
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
File: 4abebfc4-4b83-3d10-9999-aafd39dd7329.roa (raw, json)
Hash identifier: 4MhQT6G3s9U0Ri6w0rgBG3l012/Mtf5/k1605x/x8HA=
Subject key identifier: F4:25:6B:CE:2D:10:E6:CD:E8:76:8D:7A:8A:67:A0:CB:EE:8F:A0:6A
Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial: 010D0C9F4328584DA697843708F5BCBFFED31E80
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
Signing time: Tue 28 Apr 2026 00:11:03 +0000
ROA not before: Tue 28 Apr 2026 00:11:03 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 30221
IP address blocks: 68.68.192.0/21 maxlen: 24
68.68.200.0/22 maxlen: 24
68.68.206.0/23 maxlen: 24
68.68.208.0/21 maxlen: 24
68.68.216.0/24 maxlen: 24
68.68.218.0/24 maxlen: 24
68.68.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 08 May 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a6:97:84:37:08:f5:bc:bf:fe:d3:1e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
Validity
Not Before: Apr 28 00:11:03 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=90c14c37-421c-462d-8173-1da90be8dc9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3c:91:8f:9d:7d:f1:75:9e:f2:73:41:2b:2e:
f3:03:68:c9:ca:10:6e:34:aa:0f:83:22:9a:dd:8a:
d1:fa:2f:34:9b:c3:cf:30:ec:14:2f:ff:e0:d5:82:
a7:d1:c8:fe:1f:13:88:75:05:3a:80:11:5f:10:32:
f8:6b:e5:09:6f:92:9e:d8:ac:5b:1c:f0:36:ea:ca:
e5:d2:02:39:23:40:c5:62:3f:41:05:a0:dc:96:c6:
85:46:b4:27:53:04:26:88:5a:07:d9:4a:27:e5:ad:
d7:16:9e:41:6c:e1:cb:9b:05:0c:c1:bb:34:3b:94:
68:e2:25:2c:42:34:ab:f0:be:79:a6:c1:c6:35:0f:
d1:b0:4f:eb:ec:eb:ca:ef:33:8f:8a:54:cf:18:f8:
bb:2b:4c:60:87:47:4f:08:24:7a:b2:ea:cd:d0:26:
45:97:08:8c:2d:79:b2:49:25:f2:39:2f:1c:87:25:
a0:07:78:b7:80:40:08:d5:6d:56:e8:42:cc:07:89:
a5:0c:e2:8d:2f:15:21:61:ff:32:9d:d4:07:32:d3:
50:ee:e4:b3:f6:60:e3:82:dd:d7:33:eb:f7:f0:54:
77:f3:3e:2a:7b:16:7f:db:a3:89:f0:60:5f:c8:91:
63:2e:cd:26:ab:00:28:52:c8:2f:ef:ba:c3:e2:ff:
a6:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:25:6B:CE:2D:10:E6:CD:E8:76:8D:7A:8A:67:A0:CB:EE:8F:A0:6A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
X509v3 Authority Key Identifier:
keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.192.0-68.68.203.255
68.68.206.0-68.68.216.255
68.68.218.0/24
68.68.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:80:af:8d:d7:fa:cd:62:d9:ab:64:d3:be:5a:fd:46:cd:6e:
a5:78:ee:ae:d5:7d:3e:ee:ee:2e:02:5b:64:cc:5f:73:9e:01:
44:7f:f0:56:33:3d:53:92:bc:d1:c1:27:72:35:19:25:a4:42:
d3:9c:e3:aa:a5:60:1e:eb:ba:c1:41:78:ae:81:1a:c1:d1:13:
b6:e7:a0:4a:85:b1:56:0a:ab:38:1f:0e:5e:5b:64:a9:61:ce:
38:73:19:4e:27:e1:3a:17:99:6b:a0:a6:66:9f:94:ef:8e:7b:
44:8b:ea:48:af:7a:4b:39:34:94:ef:01:0a:02:52:2e:71:b1:
0b:20:b2:21:ba:8f:e9:b2:0b:33:86:2a:79:87:e5:4d:0c:f8:
26:61:db:d8:ee:10:30:d5:92:4f:ab:db:5c:50:b7:25:d5:bc:
8e:7b:16:30:c7:81:53:5c:39:a5:20:cc:65:4e:be:60:8a:79:
49:14:5f:4c:a2:8c:82:fc:32:b0:9e:e3:90:9f:0e:3b:fa:2b:
94:0e:28:47:de:52:3e:a0:ce:88:7c:cd:90:37:89:d0:a4:43:
66:66:98:a9:1c:79:e5:ab:8d:43:9a:5d:1a:e0:1c:95:a8:06:
a7:d1:a4:b0:d4:28:4f:4a:6a:2e:0f:c3:46:bb:4a:75:be:9a:
db:46:ac:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 7 01:14:52 2026 by rpki-client