
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9ab2a1-303a-3ff9-bed0-7ef45ecc6f9e.roa
File: 9f9ab2a1-303a-3ff9-bed0-7ef45ecc6f9e.roa (raw, json)
Hash identifier: ew7tx0Wbuo0DsuJL18TKY1lbKqOQoAtUnDHtQ85FVjE=
Subject key identifier: 0E:F3:9F:62:FD:F7:A1:F9:04:95:DA:FE:57:6A:90:0F:2F:A9:87:B2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC3ED5A79EC567CF05E580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9ab2a1-303a-3ff9-bed0-7ef45ecc6f9e.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.37.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:3e:d5:a7:9e:c5:67:cf:05:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=e5b0cabf-380c-484e-8f7c-55351020a359
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:bc:ef:0a:7f:b2:e4:0b:40:9b:a2:d2:58:19:
00:71:5a:88:d7:3a:f8:16:a8:27:2b:50:86:6e:68:
d6:52:0b:eb:c6:5c:05:f5:73:6e:43:16:31:cf:59:
90:d6:dd:51:42:85:5d:67:2e:11:86:35:ac:52:96:
5c:b1:0c:0b:bf:1a:fd:ee:2f:17:7d:0d:91:5f:9d:
a3:dd:21:42:3c:33:1f:5b:4f:ce:40:1c:a0:dd:76:
87:d5:62:b6:70:97:2e:a3:07:88:f3:4c:ba:43:e5:
a8:89:f3:67:36:2d:34:ba:d3:60:03:04:41:fd:57:
34:87:d7:1e:13:00:4e:5b:18:88:f1:47:ce:3c:9f:
2e:b7:2e:ee:38:00:07:d0:01:54:16:28:40:49:3b:
e8:5b:b0:fa:9a:1e:14:11:7a:8d:f6:2c:f7:1b:33:
fa:75:49:ff:49:e3:0d:82:64:4b:dc:10:6c:29:26:
74:21:2a:32:38:c0:1c:1f:97:9c:e8:74:1e:8b:44:
c8:5e:5b:f8:74:87:ff:51:67:de:27:aa:de:e9:81:
f5:fd:23:e2:9a:4b:84:ab:a7:6a:b7:47:78:16:04:
f1:79:b8:48:4f:43:98:8b:1d:05:a3:fe:9a:0e:24:
3d:e8:d5:42:0c:ad:48:c0:1e:49:97:9e:7d:75:c1:
2d:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:F3:9F:62:FD:F7:A1:F9:04:95:DA:FE:57:6A:90:0F:2F:A9:87:B2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9f9ab2a1-303a-3ff9-bed0-7ef45ecc6f9e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.196.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1e:72:12:84:3c:46:d2:3d:1d:df:bd:96:00:09:89:e0:a0:17:
98:2b:48:1a:4c:6a:9b:63:66:4a:64:69:b0:6b:12:77:c0:8c:
30:bd:b5:bd:34:ec:d8:4f:50:7e:5d:d7:b8:5d:f5:76:2c:09:
06:86:9b:8a:61:de:28:fe:f9:8a:31:53:04:15:56:e1:15:2a:
78:e3:2f:98:ce:84:fc:29:7e:a5:f1:2c:ee:da:01:b3:54:be:
40:c4:5c:f9:4f:a4:2b:77:f3:81:ee:d8:ba:e4:36:91:64:a5:
bf:11:79:57:a6:2e:37:88:9b:a2:99:58:da:f8:3b:38:28:6c:
e1:9e:81:f6:42:91:0a:3a:22:1b:65:39:54:69:b8:12:8c:d7:
df:a2:e7:dd:39:9e:82:ee:45:9b:fe:54:75:24:6f:12:ac:c7:
42:01:27:b9:d4:75:0b:1f:ce:ad:a7:ee:03:21:cf:5a:79:d0:
9d:62:58:15:51:5c:bf:26:40:66:31:83:99:b6:a3:68:98:7d:
b7:d6:69:2b:89:33:71:1b:a4:f3:23:ad:2c:72:a8:fd:c2:e3:
fd:88:5b:59:b5:5e:b5:89:e0:ef:78:45:ce:e7:86:16:e6:2d:
c4:35:53:a0:91:11:f7:bf:32:d4:75:99:b2:5d:4f:3e:93:51:
98:44:ff:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 10:18:48 2026 by rpki-client