
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a4e6aca-542a-3272-866c-3166cbc581b4.roa
File: 0a4e6aca-542a-3272-866c-3166cbc581b4.roa (raw, json)
Hash identifier: PzSH5ez+T0c/MUOb8YH9D6nPrxm7WpwUF9bb5jo2w1M=
Subject key identifier: E3:4F:34:6A:8B:ED:CB:B2:8B:9B:CC:D6:94:68:63:EA:A5:82:8D:BC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF78F37A592EB61FFE58300
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a4e6aca-542a-3272-866c-3166cbc581b4.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 68.45.220.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:8f:37:a5:92:eb:61:ff:e5:83:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=c175d894-6db2-4107-9c01-5a97c4710ed7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:1f:e8:ec:9f:ae:dc:9d:c8:01:01:a8:fc:
6c:a5:8f:7f:1d:9e:55:0e:cd:be:77:b4:c1:90:a0:
ed:d4:cb:e4:a8:79:83:01:dd:ee:43:9c:37:99:20:
3f:6d:92:8a:cc:02:b8:2f:6f:4e:7b:ef:a4:18:b0:
03:1b:71:dc:7d:6a:07:d7:99:ae:b3:e2:0d:c7:95:
75:4b:e6:9c:2c:96:e0:ee:2b:a1:3c:f4:d8:1f:c2:
cd:86:ef:3c:de:e7:8d:2d:7f:b0:79:93:97:cf:f5:
ec:f1:21:7c:4f:1b:0c:89:99:51:cf:e8:c9:30:1f:
31:ae:98:5f:bd:8a:22:dc:f3:4f:e2:03:fe:7a:1a:
a5:d3:77:aa:66:f5:8e:da:19:02:18:a4:c3:d6:13:
fd:a8:bb:16:ad:d8:59:ac:c3:93:e9:0e:21:e7:c1:
0d:ee:97:ae:99:47:c4:49:a9:9f:7f:bc:12:0c:8c:
a8:aa:29:16:56:8a:74:61:b5:9b:2d:b6:32:e9:75:
03:93:d1:ea:7b:f4:d3:79:1f:a2:8f:6f:1a:6e:53:
1b:3e:63:8d:52:94:da:e8:59:ae:17:e9:f7:ac:76:
e2:70:04:dc:2b:94:7c:40:8c:d0:d9:f2:81:c6:c3:
3d:0c:87:ce:0d:a9:03:36:d5:e4:d6:8c:05:46:8b:
0b:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:4F:34:6A:8B:ED:CB:B2:8B:9B:CC:D6:94:68:63:EA:A5:82:8D:BC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0a4e6aca-542a-3272-866c-3166cbc581b4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.45.220.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:67:0f:1d:99:45:e7:9e:58:40:0d:50:8e:48:a1:6e:2b:94:
bb:2f:6d:4c:38:61:a9:d4:f4:24:eb:36:20:60:f8:85:b0:18:
7e:63:66:34:77:a4:f9:bc:3c:86:c4:c2:36:ea:aa:ad:62:51:
a2:91:35:0c:7f:1f:5b:76:a4:86:07:3a:55:18:46:2f:86:15:
10:1f:2d:b6:81:33:57:e6:92:30:f4:ab:89:2d:06:4e:c9:75:
73:7a:45:6f:b7:52:23:6d:9c:9e:81:c0:32:7e:b4:e6:fa:50:
4a:00:2d:2b:3c:f4:fd:db:dd:c5:cd:74:d8:1d:cb:85:75:b7:
3e:da:06:ff:71:5e:a5:9e:36:ea:b3:3d:b3:a6:fa:2d:e4:88:
0b:7b:e4:16:f1:1c:0a:0c:e1:15:8f:0a:81:c0:89:2d:6b:49:
0e:fb:b7:31:3b:f6:a1:ac:57:13:2d:3c:96:56:9c:85:e0:62:
e0:7b:14:89:df:56:61:15:42:6c:39:ac:f9:fc:46:0e:7d:c5:
e3:cf:ad:84:d3:d4:32:ff:54:5f:f5:40:fb:25:ff:57:73:3f:
fe:01:ad:c3:e5:5d:2a:1b:87:93:30:91:bf:6a:33:b5:5c:03:
af:f7:ac:53:c3:23:30:be:b9:00:4b:ea:0f:45:6f:b1:c9:ed:
49:c4:ed:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 00:11:48 2026 by rpki-client