: 66:C1:DD:69:18:F0:8B:73:E4:FF:E6:56:94:15:37:80:CB:9B:2B:07
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC46D0CD5A57966FFE16B0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651fc2ca-26f1-370c-b388-0981fc029af8.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.43.4.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:46:d0:cd:5a:57:96:6f:fe:16:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=9faa32e6-d787-4372-a94b-baab6a05e754
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:37:f9:61:71:d2:18:26:05:b3:35:bb:78:22:
d4:1d:bd:7e:04:ad:f5:6b:60:65:bc:36:6a:75:ef:
81:10:da:f6:bd:12:83:81:6c:0c:14:b1:5c:58:fd:
8a:bb:8c:72:02:02:16:49:b0:c6:61:b1:7d:8a:eb:
41:16:d0:e3:cf:38:23:55:91:b2:7a:7a:96:51:53:
e8:20:64:6a:93:19:df:8b:42:61:1e:42:67:5a:d5:
eb:ad:d7:33:bc:da:5f:75:37:97:1d:2a:9e:84:e0:
74:5b:69:32:58:3e:f5:15:4f:ac:1b:9c:b7:fb:85:
ed:fe:0f:d5:d8:07:f8:f0:6c:4a:d6:18:d6:94:21:
f1:82:0c:e6:65:f1:84:00:fe:22:c4:39:26:1a:3b:
73:0a:62:8d:a2:1f:87:31:52:b1:1e:7a:a3:7d:b6:
f3:9b:24:8a:be:fa:8d:a2:e3:27:24:9b:39:ad:dd:
5e:e8:eb:40:29:73:9a:75:71:2b:0a:24:d9:32:72:
08:40:35:54:d5:97:00:72:eb:c7:2d:13:41:b9:e7:
f2:61:14:86:32:8a:b5:8c:68:c5:f2:1f:ad:ab:3c:
bc:67:eb:69:2c:9b:ba:10:f4:f4:0b:cf:73:06:32:
32:b5:a8:79:3e:2c:7e:fd:cd:0a:42:91:28:71:c0:
4f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:C1:DD:69:18:F0:8B:73:E4:FF:E6:56:94:15:37:80:CB:9B:2B:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/651fc2ca-26f1-370c-b388-0981fc029af8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.4.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:12:00:94:77:bf:d6:24:08:c9:4e:e5:54:d6:8d:cf:49:af:
a3:45:0a:02:eb:78:00:86:8d:e2:39:9e:87:81:6b:90:fb:5b:
d4:11:16:ba:5b:68:eb:19:31:f3:ad:35:77:77:a9:b2:9b:41:
96:b2:37:42:2a:a0:19:8f:c2:f5:30:57:08:a3:36:31:29:40:
8e:2f:d4:4b:4d:33:72:e0:2e:f3:0c:eb:e0:52:11:b2:4a:3f:
85:78:4c:31:08:da:7d:42:f4:b5:b2:a2:8f:68:52:4a:44:2c:
36:32:a5:a4:c9:99:e1:0c:dd:1d:31:2d:79:30:31:5f:a4:b5:
db:80:56:09:a0:db:14:21:80:13:67:68:17:aa:86:ff:d4:c6:
a9:e9:20:e1:15:5b:85:09:0c:5b:23:03:63:b0:da:18:86:31:
60:a9:ac:a6:09:8d:59:39:3d:ab:28:ff:d3:0c:a9:c2:3d:d7:
1f:a6:45:21:37:19:3b:0d:a7:4a:2b:b2:49:6e:2c:ee:e1:55:
be:ba:63:fb:e0:a7:46:dd:da:f0:bd:9c:ba:76:9b:88:37:0c:
c1:60:6f:1f:91:28:e3:26:ce:fa:9e:bb:b4:41:7d:ed:d7:e1:
13:b2:14:7f:da:10:fe:0c:ec:a1:e0:fc:96:cd:bd:48:02:45:
1f:99:d7:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvEbQzVpXlm/+FrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
OWZhYTMyZTYtZDc4Ny00MzcyLWE5NGItYmFhYjZhMDVlNzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnTf5YXHSGCYFszW7eCLUHb1+BK31a2BlvDZq
de+BENr2vRKDgWwMFLFcWP2Ku4xyAgIWSbDGYbF9iutBFtDjzzgjVZGyenqWUVPo
IGRqkxnfi0JhHkJnWtXrrdczvNpfdTeXHSqehOB0W2kyWD71FU+sG5y3+4Xt/g/V
2Af48GxK1hjWlCHxggzmZfGEAP4ixDkmGjtzCmKNoh+HMVKxHnqjfbbzmySKvvqN
ouMnJJs5rd1e6OtAKXOadXErCiTZMnIIQDVU1ZcAcuvHLRNBuefyYRSGMoq1jGjF
8h+tqzy8Z+tpLJu6EPT0C89zBjIytah5Pix+/c0KQpEoccBPTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbB3WkY8Itz5P/mVpQVN4DLmysHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNjUxZmMyY2EtMjZmMS0z
NzBjLWIzODgtMDk4MWZjMDI5YWY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCsEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADISAJR3v9YkCMlO5VTWjc9Jr6NFCgLreACGjeI5noeBa5D7W9QRFrpb
aOsZMfOtNXd3qbKbQZayN0IqoBmPwvUwVwijNjEpQI4v1EtNM3LgLvMM6+BSEbJK
P4V4TDEI2n1C9LWyoo9oUkpELDYypaTJmeEM3R0xLXkwMV+ktduAVgmg2xQhgBNn
aBeqhv/UxqnpIOEVW4UJDFsjA2Ow2hiGMWCprKYJjVk5Paso/9MMqcI91x+mRSE3
GTsNp0orskluLO7hVb66Y/vgp0bd2vC9nLp2m4g3DMFgbx+RKOMmzvqeu7RBfe3X
4ROyFH/aEP4M7KHg/JbNvUgCRR+Z19M=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:21:37 2026 by rpki-client