
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa
File: 24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa (raw, json)
Hash identifier: 0NR4BduE4nGQQSm8Ofrgk7+UHXqW3TEDBvJTQlXO3P0=
Subject key identifier: A3:AB:76:2D:B0:45:8F:1A:B2:4A:20:20:72:74:71:FA:C7:D5:51:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF745D404B61AAF407C30A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 68.83.137.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:45:d4:04:b6:1a:af:40:7c:30:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=7372b303-cfb1-4a2d-9e85-672afd37ae58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:6e:c2:7e:84:5e:dd:33:42:d6:40:b0:0d:ec:
83:53:90:ea:96:84:42:ba:90:e9:61:bf:ec:d1:55:
98:a3:ac:41:13:b6:48:9e:cf:a4:bb:1d:47:a0:1f:
56:fd:8d:9a:d0:62:37:c4:be:b3:46:5d:46:93:0c:
75:36:45:e9:52:43:62:e1:10:82:e3:79:d5:02:28:
9a:66:84:51:9a:c7:6e:d7:e2:75:bf:5c:89:33:92:
19:f1:3a:32:b1:63:fd:b2:4f:2e:93:9e:75:04:93:
49:f4:ea:35:42:8c:74:bc:0b:05:0a:4f:07:19:d6:
a9:b9:b7:55:f2:53:f9:38:e5:13:87:a2:25:79:46:
9c:fd:15:da:3a:87:bc:c3:7e:c3:09:c8:1a:17:be:
e4:14:de:7f:08:1c:80:64:10:00:0c:c7:cf:87:58:
46:b2:94:55:65:b1:35:33:d0:93:4f:5a:e3:a6:83:
64:a5:6d:05:f3:fa:09:c0:af:73:c0:5e:83:33:1d:
a0:e6:3b:c2:3f:47:ab:56:b9:f3:5d:8b:13:95:fa:
c9:ff:5c:6e:8c:50:d8:90:4d:67:2a:be:29:9d:a9:
7e:da:1d:ff:b9:2c:a4:ea:37:0f:d9:a9:b6:1c:b5:
71:2b:64:79:27:e5:29:82:28:06:10:a3:c0:1b:df:
5f:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:AB:76:2D:B0:45:8F:1A:B2:4A:20:20:72:74:71:FA:C7:D5:51:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/24b4a79c-3f8c-3532-ae2d-a0382fe626f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.137.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:f3:65:6c:f2:06:e0:18:52:01:ad:c3:8c:f3:82:6d:1f:d8:
6b:87:55:8d:51:00:41:0c:e4:96:9d:ae:44:51:19:14:96:e6:
dd:c9:3f:9f:1b:1a:b8:68:99:47:b8:07:8c:5f:ef:54:e9:0b:
94:76:7f:a7:d9:00:ba:c7:12:2d:42:57:92:f8:17:65:ca:37:
f7:05:6d:7e:12:de:da:2f:c6:91:9d:50:c7:62:e4:39:99:8f:
a2:d7:d1:bf:02:47:b3:c4:e2:85:7d:77:c6:2e:82:ee:ce:bf:
14:66:a0:9e:ac:5b:41:1d:23:40:ad:84:35:8a:60:05:07:06:
81:23:37:89:88:4e:42:eb:7b:9e:0d:ff:1e:59:26:8f:92:bb:
67:99:35:9d:18:d6:ac:eb:dd:79:b4:1d:c4:dc:0b:0b:c4:00:
41:10:ed:e5:b9:60:67:bb:57:25:28:0f:46:d2:e8:2e:1b:ac:
fa:ba:d2:bb:44:e5:d2:1f:5f:0d:d1:18:f9:f8:79:a4:9b:42:
5a:b0:ba:a4:43:1e:b1:22:f7:4b:e2:bc:2a:92:a8:bf:88:e3:
90:43:fb:b1:59:59:db:94:f4:43:04:88:63:ff:51:62:ef:47:
00:22:41:b8:14:82:6d:d3:6d:b2:47:0c:b8:11:f6:2b:41:4a:
b4:d5:57:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:35:12 2026 by rpki-client