
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c059902-0a53-3ff8-ace3-06edd18bf678.roa
File: 7c059902-0a53-3ff8-ace3-06edd18bf678.roa (raw, json)
Hash identifier: PuQaRP7ZU0Z2CcH9O+I5eCTE6VHjHNbU1vUBFtF+iBI=
Subject key identifier: 44:4F:5E:65:A6:1A:BE:B4:ED:E9:92:66:22:82:64:7D:12:D4:3E:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE93DB6748E7A29B4489CC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c059902-0a53-3ff8-ace3-06edd18bf678.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 22909
IP address blocks: 68.57.88.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:3d:b6:74:8e:7a:29:b4:48:9c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=9e50f2a2-f095-4d5c-90af-c1cccec5bec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:45:14:2f:e7:46:1d:02:45:cb:c1:4d:b8:6c:
c3:f7:1b:fa:bc:58:13:e4:d0:e0:fa:1a:5c:5f:51:
f7:5b:b4:e5:cb:79:19:33:95:25:94:1c:56:9c:50:
3e:2a:7f:92:00:4e:04:fc:c4:34:cc:85:1e:fb:aa:
7e:a9:09:33:c1:24:92:2c:22:64:19:0d:b7:a3:26:
cb:bf:44:46:d8:78:91:36:c6:33:a4:5c:f8:fd:fa:
b4:a2:f7:f2:e4:d9:1b:45:f4:37:ee:42:60:8c:b4:
1a:eb:53:2b:ce:dc:90:72:88:5d:40:71:bb:fd:e2:
d1:59:45:13:1a:57:de:b9:fc:a9:2a:fc:0c:5c:c9:
ba:55:49:20:94:cb:c2:53:89:51:79:2c:3d:66:4c:
1c:5e:9d:9a:3e:67:0c:47:5a:8c:d4:53:d8:30:36:
07:b1:54:5d:6a:a9:87:8e:35:fc:2e:e8:c5:eb:7e:
af:27:75:95:38:72:69:bf:28:e7:4f:82:5f:6a:9d:
4c:04:73:e8:0f:88:aa:82:6a:0e:52:ff:3f:73:d3:
90:ef:51:98:a6:d5:73:0d:68:e9:f8:03:c8:72:7f:
21:52:1e:de:6b:18:a8:d5:83:e0:85:0d:78:be:69:
bf:af:22:36:e9:12:15:42:cb:c8:5f:33:38:bc:f0:
36:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:4F:5E:65:A6:1A:BE:B4:ED:E9:92:66:22:82:64:7D:12:D4:3E:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7c059902-0a53-3ff8-ace3-06edd18bf678.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.57.88.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:23:d3:7c:da:bb:0c:91:65:94:e4:5f:60:94:6e:12:e6:2c:
58:b0:b6:8f:8f:d1:bf:bb:85:0d:21:f5:84:55:67:4c:67:ab:
44:83:a7:d2:16:c0:15:a7:f8:43:b8:f2:8d:96:c5:c8:d5:08:
9d:73:62:75:39:e1:90:a4:ee:3c:95:6e:7a:7b:93:f8:b8:a0:
04:a7:5e:41:5d:7e:e4:e2:44:ab:20:57:b7:d9:71:4d:8e:6f:
93:12:52:3b:68:f6:2e:fa:df:d2:7f:03:b3:34:68:39:af:61:
89:f9:1e:17:d4:08:cf:4c:f9:1d:79:27:b9:fb:82:b1:92:d8:
09:9b:df:27:bc:e3:c1:76:14:f5:cf:75:7b:5a:46:95:30:92:
24:f8:37:91:78:24:8b:be:64:97:c3:71:24:a9:7c:3d:e7:2b:
b0:0a:5e:bd:85:9e:a6:55:03:2a:47:be:6d:85:e1:1d:9e:f2:
e6:f8:94:83:78:a3:a5:b8:67:90:0f:ac:4e:8e:c8:7e:bd:10:
60:82:8e:34:1f:06:99:51:b4:63:21:f5:00:d4:69:fa:cd:99:
2c:91:15:f6:0f:b7:87:b6:69:8c:33:0c:0d:ff:59:9c:d3:84:
69:02:2b:9e:58:e3:20:03:3e:c2:5d:38:e9:1b:46:f3:8f:81:
79:e9:7c:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:50:07 2026 by rpki-client