
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dc4f771-f019-3d62-a7db-66fa085dfad9.roa
File: 4dc4f771-f019-3d62-a7db-66fa085dfad9.roa (raw, json)
Hash identifier: ghFjIPaL4aHoAqLjDVcAl4QpVKYijhwgU6R3a0REuuQ=
Subject key identifier: 80:40:B4:4C:24:4A:96:80:6A:46:3E:1F:2E:A2:7C:59:67:4C:0A:3C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF62D214F8C28E574750580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dc4f771-f019-3d62-a7db-66fa085dfad9.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 68.54.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:2d:21:4f:8c:28:e5:74:75:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=1577cd18-e58d-49f0-aa4e-97b08fbdef27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:a5:90:07:26:06:c0:48:92:17:19:89:47:c3:
23:4b:c9:2a:de:32:21:76:3a:1d:97:2e:8b:26:28:
70:0b:82:54:5a:0c:a0:68:27:48:6f:0b:75:21:55:
86:6c:5b:5e:e3:29:f1:af:2a:ef:d0:bd:ca:f8:f5:
57:a2:43:2a:4a:44:2b:54:ef:15:b9:f1:de:be:30:
95:46:1e:3a:ff:47:52:cf:c2:15:10:ca:ae:0c:ea:
1b:41:ec:c6:05:ce:47:aa:91:55:34:35:4c:60:05:
18:d9:77:39:f4:8f:68:67:bb:2a:29:dd:d4:3d:51:
ac:82:82:b0:8c:31:fc:c6:20:78:88:6e:f1:36:db:
d9:d2:64:eb:fa:72:6f:9d:0f:0c:ec:70:86:1e:17:
0f:5d:78:79:e1:ff:c6:af:2d:89:f0:f8:84:9f:9d:
5c:34:fc:cb:d8:9c:92:55:2f:d5:cb:eb:34:6b:f1:
52:ea:be:90:28:9f:7b:ef:60:ba:55:30:da:6a:ca:
8f:26:71:77:5e:11:a9:34:84:b8:60:79:f3:6c:24:
f1:dc:b2:a9:fc:c9:f6:b6:0b:c2:08:24:87:07:fd:
56:da:83:ff:4a:70:70:38:95:fd:c9:ff:d2:3e:74:
90:69:11:80:7f:1c:4e:29:26:01:64:3e:9f:fa:d3:
24:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:40:B4:4C:24:4A:96:80:6A:46:3E:1F:2E:A2:7C:59:67:4C:0A:3C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4dc4f771-f019-3d62-a7db-66fa085dfad9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.152.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b6:f1:60:bd:8c:5c:3b:a3:76:32:66:ae:8e:8e:94:d0:4e:73:
d1:3e:81:7d:6b:5a:24:16:ad:47:96:ae:01:8e:60:36:97:b6:
1b:f4:58:f9:5d:c3:68:bc:3c:03:48:1d:a3:02:68:f4:7a:db:
e5:ad:f3:e0:82:b7:7d:d2:b5:9c:ce:90:7b:00:0b:21:e3:b8:
08:dd:a8:b4:f4:5e:1c:21:a4:d8:e1:fe:99:2f:77:9d:2e:f8:
30:5d:66:58:cc:18:be:02:a3:d8:bf:7e:dd:5d:9e:af:86:a8:
af:8d:f4:f5:3f:9e:21:9e:1d:fa:5d:c5:c9:b0:4a:b3:68:7f:
9c:17:2f:2c:b4:91:7b:b0:a6:48:ae:dd:ee:c6:38:ce:8e:5f:
f6:f4:78:d3:14:a8:89:8f:a3:a1:05:6e:d2:e7:ad:89:0f:c0:
cd:27:f7:ea:66:e5:6f:22:85:44:13:02:4a:f5:cb:95:5d:fb:
20:ee:b2:1a:c1:63:69:91:94:cc:87:55:a1:f5:92:bd:ea:78:
57:f6:1b:ec:f3:ee:d8:69:22:ec:06:ee:80:7f:d9:0e:c0:eb:
b3:3e:17:e1:a8:8c:43:7a:68:a5:0a:8a:9d:13:9d:8f:b6:ba:
5e:28:f5:5b:7a:e1:78:f2:d3:df:87:03:9d:e3:ab:14:1d:ea:
6b:2b:cd:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 19:28:47 2026 by rpki-client