
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb332-7e2f-36c1-bb71-17edac85fe85.roa
File: 667cb332-7e2f-36c1-bb71-17edac85fe85.roa (raw, json)
Hash identifier: aLNDbO+ugVJnP5FAepTaCJLF+cD/+V8B93Oxwq6O67A=
Subject key identifier: B7:76:99:5B:27:74:F5:5E:C2:F1:0D:01:B1:24:05:E0:C4:8C:7B:00
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF6217DE7E9EABA5CDF3800
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb332-7e2f-36c1-bb71-17edac85fe85.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 68.39.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:21:7d:e7:e9:ea:ba:5c:df:38:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=83406e46-ebba-421c-b9df-3f9ed8e8f9ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:17:2d:6a:c7:33:ef:df:51:ea:61:1f:2a:06:
ad:ab:b9:33:b9:69:ae:75:34:cc:1e:cf:f4:fd:63:
00:f6:04:7c:5b:d7:b4:8e:33:c5:dd:6a:8f:4e:84:
05:14:f7:7e:6c:3b:a5:aa:20:3a:2f:ad:f1:34:ed:
f2:e2:08:04:2f:12:bc:13:b3:5d:7e:36:c2:6d:a3:
7f:c2:37:b9:b4:7c:07:a0:4a:4c:2f:9a:96:5f:54:
20:4e:41:a4:1a:77:a2:d2:66:6d:d4:93:58:10:77:
7f:be:e6:10:d5:e2:7a:8b:22:be:76:6e:79:1c:b0:
94:17:b6:4f:d9:02:fa:85:b4:2d:cc:69:47:43:4c:
49:98:59:a9:04:ff:45:2f:f0:03:29:2d:1a:2f:1f:
b9:e5:12:d8:05:cf:2a:c8:d9:db:f5:3e:23:76:c1:
48:0a:e2:05:17:41:ca:a9:84:86:d8:06:dd:89:1b:
ed:f7:ba:54:7d:0b:8c:98:89:38:96:28:42:d0:d7:
c5:02:de:25:5a:7d:82:98:d4:f5:4d:3b:27:2c:5d:
dd:ce:79:3e:c9:12:e8:aa:35:a8:b4:12:32:5b:6c:
37:ae:9c:82:c3:e5:5a:2f:4c:80:40:fb:f7:9a:c1:
8f:a6:d4:b2:c5:1b:d0:61:68:82:f8:96:a1:fa:d0:
90:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:76:99:5B:27:74:F5:5E:C2:F1:0D:01:B1:24:05:E0:C4:8C:7B:00
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/667cb332-7e2f-36c1-bb71-17edac85fe85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.38.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:5b:03:b2:1b:d2:52:71:8b:35:8c:b4:bb:92:01:88:c2:f9:
0a:46:41:4e:1e:c5:b1:ec:36:56:f0:b7:9a:48:58:12:2b:8f:
41:23:39:27:73:e1:87:ab:64:89:49:00:48:a1:b9:36:57:58:
c5:cf:c0:c2:46:f4:de:06:70:91:fd:f2:4b:5d:3d:ff:a8:9d:
ae:74:fe:35:16:1e:9c:1f:9a:02:b1:6c:8d:c5:ab:a3:27:bf:
a9:71:d5:43:bc:38:65:b6:b7:7e:f0:2f:10:8e:dd:6d:a8:59:
9b:6c:c2:17:c7:d9:77:45:7e:eb:fe:ac:fc:84:fc:02:b0:2a:
ff:35:14:c9:30:59:c7:d9:09:13:5e:c5:90:61:8e:da:c5:86:
10:c3:1a:5f:c6:e1:f2:e4:6a:15:23:ba:66:19:50:c8:2b:17:
b5:6c:d3:c2:9f:c3:a0:cf:af:b5:fb:e8:4c:8f:93:5d:7f:47:
ce:94:9c:78:09:d1:b4:6d:0e:56:9a:9c:a3:eb:a6:31:08:91:
a7:30:5b:04:f3:75:46:31:40:e0:40:98:78:0a:35:ed:34:a1:
74:d7:bc:10:a2:6f:b8:5d:97:88:a3:6e:a0:57:c2:0c:2d:84:
59:55:48:cd:35:88:fb:02:d5:3f:e6:4f:a0:83:01:eb:6d:71:
8a:93:e1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:30:27 2026 by rpki-client