
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa
File: 7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa (raw, json)
Hash identifier: HNIs7umu2xBa8zICZO7jmgtyoDG06M6f9XioX4Wd394=
Subject key identifier: 72:35:DB:1D:52:DA:49:C8:82:16:6E:8A:4A:BB:E9:B3:4D:22:60:2F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC4170F6BEB2302AA07260
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.40.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:41:70:f6:be:b2:30:2a:a0:72:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=81d0b81a-9879-4efc-96fd-5bd66357874f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:2a:13:47:75:8b:85:c7:62:77:3b:8f:13:d7:
90:0d:a2:ef:e4:f8:e1:09:00:65:d4:03:65:61:6a:
81:c7:41:e6:c1:f0:6c:8c:73:13:09:b5:b3:7d:74:
37:b3:42:b0:1f:46:9e:a4:b8:5f:db:8e:52:d0:c9:
b8:89:75:ce:3d:a5:05:8c:e8:06:82:83:aa:8b:39:
df:12:0b:20:1f:05:13:bc:05:25:0d:11:70:f3:87:
2b:c5:b9:a9:59:c1:ab:54:dd:1a:cc:ee:f6:52:53:
e7:52:2e:e6:fd:e9:b7:04:87:4f:7f:5e:8b:ca:d4:
10:3b:2d:bf:94:cd:b6:5c:e8:f7:a2:40:1b:c2:e6:
b7:7d:f6:85:0e:80:5b:89:97:fb:b7:71:41:b2:ae:
dc:c8:9d:42:cc:82:4e:dd:d1:32:36:20:4f:9e:71:
f1:a5:5b:cf:62:9f:f5:f5:36:53:4b:2e:b3:0a:69:
be:c0:19:51:a0:9e:90:49:4c:b1:1e:6c:93:6d:c4:
c8:08:c9:e0:04:01:7e:ae:99:68:95:c5:5e:a1:6c:
6f:d0:9d:d0:d3:d8:18:41:6c:60:51:59:c7:6d:6c:
67:5f:5c:d2:38:14:88:a7:ae:58:ab:50:6c:bd:71:
5a:a5:50:a8:ce:dc:29:58:8e:63:c5:b0:17:17:62:
28:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:35:DB:1D:52:DA:49:C8:82:16:6E:8A:4A:BB:E9:B3:4D:22:60:2F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7a4f4434-fd1a-3c55-a16d-c0e422accb28.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:63:60:e2:d5:c6:89:b8:af:c4:b9:de:1f:cf:f6:59:2b:21:
ab:5d:3b:96:bd:09:4a:8a:e9:b7:95:da:73:bb:d5:dd:c5:da:
54:5e:2d:02:54:19:2d:e6:d3:33:aa:64:ff:9d:07:33:1a:5d:
40:47:66:96:cf:c6:5b:ac:e9:da:5f:21:fb:06:6f:c5:a7:f9:
44:e8:29:1f:18:73:91:c1:ad:0c:13:c7:b5:75:60:95:38:e8:
2e:a0:1a:0e:cf:82:fa:77:e5:00:00:96:e2:fd:4e:c9:8f:77:
c2:6a:bd:2e:88:17:a4:57:9b:59:15:0a:85:b1:da:29:93:b0:
a8:da:44:7d:5f:72:ac:5b:00:29:94:6e:b8:b0:a9:1d:70:c8:
ae:ee:60:37:de:3c:c2:dd:db:fb:2b:50:00:75:f8:b7:92:73:
e2:8f:a1:e6:87:13:26:a4:6c:a7:44:de:d8:ed:e9:4e:a7:f0:
86:e4:8d:80:4c:75:c3:b2:24:21:49:47:b4:99:a0:43:de:19:
2e:26:ec:b1:01:7d:be:80:8f:e5:bb:52:3f:43:70:44:b5:4e:
52:f5:d4:c1:33:64:3a:3a:ec:2e:f9:6b:7b:3a:83:d0:82:e7:
57:55:e1:23:fd:11:35:bf:68:55:f5:1f:35:3d:64:8b:2c:61:
64:7d:b1:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:42:18 2026 by rpki-client