
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e9f231-9c56-3586-ba39-a02a78123360.roa
File: d0e9f231-9c56-3586-ba39-a02a78123360.roa (raw, json)
Hash identifier: aJKmJnieB0QcIE7uuBots4WK3gccHix40MmqdE7GVT0=
Subject key identifier: 14:3C:B2:B4:A1:9B:9C:62:EB:02:A3:28:A5:D7:49:AA:D6:78:A2:5C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB1ECB704EA3CA9EB2C080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e9f231-9c56-3586-ba39-a02a78123360.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.58.182.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:1e:cb:70:4e:a3:ca:9e:b2:c0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=4041ab62-57b0-4c88-ae52-14f8364789ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f0:76:41:a2:f0:db:32:44:b0:49:12:6e:f6:
97:68:16:28:f9:aa:6d:9e:75:43:36:d0:53:69:ec:
5e:8a:8b:2a:58:55:04:0a:5a:ea:c1:c0:75:b1:3e:
47:4e:a5:54:e6:ca:14:f0:a1:5e:c7:55:a3:6a:96:
9b:44:b5:79:8a:02:3e:f1:98:6b:1c:43:ed:08:ca:
7f:07:93:46:ed:f1:bd:6f:4f:9a:bb:29:1a:54:d5:
45:ba:eb:b6:f4:55:aa:9d:64:02:36:88:b4:31:03:
40:d4:cf:56:69:60:2d:48:b6:7d:eb:ec:4e:11:8b:
19:bb:07:69:5d:8e:c8:1e:20:e5:48:1a:51:d0:f8:
63:7b:e9:bf:5e:b1:dd:39:30:6c:08:4d:0a:59:cf:
2e:cc:68:4d:5c:70:86:28:06:e9:36:46:fa:e5:29:
7b:e4:fb:9b:21:50:e5:d4:07:32:6b:97:43:56:ad:
25:0b:5a:7b:1b:0e:72:5c:15:f8:50:37:92:f5:24:
41:cd:7f:1b:36:4f:5c:31:b2:de:ab:a9:2b:ef:c0:
80:bb:01:35:35:71:d8:99:95:d4:30:3a:1d:71:8d:
3c:4d:26:fa:92:ff:a4:0b:a2:7a:51:2f:13:53:78:
00:3d:68:8b:45:6a:3d:b5:3d:72:6d:3b:79:3a:91:
76:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:3C:B2:B4:A1:9B:9C:62:EB:02:A3:28:A5:D7:49:AA:D6:78:A2:5C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0e9f231-9c56-3586-ba39-a02a78123360.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.182.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c9:e3:c7:e7:26:3a:de:39:58:5e:0c:42:c2:33:71:a7:3b:56:
c1:91:8f:f8:d9:2b:c5:eb:03:8d:48:8e:c1:4f:ff:0e:0d:01:
48:ce:24:5c:53:18:7e:8f:1c:b9:3f:de:a4:5c:ac:f7:04:c7:
fa:4d:7b:ba:b5:12:0d:a8:73:2a:6f:f9:d4:1b:c5:a1:60:0f:
ac:ae:64:49:31:1c:12:a8:11:33:63:9b:7c:17:23:07:34:52:
56:38:e0:49:a9:18:95:34:60:27:9b:d4:f9:05:c1:46:a3:3a:
b3:36:f4:f7:c6:ce:61:9f:43:e6:9c:2c:57:81:6e:d4:1d:9e:
7a:3e:e6:2a:3e:51:8a:68:af:93:9c:02:3c:4f:d5:63:28:bd:
c9:f7:3c:6d:57:0e:6a:bc:67:5a:b1:a3:c8:f1:96:a6:8f:a0:
5b:53:0a:7e:ce:fd:04:6a:5a:58:de:f8:bb:16:aa:42:d0:6b:
58:37:60:e7:f8:61:7e:4a:9c:34:0f:23:69:70:6b:7d:98:6d:
64:60:c6:55:fa:d2:d6:f9:92:ec:8d:e5:84:05:9d:b1:78:b5:
78:aa:84:95:6c:9e:3b:0e:92:f6:97:93:b7:a7:fb:67:ae:bc:
14:46:92:35:29:eb:0b:98:db:d7:8b:f5:e6:6f:4a:76:ed:0e:
c6:6b:80:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:47:19 2026 by rpki-client