
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3373e313-cf85-3264-ab20-f7270ca2fea5.roa
File: 3373e313-cf85-3264-ab20-f7270ca2fea5.roa (raw, json)
Hash identifier: +3VMQklp984RjpVhWjgz/f9eOzm3qxi9Suey2Scuv9Y=
Subject key identifier: 7C:3D:69:A4:65:C6:98:C8:80:EB:21:C8:2B:A7:43:E3:1D:E5:ED:3F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF78FD07DF263757380CBE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3373e313-cf85-3264-ab20-f7270ca2fea5.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 68.45.40.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:8f:d0:7d:f2:63:75:73:80:cb:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=2eccf589-48f5-450c-8856-f47ae0762102
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:46:b9:e2:b1:48:bf:5b:92:b3:ea:9f:a4:
8b:5b:ae:50:12:b6:c9:6a:32:b6:6c:54:c7:09:f1:
3f:95:cd:0e:84:42:3b:09:b7:67:22:f7:ab:4c:33:
ad:a2:f6:c8:d8:17:9f:49:a2:8f:54:9c:c3:72:ae:
ff:71:3e:61:39:33:22:c6:22:92:50:61:7f:34:c5:
22:34:9a:2b:16:04:0e:12:24:0c:9a:8f:94:1e:8d:
ec:23:7a:52:77:0c:68:7d:ad:ea:38:e2:12:2b:23:
6f:ce:48:72:9d:81:e9:36:21:83:0a:47:bc:e5:64:
e1:6e:b5:da:be:79:da:40:57:3a:10:92:c5:13:b9:
ae:5d:60:c9:44:6e:8d:0c:9b:ee:1d:65:aa:40:3e:
31:34:f5:80:b3:85:b9:46:4c:7e:ed:85:db:52:ba:
6d:91:0e:70:19:6b:fd:bc:44:47:d8:4f:6a:2f:0f:
61:8c:ec:29:8d:b3:28:4e:1f:db:c6:35:05:c8:38:
84:c5:eb:8f:a2:de:1c:00:48:b9:b6:4a:47:88:a6:
1e:f1:de:4c:e0:c5:84:fe:10:14:b3:e7:b4:ee:53:
7b:ed:09:fe:e0:ea:cf:0f:98:11:76:01:91:84:e9:
44:28:93:03:31:fd:40:4b:34:8d:a3:48:76:29:e2:
73:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:3D:69:A4:65:C6:98:C8:80:EB:21:C8:2B:A7:43:E3:1D:E5:ED:3F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3373e313-cf85-3264-ab20-f7270ca2fea5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.45.40.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:d5:02:b5:3e:7a:77:f4:2f:eb:4d:df:75:f7:d9:0b:a9:2d:
25:a6:5d:18:51:49:42:dd:d3:a2:17:06:2d:98:d2:b7:1c:0d:
34:15:9e:21:17:82:7f:4b:20:45:12:2e:cd:5d:4e:c0:db:a0:
69:8a:dd:ba:1c:88:77:28:b1:d2:dc:df:7e:1c:32:8d:3e:74:
eb:37:86:80:47:9f:63:24:a3:fc:e7:30:8d:87:86:e7:df:57:
8a:b4:f7:a8:9f:8d:ee:04:51:41:50:20:50:35:51:d8:8d:54:
02:25:2c:02:92:ac:b9:0a:9f:a6:3c:95:eb:42:39:4f:e7:17:
a7:9c:16:15:a7:13:27:f4:e9:38:58:4d:0e:90:f8:48:f0:45:
02:d1:9c:68:58:a5:84:1d:6a:98:01:cc:46:8f:b8:88:71:96:
f9:77:ab:06:05:10:5a:c0:e6:7f:21:be:e1:3d:ba:80:35:42:
de:64:22:16:a1:21:3d:91:6e:fc:be:5d:85:7e:b7:8d:eb:c9:
6e:bb:f0:48:7c:21:18:d5:5c:e8:bf:53:23:ce:ce:fa:46:8f:
af:a2:81:55:8c:52:fb:26:6d:c8:92:eb:17:9e:ad:28:11:e6:
19:9c:54:1e:28:58:90:d3:7a:01:c0:8c:a0:82:78:d2:ef:86:
5e:bf:6d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:49:14 2026 by rpki-client