
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7640b249-70f3-3015-be53-a50b00076e99.roa
File: 7640b249-70f3-3015-be53-a50b00076e99.roa (raw, json)
Hash identifier: z0Yu9i5WtnONy6SpYCrSYZWsE5JByCjLi2nedHe9WV4=
Subject key identifier: CA:74:58:4A:AA:73:2B:37:45:C7:AB:68:1B:F5:08:1B:81:49:D5:CA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B8FB5D89D10E020600D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7640b249-70f3-3015-be53-a50b00076e99.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.38.176.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:8f:b5:d8:9d:10:e0:20:60:0d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=2d2e2070-a89e-41e5-b278-ac3b4d25f057
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:35:f2:2a:0a:82:a2:62:a9:24:f6:ac:8f:f1:
2e:49:5b:5b:c3:17:90:cb:7a:69:ae:e5:75:d8:92:
fe:40:a2:32:57:04:5f:63:68:44:ae:10:c2:3c:3d:
04:3f:fc:9e:5d:52:ef:d5:b9:ef:38:57:49:a0:21:
f6:0b:f9:2d:d4:ad:8b:8f:ca:6f:44:1f:8d:f9:81:
93:46:24:cf:a7:19:8a:1f:eb:0a:8a:9a:95:e1:05:
82:bb:f2:e3:bf:e4:26:18:07:62:01:33:b6:d2:ab:
92:2e:40:47:84:6a:09:36:49:cf:b3:75:9c:74:e5:
97:1a:ec:88:32:f0:af:c9:ef:7d:6d:56:89:ab:86:
ac:16:bf:81:6a:71:e8:11:4a:ac:46:4d:d5:51:bc:
08:bb:c7:90:45:38:e2:90:7f:97:a7:8e:af:30:3f:
c6:6a:a3:7c:8e:3d:9f:f9:4d:1b:cf:09:f6:c8:99:
33:c7:c1:d1:ea:f7:5c:44:0c:5f:55:1e:0e:1a:09:
75:aa:1a:38:cf:cd:9f:2a:77:db:8d:1a:84:ff:93:
ca:c7:71:f1:69:1c:fb:d7:98:4c:53:17:bc:aa:fa:
a7:73:b0:ef:56:60:68:2b:ec:be:ba:53:08:2b:1c:
2e:89:9f:cb:2d:af:2b:79:8d:c1:76:1f:17:7d:35:
6a:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:74:58:4A:AA:73:2B:37:45:C7:AB:68:1B:F5:08:1B:81:49:D5:CA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7640b249-70f3-3015-be53-a50b00076e99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.176.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
09:4b:7d:4a:a1:9c:40:a3:06:6a:b3:d2:d0:03:e1:ea:4a:9f:
2e:75:fd:54:f6:59:e4:86:06:6b:6e:88:e1:28:e5:d5:69:da:
75:ac:e6:fe:93:b8:67:2c:04:ce:f9:93:04:aa:6c:38:0f:b2:
50:3f:f7:9e:35:38:33:b0:7d:14:3a:88:b2:ee:d1:97:a7:18:
48:42:c8:ab:6b:46:b0:25:c5:0a:96:01:6c:59:27:22:42:9c:
5d:8c:43:c4:e3:ae:1d:ce:3f:99:32:84:a2:68:e3:a3:3e:f3:
ec:89:86:25:8e:0a:01:fa:36:96:da:4c:21:79:e6:18:8e:05:
66:a0:e3:1e:e0:cd:33:55:4e:79:98:69:42:c9:a0:bf:90:b9:
1b:be:0c:91:42:45:55:ab:1b:14:af:c4:f1:5b:d6:1c:ba:9e:
b3:75:47:0f:af:24:b4:f4:d7:4e:17:49:4a:8d:e6:63:81:f1:
48:ab:59:5b:64:29:66:5f:ea:d7:c6:c4:46:d2:a7:8c:a1:c5:
f6:d1:39:60:11:69:db:3c:fb:01:af:04:ba:7a:f2:a4:ff:08:
8b:e0:72:c8:d7:e0:ac:fc:20:dd:a2:d9:89:35:fa:15:d3:b6:
0e:0f:4f:78:61:7e:66:99:ec:f9:de:0c:c3:38:36:44:7a:b1:
70:e9:af:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:07:19 2026 by rpki-client