
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
File: 863a4b84-1653-3d1b-9139-69e7b60c3efa.roa (raw, json)
Hash identifier: CasudpezagL5d0u7SKEGv6dsGo6om+q2OeqE/+iJmlk=
Subject key identifier: 10:3F:3E:DF:6A:AE:55:3C:18:7C:EB:81:F6:5D:06:E0:D0:1B:73:1C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB1872C4993E3B408EF980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.49.232.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:18:72:c4:99:3e:3b:40:8e:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=13c3a77b-e0c0-47fc-a8de-4ada3b9a39a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:45:37:09:52:e7:86:79:a0:1f:a9:97:82:25:
bb:d9:ac:59:23:d0:b0:86:54:7f:05:18:b0:ce:00:
c7:d5:f0:e1:05:8f:60:02:f0:89:e4:e6:5f:5d:42:
52:67:14:ea:38:17:c5:a4:64:60:30:ae:8e:bc:ac:
65:47:c8:f8:02:7b:9e:a4:12:8e:dd:d3:7d:30:1f:
8f:61:fa:f5:a3:aa:38:44:fa:c7:26:9d:b3:49:cc:
85:fc:cf:96:04:d2:34:8e:5d:44:8e:84:bf:1e:65:
35:b4:a1:bf:93:3e:3b:eb:8e:7b:d1:7d:63:8e:f8:
88:2c:99:2f:28:a7:57:aa:b4:24:2f:59:b4:09:05:
39:f8:c6:75:09:ce:92:f7:24:24:64:fc:52:89:94:
c8:0c:b8:ff:69:d9:a3:e0:e0:1c:80:1d:03:06:23:
f5:88:1a:2f:1a:ad:4c:1b:35:c9:73:de:ff:cd:2c:
b8:82:0d:22:57:9d:10:f6:1d:db:40:f4:b3:8c:05:
cd:f1:2c:d6:21:88:2d:fa:b7:ce:db:12:9e:bf:dc:
df:68:3f:87:d7:8c:35:88:fb:5c:b0:b7:76:f2:0c:
90:37:a4:da:24:37:22:4b:a6:6c:3f:d9:9a:9c:5c:
ea:36:13:02:6e:80:9e:5d:96:e2:18:0a:df:8f:9d:
31:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:3F:3E:DF:6A:AE:55:3C:18:7C:EB:81:F6:5D:06:E0:D0:1B:73:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/863a4b84-1653-3d1b-9139-69e7b60c3efa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.232.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:a4:69:98:55:ff:3b:8d:b5:cc:27:c2:a7:7e:44:74:d3:15:
34:35:e9:eb:f2:c3:4c:ae:ba:fb:22:5b:97:41:fe:32:f7:06:
de:67:7f:f1:9a:b0:89:d2:8b:13:f2:57:70:df:cb:00:7a:81:
aa:02:fb:b1:e5:61:b5:2c:8f:10:0b:49:87:43:78:5b:6b:cd:
f9:99:88:7f:ba:0e:13:7e:54:84:a6:a4:86:95:6b:53:d7:46:
7d:58:0c:57:c1:3e:dd:c6:e0:37:f6:49:db:d9:7c:a3:17:81:
c3:81:ca:8d:fd:65:15:be:2f:aa:17:66:b6:bf:03:a7:75:94:
25:5b:70:bd:33:5b:35:e1:e3:c0:e1:ea:d2:4e:2d:0c:80:8d:
2e:40:54:16:a8:ed:4c:47:ee:77:2d:b9:72:56:5e:56:47:37:
9f:db:66:35:97:7f:cc:e0:a3:af:c9:72:98:a8:ba:e8:c7:dd:
fd:ad:79:42:bd:06:af:14:2f:bd:0c:68:e0:fb:dd:c7:49:cd:
d4:02:e6:c8:3a:8e:af:0c:1a:e5:d3:04:fd:ea:25:a6:11:12:
12:4e:f7:dc:35:11:a8:58:43:b8:d0:8e:c7:4c:69:56:a5:60:
00:26:85:18:8d:15:4d:42:f5:e6:5a:c0:eb:3e:2a:26:a2:fb:
ae:60:e1:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:41:30 2026 by rpki-client