
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa
File: caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa (raw, json)
Hash identifier: pCFtwvske29TDyZnB7i/6yydhco6Hwy5wsiUx/eXN4E=
Subject key identifier: CA:0F:1E:75:8C:6C:9C:CA:95:78:9F:2A:42:F0:D5:C9:1A:45:B6:F6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E3600F07CE8A05B2F99A89980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33668
IP address blocks: 68.32.136.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:36:00:f0:7c:e8:a0:5b:2f:99:a8:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=c3192c3d-d309-44ff-83fc-e318bc6de53f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:b3:02:56:1b:58:4e:f3:02:fa:a3:1d:b1:f8:
6f:97:12:08:38:4a:d1:71:b1:3e:22:9c:31:81:ec:
f5:d7:19:70:8a:9a:98:89:2f:b4:5c:6c:89:49:0e:
2d:44:47:2a:39:fd:29:c2:e7:81:3e:c7:ee:91:5b:
53:7c:12:09:7a:44:7d:13:67:be:bf:88:d4:34:b5:
b7:19:0d:f1:e9:a6:0f:13:ea:ab:77:2a:ae:1a:1f:
83:cc:02:3b:76:d1:ec:22:99:60:31:a1:6f:c4:fc:
52:a5:2d:34:18:eb:15:48:a4:0a:c4:70:8c:91:0d:
cf:98:62:52:30:3d:03:f6:8c:cf:49:59:18:58:68:
07:f9:37:47:8c:47:bc:e3:fa:5f:04:95:40:5e:b6:
43:68:1a:62:1a:19:f4:28:25:b0:d2:8f:f9:81:21:
f7:5c:06:ed:93:a8:0c:2e:48:3f:94:5d:68:7f:14:
a0:f2:31:e9:89:46:2f:29:df:c2:6b:ba:4d:e1:ba:
b8:72:43:e8:ea:57:4c:34:1d:3c:b3:52:db:87:da:
0d:55:58:a5:12:ba:1e:7e:be:f3:0f:16:0a:6c:c2:
0e:f9:66:13:31:cf:30:8f:e9:97:27:17:ac:96:6f:
b1:7f:0f:17:0e:c8:18:7c:2e:b7:e0:62:73:4f:07:
0b:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:0F:1E:75:8C:6C:9C:CA:95:78:9F:2A:42:F0:D5:C9:1A:45:B6:F6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/caaa0770-2e43-3083-a6b9-e2ae04175d6d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.136.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0c:05:13:f3:3b:5d:06:3c:8b:34:1e:58:e4:77:82:1b:c1:88:
42:88:d2:12:bd:a6:81:60:2d:07:3c:62:56:d3:93:91:b9:7d:
f8:94:1b:39:8c:6f:45:52:cd:00:fb:14:9f:67:0e:65:b8:bf:
76:ea:95:c4:a3:69:6e:f5:f1:23:71:ef:f0:54:55:1f:68:e7:
fc:ec:05:c2:ea:84:8b:3d:88:8a:7f:21:03:6a:e1:6b:cd:7e:
b2:27:e7:f5:10:84:09:80:7d:9c:51:01:d4:fb:b2:68:36:a3:
db:7d:65:ca:cd:a6:49:20:e2:91:86:b9:65:03:d5:61:94:7b:
be:d5:f8:1b:12:0d:cc:2a:11:03:19:ef:25:d3:a1:45:ef:80:
3e:47:5c:ba:be:23:7c:2e:db:2f:4a:26:90:3a:a1:79:0b:e8:
fb:7e:51:6a:f6:17:78:a7:57:ca:b2:b3:63:4c:4e:42:95:c5:
f5:cc:5b:3f:0b:5f:25:c2:d1:4c:1f:57:d8:44:01:59:6f:5b:
b7:fb:47:e3:44:ef:32:b4:fd:58:cb:ec:59:78:eb:2a:ff:0c:
5a:91:d3:39:b9:f5:d5:5a:2d:1e:cd:6f:c5:da:fa:4a:88:1c:
25:00:d3:0b:e2:ea:99:06:e0:77:99:76:b8:94:0a:a9:02:7a:
ef:15:92:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:31:22 2026 by rpki-client