
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa
File: 4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa (raw, json)
Hash identifier: TrdixC0asWPTgwZ9lZ+/C0BbIiTpORd/EgZortRKhfM=
Subject key identifier: 07:E4:43:53:98:75:D9:67:FE:11:B3:ED:77:D0:82:17:A8:92:AA:48
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF5DE36421A82672112AC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 68.81.148.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f5:de:36:42:1a:82:67:21:12:ac:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=fd20379e-8d32-4a95-a124-5466a1050e6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:76:24:fe:c4:bb:8b:8c:fb:b4:89:05:ad:e5:
fd:33:e5:9e:29:cc:88:02:07:1f:c9:fd:e8:41:e7:
44:ca:f6:b0:58:1d:cc:d1:49:82:d4:47:6c:e1:c2:
1f:09:7e:7b:16:f0:a0:7f:a4:a8:f2:9b:26:7e:49:
7f:a9:b6:a6:c6:ee:91:b3:30:7e:46:93:06:22:60:
a4:87:8f:57:7b:a1:5d:0a:ba:2b:ef:03:85:0d:7e:
24:a5:a3:fe:5e:2c:99:f7:6e:a1:95:72:1c:de:68:
7d:9a:b0:7b:2b:6e:98:93:36:36:b1:b0:96:4e:f3:
b5:02:6f:77:5d:98:16:00:bd:74:f5:5b:1c:5f:3d:
76:a2:31:f9:3d:96:62:c8:8a:6e:a6:27:86:30:23:
79:fc:b4:87:6d:26:30:3b:57:87:0b:cb:fb:6f:3c:
fa:f7:f1:99:50:36:52:5d:4d:b1:55:49:f7:cd:f1:
53:a1:b5:fa:f5:ec:ed:5e:c5:63:0f:11:88:b9:79:
4e:95:a1:c6:f4:be:5d:62:f3:d9:cb:ee:26:aa:91:
30:33:ae:b3:97:e2:58:c7:c9:4a:ec:5d:e1:8b:77:
93:3e:e1:4a:34:fb:63:e1:bb:fd:63:0d:b5:f0:a2:
43:45:a8:c1:ae:eb:06:10:95:bd:d4:08:9d:53:b4:
5a:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:E4:43:53:98:75:D9:67:FE:11:B3:ED:77:D0:82:17:A8:92:AA:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4285d90d-b1a2-37a0-b28c-b76b5ad2622c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.81.148.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:7f:56:60:31:29:d1:6b:fe:ca:7e:b5:bd:9b:19:f0:10:b8:
f5:fa:3f:c1:af:31:06:be:7e:68:09:37:7f:57:b1:29:a2:5b:
b9:d5:6d:36:df:d4:2a:36:5f:76:da:d9:a0:94:95:9c:d9:74:
d1:02:c3:68:37:3e:ac:6b:63:e6:39:43:4e:c7:d2:64:52:5b:
8d:b3:3b:b3:a6:67:e7:e3:ae:35:24:d0:29:f1:2f:4f:31:6a:
70:0d:d3:a7:11:66:e4:a7:20:3a:56:87:f3:37:8c:a8:2f:12:
b2:bc:a3:98:ea:05:53:d6:9d:42:20:e9:d6:bc:e9:fc:eb:ac:
8b:1b:68:b1:1b:6e:59:05:bb:67:de:37:35:e3:02:80:d1:b5:
9e:31:ba:ea:5d:5e:3c:f7:1c:be:1f:69:7d:51:00:c0:f8:a4:
96:c8:fe:fc:9e:e7:c0:bc:12:71:25:33:d6:57:a5:d8:ee:12:
89:08:63:83:78:10:d5:86:21:66:e8:3d:65:43:96:0e:06:b0:
3d:ec:4b:1d:5e:27:b4:12:83:24:fc:0c:ef:10:51:40:38:6c:
92:d3:61:9b:e8:8b:bf:12:d6:58:ba:b1:c8:44:87:36:a0:87:
d0:f0:0d:0d:c0:1b:0a:b5:67:33:d1:fc:46:45:41:4d:db:73:
ff:9e:5d:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:22:29 2026 by rpki-client