
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdbfa9a1-3569-33a5-a0b9-aba993043615.roa
File: fdbfa9a1-3569-33a5-a0b9-aba993043615.roa (raw, json)
Hash identifier: szlK3rpe6hm6zKqSYaFSI0s3blV1yqm6dFIHCni17t4=
Subject key identifier: 3D:60:B5:E2:8E:DF:A0:DF:8F:96:B2:88:07:00:33:4D:16:3F:A3:2D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC5383CB170A3A76E09400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdbfa9a1-3569-33a5-a0b9-aba993043615.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.62.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:53:83:cb:17:0a:3a:76:e0:94:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=08dbe7bb-5c7f-44d5-b8c3-44122612d781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7e:30:b8:3a:ef:c2:9f:85:c2:2f:1b:e8:0a:
49:15:a6:e0:40:d7:d0:27:8c:d8:03:f4:42:66:bd:
96:64:ad:6a:b9:72:a8:13:30:99:59:0b:7e:fb:02:
5b:7e:86:cc:c8:1d:5c:01:d4:bd:4e:2c:79:81:70:
a5:27:8d:10:88:b2:a4:83:1e:b6:96:4a:cb:ab:6c:
08:02:98:0e:49:7b:aa:e4:30:d5:be:9a:0a:1a:09:
97:a8:f0:80:c2:4c:e7:ec:18:03:42:e0:b7:a0:a1:
9c:5a:41:db:94:e1:dc:18:16:71:46:f4:24:21:f3:
b5:8f:85:95:0a:ce:bb:d1:62:33:7a:c1:98:06:66:
3c:c7:b4:e5:2f:19:da:39:c4:2e:02:bf:50:44:9f:
e0:1d:a8:1f:6e:56:f9:7b:59:33:1a:4c:c1:bd:2a:
80:b5:bf:60:6d:2c:35:03:c4:e1:25:4c:53:f8:0e:
94:5b:24:7d:9c:aa:a8:31:3d:0d:03:b5:4f:22:ae:
df:12:a1:83:2b:8a:d1:78:3f:45:1b:74:5b:2d:e0:
71:62:01:c2:27:09:f9:a3:a9:df:85:e3:e6:28:7b:
df:5c:00:dc:32:4b:ad:f6:d2:52:50:0b:48:a0:0f:
9d:ce:92:3b:7c:0b:fe:96:c6:6a:42:f2:9a:c3:ad:
5d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:60:B5:E2:8E:DF:A0:DF:8F:96:B2:88:07:00:33:4D:16:3F:A3:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fdbfa9a1-3569-33a5-a0b9-aba993043615.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.62.97.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:5d:7a:f6:5c:eb:d2:94:ce:66:13:32:3e:36:39:c6:88:97:
05:b8:92:15:13:57:06:14:84:92:76:6d:6f:93:98:a6:85:2f:
cf:7b:6e:f2:06:c4:72:59:27:9a:99:c9:13:e0:27:91:2a:3e:
0d:93:01:66:96:dc:e9:c9:2f:0d:5e:72:ff:98:b6:57:e9:43:
db:a2:5d:d1:2c:35:54:27:4a:32:22:79:fd:0a:58:e4:21:49:
56:3d:42:e9:43:f3:ad:29:0b:15:1e:83:82:70:62:ed:16:4a:
67:bc:5a:f5:6f:5c:dd:ea:df:e7:ff:95:cc:c2:b1:8f:4c:56:
49:ec:eb:37:de:e5:1d:26:9f:6f:83:20:0e:c3:a4:7b:14:1b:
96:cf:20:b0:3f:fe:f2:6e:9d:61:05:e7:77:57:cb:e6:12:c9:
ea:9b:34:33:13:f3:59:98:2d:90:14:af:c5:65:8b:65:71:d8:
4d:61:9c:8e:46:76:cd:4c:cb:1e:b5:2d:c2:6b:32:d1:ce:18:
5c:c2:a0:ef:48:73:bb:1c:3d:6d:7d:f0:89:de:2e:27:9a:fb:
45:5a:ca:cf:e4:07:10:69:97:a3:97:80:30:a5:a0:9d:ff:f6:
52:93:a9:f6:26:8f:99:9f:2e:3e:b9:fa:e5:97:03:71:14:4e:
4d:b5:4c:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:17:00 2026 by rpki-client