
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde7f022-8c3b-3648-a6b6-815501980622.roa
File: bde7f022-8c3b-3648-a6b6-815501980622.roa (raw, json)
Hash identifier: jRlADsJeS0EHH8BKp1mSlYxrOI8DTs8R1V95AaFhh6k=
Subject key identifier: E7:5B:94:83:82:94:46:29:21:71:6F:A1:A0:86:E4:74:2E:7E:87:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB222AFD87D86AC7ED2AC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde7f022-8c3b-3648-a6b6-815501980622.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.61.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:22:2a:fd:87:d8:6a:c7:ed:2a:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=ec9d87c5-075d-48a8-9a0d-cd85fdeaf64e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:24:dc:39:fb:a4:39:91:b8:74:5c:c8:cb:a9:
ae:dc:ed:40:87:56:4e:75:d3:50:14:89:8b:45:cc:
62:c0:35:38:03:d8:e4:19:b3:b1:fa:e8:64:0f:13:
f5:b7:2b:97:10:fb:b7:c2:9c:8a:ca:9c:38:45:a4:
72:f6:0b:bc:e9:9b:ba:4b:bc:36:05:3d:a8:82:06:
70:68:17:08:2c:8b:76:39:91:76:3e:72:79:74:4b:
bc:60:28:a9:78:16:8f:e4:d5:8b:6c:ad:c4:79:11:
f5:99:35:bb:25:f3:87:f6:8d:a5:50:9c:fe:4f:5d:
bf:19:92:12:e4:a7:77:90:16:af:fd:52:ed:9f:eb:
53:ad:4e:6c:9d:5e:9c:b8:b2:b7:4e:19:0e:0a:d7:
0d:9d:f8:bb:bd:2c:86:e4:b0:2c:53:b5:a8:01:cf:
c9:16:be:45:33:55:ca:a7:8b:8a:ca:36:b0:59:6b:
ab:5c:cd:2b:33:e7:70:90:12:f3:4c:67:41:e5:04:
f9:33:2d:24:b0:ad:a9:55:56:84:0a:e6:68:d4:12:
fb:bd:8a:22:0c:7d:05:62:1b:63:b0:57:05:b7:43:
43:b2:03:a9:38:7d:41:b3:fa:30:22:8d:44:50:94:
f1:8d:ad:34:e6:72:80:41:d3:ed:f0:3b:e7:fb:5a:
f9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:5B:94:83:82:94:46:29:21:71:6F:A1:A0:86:E4:74:2E:7E:87:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/bde7f022-8c3b-3648-a6b6-815501980622.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.173.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b0:64:28:5b:ff:f6:d6:bd:d4:46:ad:fd:07:06:c4:2b:19:bf:
40:66:49:0c:f1:8f:82:c6:c6:fe:8d:be:9a:db:5f:76:04:1f:
be:e9:92:bc:eb:12:4d:84:b7:a6:2d:9a:1b:23:9e:de:be:ac:
a8:af:96:a7:bd:bb:22:a7:45:4c:e1:72:72:04:c0:31:d8:4a:
c1:1a:1b:10:a4:1f:2d:e4:41:13:21:1f:98:d7:3d:80:38:ce:
d1:a3:3e:0c:55:77:6f:8a:c8:ee:7b:cb:d8:70:a5:79:c8:64:
ad:88:85:97:66:0f:0e:77:4b:ac:c2:a0:3e:03:b0:66:91:d0:
3b:af:2f:80:28:81:c3:26:29:3a:ed:d6:73:6a:21:49:aa:c0:
a7:e0:04:85:c1:2e:68:54:8a:40:b8:c3:4f:e5:9a:b3:75:94:
87:bf:72:fc:56:f8:67:d3:e9:52:42:12:fc:fa:c3:91:bd:41:
33:f4:70:bf:a7:35:05:a9:df:e9:1c:69:22:cc:2f:1d:f4:13:
31:8d:55:3e:3e:a3:3b:56:c3:38:ec:a7:8e:52:b6:22:3e:21:
17:00:8f:ea:0f:d9:0b:ad:b3:77:d7:9e:4d:53:b6:16:7b:a6:
ef:22:35:8e:8f:51:94:fc:2c:63:8e:f7:b1:62:8a:ae:6b:32:
4a:11:0e:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:10:36 2026 by rpki-client