
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c024060c-01ed-3125-8a45-c334e375c9a3.roa
File: c024060c-01ed-3125-8a45-c334e375c9a3.roa (raw, json)
Hash identifier: +nCR/YbeWs+fh0zAtr7K2vMggMBpCopOO3aZjxtwRL8=
Subject key identifier: 08:3A:12:AA:B7:CE:A7:53:EA:3B:56:A7:C0:5A:34:6F:5A:24:00:D2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC4E8FD68AE7E2F864E080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c024060c-01ed-3125-8a45-c334e375c9a3.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.56.176.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:4e:8f:d6:8a:e7:e2:f8:64:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=a8984475-8f50-45ac-91fd-08cca4feedae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f6:04:a2:18:8f:3b:4f:76:ee:16:c8:f7:d3:
68:bc:70:8f:bb:d0:0c:39:cc:19:b5:3d:d4:7f:76:
c4:f7:60:f2:f4:98:b7:a9:9a:04:30:bb:28:ef:56:
60:31:14:cf:72:d8:25:2d:b4:af:4c:15:1b:5d:4c:
f3:65:ab:a2:08:a5:60:35:80:2f:25:2d:89:f7:19:
0f:2b:dc:0b:b1:7d:e2:c9:40:61:ac:c0:82:dc:4e:
a4:79:b2:5e:f9:81:67:a6:76:e6:ae:6c:1f:85:54:
e9:67:d2:f1:64:63:4d:69:51:7d:75:66:4f:d1:a7:
91:60:47:1f:83:c1:a9:a8:a9:77:2a:3f:11:0b:a8:
13:83:20:88:81:38:3d:07:0b:d5:24:91:e2:3b:3a:
73:4f:8c:89:2b:76:01:ce:a9:de:d6:1c:7f:8d:17:
8f:6f:84:0c:77:13:00:55:bd:5c:66:9f:96:36:f8:
ea:92:1e:b6:01:5a:5a:cd:d6:9b:b9:29:d7:c7:98:
f3:15:cb:cf:20:65:cb:e1:13:08:43:16:89:0d:7c:
21:50:63:f5:1d:38:b1:91:43:49:d1:2a:b7:13:9d:
db:c7:18:3d:d1:43:51:84:69:d1:a7:ab:dc:15:c5:
d5:f6:77:e2:fb:4c:6d:b7:22:cd:6b:e1:24:70:c8:
41:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:3A:12:AA:B7:CE:A7:53:EA:3B:56:A7:C0:5A:34:6F:5A:24:00:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/c024060c-01ed-3125-8a45-c334e375c9a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.176.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:70:24:e5:55:ce:fc:e3:22:19:16:69:60:6f:d0:e6:58:37:
bc:d5:61:8b:18:5e:b9:4e:f2:e6:bf:ed:5a:ca:3c:c9:c2:45:
96:a9:93:0a:0a:f5:cc:4d:84:e4:05:54:90:e1:db:50:ee:b0:
39:38:9b:1d:03:b8:bf:ae:e6:d3:e3:3a:df:74:a1:83:7a:f5:
59:fd:c9:61:5d:38:5d:b9:4b:48:36:cf:e3:2f:ef:26:60:71:
28:c3:41:92:c3:36:4a:79:f1:c7:a6:f7:5b:03:ad:1e:4b:e4:
07:b1:a7:b0:bf:3d:75:bd:ea:53:35:de:59:d7:6e:27:e9:69:
28:b9:a3:ca:33:2f:e9:99:ce:91:c2:2b:76:d3:ab:74:a0:5d:
fe:80:7d:41:2c:29:2b:d1:16:cb:51:02:71:1d:ba:b7:58:50:
00:9c:a7:9b:c2:eb:c1:a6:d1:a7:e2:5f:0d:29:fa:c8:77:89:
57:57:ea:6e:15:94:83:04:9e:3e:a0:41:a9:d8:57:54:6e:cb:
dd:16:79:37:12:05:7d:64:78:25:e6:99:b3:5e:b6:ce:56:b3:
c9:04:58:e2:93:98:c5:94:49:c1:f7:97:27:bd:ca:12:26:5f:
07:e1:d4:a4:fc:30:e1:30:72:e1:85:70:52:b2:64:2e:77:87:
a4:04:62:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:37:56 2026 by rpki-client