
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90739f03-0485-3ae7-930f-d3ddfe68aaf3.roa
File: 90739f03-0485-3ae7-930f-d3ddfe68aaf3.roa (raw, json)
Hash identifier: S3kBcIrhOYMnn6dtqaQ/c1DQYySyxCLSOEDjLbTa9jw=
Subject key identifier: 21:D6:20:B3:75:57:EA:CF:E7:7A:B2:5F:16:AB:BD:CE:C1:AB:8C:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB1E177AB92731E3E33D80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90739f03-0485-3ae7-930f-d3ddfe68aaf3.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.56.48.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:1e:17:7a:b9:27:31:e3:e3:3d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=8e74be52-b82b-4936-aaf8-25a27e881d3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:8b:ab:26:90:61:d5:9e:bf:3c:5b:e6:f4:68:
aa:ab:58:bf:50:2b:2d:08:63:34:0a:90:4c:66:54:
c6:71:ca:a3:fe:bb:7c:cc:e3:22:fb:69:9f:0f:cb:
2b:a2:06:81:5f:59:21:59:2b:3d:09:de:0e:95:d1:
ec:49:6f:6b:89:af:85:9c:da:ed:a1:ea:05:14:9f:
f8:b3:b7:f4:15:47:48:1e:c5:14:82:ac:9b:15:8b:
f3:5d:66:e6:3b:87:2b:e4:0b:52:fd:1d:26:c8:80:
50:9b:1c:15:25:85:ca:b0:38:12:3d:c4:3a:a1:c9:
9c:0d:67:26:86:4f:2b:a2:92:3d:2b:e1:55:5e:42:
b4:e0:20:2f:04:a8:b5:18:38:06:fc:62:a1:43:ec:
fb:b2:88:17:4b:72:47:91:1b:ea:18:e2:a4:a3:79:
a4:3e:78:2d:5f:97:fe:75:4e:39:6f:0c:5d:5c:76:
4c:33:4c:43:76:3f:7d:15:cf:96:d3:c2:bb:c4:93:
4d:a7:00:c6:0d:b6:f2:e4:69:87:1c:1a:a1:59:44:
78:52:e6:82:af:57:b8:22:95:a4:64:70:38:36:86:
7b:50:6d:d9:28:5d:37:dd:d5:68:c7:01:ac:ee:79:
24:13:08:17:7c:2a:1c:0c:d1:48:66:de:e2:a2:c1:
fb:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:D6:20:B3:75:57:EA:CF:E7:7A:B2:5F:16:AB:BD:CE:C1:AB:8C:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90739f03-0485-3ae7-930f-d3ddfe68aaf3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.48.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:f7:06:35:dd:66:70:ed:6b:b2:ed:e0:47:d3:ff:93:1f:14:
cb:93:3c:2d:36:92:4f:79:5d:03:81:58:7e:1c:07:6f:81:3d:
a1:5a:bf:21:d0:e8:70:fb:ab:bf:a0:56:b0:5d:eb:c0:45:f5:
a7:bb:26:58:03:09:b4:90:0d:02:e2:5a:42:5f:ec:96:82:f4:
51:f8:e4:c2:90:9c:ca:58:c5:50:b9:12:83:84:0d:f5:32:33:
82:91:f5:28:8b:04:66:47:b3:6d:af:d2:52:2c:66:8f:c5:df:
55:46:03:2f:0f:dd:3b:2f:9f:75:d5:97:f9:20:ff:f9:b0:80:
96:0e:33:bb:ed:08:99:93:e5:0c:e1:b6:6a:b8:85:73:27:8b:
5d:16:ed:e2:53:5b:77:84:08:06:7c:75:e7:30:f6:83:5f:a0:
1f:90:bb:8d:43:0c:3d:0a:f1:11:4b:d4:f2:74:04:3a:c5:31:
9e:16:c7:24:37:4f:a2:b3:13:27:da:3b:81:90:74:33:86:ed:
b5:0d:cf:aa:ad:0c:37:c0:a5:b1:58:eb:1b:83:ec:22:bb:18:
eb:1b:a0:a0:26:ce:2e:10:a3:a8:5b:0b:c4:fe:55:15:61:65:
f1:db:5f:c3:25:12:58:a1:a3:df:04:aa:9f:f7:81:d7:1e:d1:
0e:12:16:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:01:28 2026 by rpki-client