
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc5d134d-33f4-309d-aacc-a27acd7d3b8a.roa
File: fc5d134d-33f4-309d-aacc-a27acd7d3b8a.roa (raw, json)
Hash identifier: eNbmkor2XFGKw0i8Enkt5PHEVJY3bJSAKrjA+CyjM2k=
Subject key identifier: FA:C4:E7:0B:3F:56:50:79:A8:69:F5:A8:F1:5C:E6:5E:59:1F:45:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF62ED2FBB769AF70E46A00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc5d134d-33f4-309d-aacc-a27acd7d3b8a.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33491
IP address blocks: 68.59.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 23 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f6:2e:d2:fb:b7:69:af:70:e4:6a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=8daf3ea7-c4b0-41b2-8496-98644087e077
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:18:eb:9a:ab:e2:ee:38:55:b1:54:96:a2:
43:1a:c4:b4:1a:62:44:8e:6b:9b:5b:e1:3f:0a:9a:
cb:8a:b9:90:c9:ca:82:be:3e:2f:1d:a9:83:4b:9d:
be:6d:1d:26:4f:81:5b:25:f2:8b:a2:90:b2:67:76:
47:00:ab:ec:60:ea:eb:44:f3:26:97:ea:44:d5:1e:
d4:85:1a:ca:36:f3:ce:61:5e:0f:e8:a4:e1:8f:98:
ed:87:6f:8c:72:9d:ff:80:04:91:8e:55:5d:97:12:
1f:60:7b:00:3a:97:22:12:bd:db:2f:0b:60:fb:47:
8b:d1:78:03:b0:8d:7b:e4:5f:04:2d:1f:9c:d8:61:
2c:ad:2a:ab:02:5f:7c:e0:14:72:a9:d3:cf:31:b8:
d2:46:1d:9f:75:58:c9:cf:8f:61:73:f6:78:ca:84:
94:94:9d:04:bf:2a:d4:9b:5d:bc:c4:e3:c6:2e:b7:
af:54:07:e8:ec:21:14:25:10:54:d1:d0:f4:6b:f8:
64:10:31:77:70:85:b2:87:cb:59:fe:6c:ac:fe:5a:
64:72:ab:43:df:b1:1f:ac:d7:82:37:99:7e:a2:f2:
18:da:84:93:37:fb:80:29:01:5f:a2:65:2f:2f:61:
21:85:bb:ae:76:e2:ef:a6:a0:22:bc:b1:d0:a5:23:
56:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:C4:E7:0B:3F:56:50:79:A8:69:F5:A8:F1:5C:E6:5E:59:1F:45:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fc5d134d-33f4-309d-aacc-a27acd7d3b8a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.59.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
da:58:36:ff:e8:76:ba:57:2e:ae:b7:24:5d:c6:9a:d5:84:f5:
df:93:f6:f2:03:98:bd:32:7b:c4:8b:74:9e:b3:49:10:5c:2e:
e1:71:de:89:03:48:d5:82:b7:cd:94:c8:4d:28:2f:b4:7d:8c:
6d:99:49:04:6c:74:da:2f:ea:3d:87:7d:3c:b9:3d:ee:cc:29:
e6:da:a8:4d:c8:9f:6c:43:28:68:00:9e:ae:27:d3:3e:1b:97:
1e:c0:c5:7d:35:4c:90:be:6e:c4:90:c5:1a:50:4d:3b:95:52:
2f:a5:06:1d:95:f4:32:ca:78:5c:cd:10:5b:29:d1:66:64:93:
e0:d7:41:55:4c:77:99:50:5d:4b:a3:ac:3c:e3:c6:f8:fa:26:
6a:9a:3e:e3:96:c6:ca:c2:82:a0:b0:8d:a3:f8:af:9f:dd:e8:
56:60:1f:85:70:6d:c4:66:9e:d0:07:54:0e:91:c0:3b:d5:b3:
2e:f5:65:c3:98:a4:14:37:c6:4a:e3:bf:62:65:1c:51:f9:60:
9e:e2:65:bc:f6:6d:88:90:70:15:0c:a1:b3:ba:23:91:4a:4b:
c1:78:7e:90:40:a3:ea:db:dc:cc:6b:8a:15:24:db:f3:ed:d0:
23:5f:ef:df:09:cb:90:93:fc:e6:ce:1f:8c:e0:57:00:49:d1:
39:bb:0f:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Apr 21 20:20:15 2026 by rpki-client