
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99b3ddd7-7e0b-39b9-80c0-33365d4d25ba.roa
File: 99b3ddd7-7e0b-39b9-80c0-33365d4d25ba.roa (raw, json)
Hash identifier: X993KR3g7X7YopWmg/OR+g0zfPD2A7CKvC+6jKJV/BI=
Subject key identifier: 6C:20:44:71:F0:AF:E6:D1:5A:62:C3:7A:EB:E3:A4:E8:DB:71:F4:CF
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D8EF7466189E7143A9BAB9680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99b3ddd7-7e0b-39b9-80c0-33365d4d25ba.roa
Signing time: Sun 19 Apr 2026 13:00:31 +0000
ROA not before: Sun 19 Apr 2026 13:00:31 +0000
ROA not after: Sat 18 Jul 2026 13:00:31 +0000
asID: 33287
IP address blocks: 68.83.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8e:f7:46:61:89:e7:14:3a:9b:ab:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Apr 19 13:00:31 2026 GMT
Not After : Jul 18 13:00:31 2026 GMT
Subject: CN=a7f726d9-f217-40b6-bfb2-ec8e9d2f2870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:6a:9d:9d:ac:eb:1d:56:1d:8d:86:07:92:d0:
30:37:03:97:1d:3d:b3:28:29:ba:be:69:48:f7:ec:
b9:67:b8:c3:81:6e:c6:0f:e3:24:7f:f1:ac:0c:73:
17:91:c8:ff:a5:fe:ae:d7:f6:fc:eb:90:03:49:ec:
ea:34:0c:ed:48:16:4a:0d:50:3e:09:8a:93:44:6f:
93:4c:e7:0a:43:81:6a:96:8c:7e:70:91:b7:ab:5a:
ab:28:a1:ba:60:be:81:f0:b2:81:1f:cd:08:31:c1:
c1:7b:03:2c:cc:7c:78:49:39:2c:4d:4e:fd:e3:95:
18:61:da:59:04:cb:37:ee:1c:53:98:56:66:91:9e:
7c:e3:fe:41:d9:c4:f6:fd:40:85:46:2c:31:a7:13:
8a:3c:c9:f9:7e:ef:10:74:f4:c4:c3:5a:b3:80:28:
91:8d:0f:5d:ac:3f:be:04:02:5d:80:7d:c7:4c:24:
b0:83:5e:ce:99:9c:b1:e9:4d:4d:92:a8:bb:1f:7d:
b6:a7:39:a9:8a:80:d0:dc:d9:90:f6:50:c3:45:b7:
2d:04:7a:8b:0f:d6:0d:7b:f2:b4:63:35:a5:6f:8a:
4b:0f:3e:b1:0f:6b:d9:a1:7f:ed:9a:38:02:63:0f:
51:98:67:6e:09:17:8c:a8:bd:94:86:2d:5b:5c:29:
bf:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:20:44:71:F0:AF:E6:D1:5A:62:C3:7A:EB:E3:A4:E8:DB:71:F4:CF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/99b3ddd7-7e0b-39b9-80c0-33365d4d25ba.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:b6:24:59:25:ea:e0:2b:64:c0:88:ea:75:bf:14:1d:1e:11:
5d:3d:5f:14:43:c3:0b:98:27:5f:91:06:f9:b2:da:9d:52:4f:
45:eb:9e:55:fb:05:64:6f:3b:66:24:8a:be:50:b2:69:07:05:
76:2c:f1:8c:b7:05:bf:24:2e:7d:e5:d7:29:c8:25:f1:b6:94:
43:64:6e:f1:29:3d:16:b3:e0:c6:87:d6:84:c0:17:7c:33:7c:
ce:a9:5b:72:4a:f2:8f:3d:5c:ec:44:1e:ec:8a:24:b7:f4:01:
ea:0a:69:e8:51:f6:4d:42:21:70:c3:fa:51:56:cf:d2:cf:41:
33:a7:ba:cf:c9:70:71:29:70:d3:3a:2b:3e:72:98:68:3d:3b:
d0:2d:ac:37:80:79:fa:91:c2:85:31:49:92:ca:9e:d0:41:e7:
ba:ed:13:6a:87:e3:d1:e2:65:2b:87:70:f6:68:de:89:75:9d:
04:93:83:b3:d8:c4:45:1d:0d:f2:0b:bd:3e:c1:66:9a:ab:e9:
f6:0e:51:22:a0:43:b1:90:7b:f9:f0:68:e7:69:ec:55:ed:e3:
02:aa:2a:73:cf:66:79:75:37:54:18:cf:f1:f2:f0:92:8f:39:
4d:65:23:51:ed:78:10:12:ec:7a:74:d7:3e:fb:89:5d:45:2a:
e6:c0:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 13:21:40 2026 by rpki-client