
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90a5a062-7f19-3ac0-8262-997bc82ff9d1.roa
File: 90a5a062-7f19-3ac0-8262-997bc82ff9d1.roa (raw, json)
Hash identifier: sIziLx6nXIspoL2EmMLvuGZFiqKK0CXPRuUmKuhZyoQ=
Subject key identifier: D2:33:B4:A2:49:66:3A:28:44:CC:16:A6:2A:C4:78:43:F7:74:D1:D4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB20476D897E2FFB7867A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90a5a062-7f19-3ac0-8262-997bc82ff9d1.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.60.142.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:20:47:6d:89:7e:2f:fb:78:67:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ce0d04b4-5529-47c0-a029-bf920acb2f31
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:99:d5:43:40:9d:79:6d:ff:d3:17:cd:50:f1:
2b:db:69:43:bc:ad:89:6c:44:f7:0e:21:44:7a:92:
ef:bb:c1:ab:7e:c8:1c:37:30:52:bb:50:f1:16:f4:
24:85:77:c0:79:21:54:92:3b:b4:72:e2:5d:42:db:
c9:83:cc:1a:48:b5:c9:bc:5f:93:a9:04:1b:04:7c:
97:3e:21:45:8e:64:13:48:eb:11:39:ff:a1:96:92:
51:f1:cc:42:7b:83:72:71:d9:20:55:07:fb:59:e1:
17:91:a5:08:fe:e8:95:09:71:c8:51:f0:c5:d5:b3:
cf:1a:23:1e:99:5e:40:ba:fa:22:ba:6e:23:82:a9:
a0:f2:7d:d7:72:30:fb:09:1a:7c:fc:92:24:60:ae:
e2:74:4e:0f:cf:63:88:f5:3b:3f:c8:8d:e0:5e:24:
46:c7:16:d1:d3:6a:a2:93:7c:7c:80:56:2e:6f:e5:
67:e3:f9:9a:3f:cb:7d:66:1c:ca:d5:d2:0c:f0:e5:
c7:69:43:67:6e:2b:ab:42:72:51:35:23:0b:ca:76:
11:2c:30:6e:ca:e6:07:a7:04:12:f5:e7:9b:90:06:
82:c4:bb:fe:a5:98:be:38:d4:e0:6e:ec:fa:90:b2:
1b:65:c3:f7:4e:8a:12:fb:16:23:65:52:67:38:73:
8e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:33:B4:A2:49:66:3A:28:44:CC:16:A6:2A:C4:78:43:F7:74:D1:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90a5a062-7f19-3ac0-8262-997bc82ff9d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.60.142.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6f:69:56:e3:9d:ca:30:a5:90:b8:ad:de:f1:82:a3:24:d6:f8:
f9:a2:36:75:de:a0:e5:85:18:38:01:29:6b:c2:f7:63:b7:c7:
7a:f5:e5:48:90:d6:10:da:97:61:81:72:cd:20:5e:f3:c4:43:
82:5c:1f:15:0d:f6:05:60:7b:ad:93:17:96:0f:9f:4a:a1:8d:
72:48:41:a4:a0:11:f7:96:be:b3:44:71:5d:65:19:14:4b:11:
04:79:23:05:ca:6b:00:f0:d0:3b:f8:06:a4:0b:2b:a4:f8:70:
68:77:bd:36:0f:d5:bf:09:ef:b5:d9:04:92:84:bb:d4:cc:5b:
b6:e2:7c:16:01:66:b1:84:9f:09:ef:ef:2a:58:a6:3e:03:79:
74:56:f4:bb:a8:e1:6f:3e:92:73:30:3b:87:64:59:09:4b:91:
52:b1:15:93:31:a8:74:b7:31:20:1b:cd:22:03:9a:7d:11:ee:
2f:ea:a1:ad:7e:25:ee:e3:cd:dd:f5:d0:a7:ae:19:09:ea:ec:
38:d6:e1:31:fb:7e:61:94:bf:76:dd:d3:43:73:fa:1e:8b:e0:
e7:94:b1:5c:c8:61:d6:90:0e:55:99:2a:9a:b7:a0:f1:52:1a:
b0:1e:b5:3a:36:b5:67:de:24:ce:4b:3f:0a:ab:11:1a:e6:68:
6e:c9:8b:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:09:18 2026 by rpki-client