
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0867801e-d79d-31a7-884a-a18a22b8cd9f.roa
File: 0867801e-d79d-31a7-884a-a18a22b8cd9f.roa (raw, json)
Hash identifier: KGVgxRoJf18ZhgvMhImQXa9wZLEsLXsX+8mfHdhp9nY=
Subject key identifier: 3A:62:4D:A8:59:E3:E3:B6:1C:98:96:D1:8D:28:EC:87:EB:38:D5:CC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E3601015D7A6310512681E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0867801e-d79d-31a7-884a-a18a22b8cd9f.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33668
IP address blocks: 68.49.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:36:01:01:5d:7a:63:10:51:26:81:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=8c80152e-2e53-4355-92db-3c83e5bec8c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:ca:dd:b9:d2:1e:00:f3:66:e1:df:f6:5e:ff:
4c:0f:4f:e1:3f:e1:1a:ca:cc:40:0a:54:82:65:dd:
4f:46:cd:7b:49:7a:15:62:9f:1e:ce:bc:02:5b:b2:
4c:8e:fb:6e:3e:3b:33:1a:22:9f:5e:9c:64:34:94:
7a:09:c8:09:0f:6e:d1:9b:8d:87:f9:e2:6b:91:0f:
72:95:12:a6:1c:61:69:27:21:8c:2c:da:ce:7d:e6:
e6:88:89:75:63:ae:e4:a4:4b:f1:e8:7e:aa:e3:e8:
de:02:ef:90:e8:79:07:30:e9:ff:51:5d:bd:28:fb:
32:e6:b7:1f:eb:1f:e9:0c:64:cf:5c:3c:55:2a:a4:
d5:f9:38:f5:b0:bc:60:14:2b:b1:44:da:5c:6a:e6:
87:46:18:51:4e:99:98:1b:3e:53:c2:cb:6b:42:9a:
4f:c0:03:84:46:ac:e6:ee:57:79:fd:f5:76:fa:24:
ef:35:9f:c4:7b:b2:7e:6d:b4:4a:47:6e:89:3b:ef:
85:b0:f5:7b:84:68:3e:6d:1f:8d:70:29:ad:7c:a4:
89:65:ec:d4:6b:4f:fc:2b:99:60:2b:fc:e6:fe:89:
93:c5:ad:e1:7f:b0:03:96:ab:5d:50:46:e9:de:45:
4c:f9:56:72:f0:ec:95:22:88:3f:3f:b2:a1:17:84:
ad:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:62:4D:A8:59:E3:E3:B6:1C:98:96:D1:8D:28:EC:87:EB:38:D5:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0867801e-d79d-31a7-884a-a18a22b8cd9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.49.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:71:3b:ae:62:b8:1c:6b:7a:e7:0f:d2:09:2e:91:3a:ad:ba:
b8:0c:ed:91:1d:8d:1a:be:df:5e:24:1d:c9:0b:03:63:fa:a6:
08:8e:02:e5:27:bc:5c:f6:41:d9:03:9b:96:03:45:34:e5:22:
fd:6c:85:33:68:bf:7d:1d:12:c0:38:ec:ae:db:54:29:18:5a:
92:30:5a:00:e5:d6:e8:5d:90:39:ad:4b:20:33:0c:7e:d2:d4:
df:a5:7a:75:b3:b4:09:25:9b:e9:3e:8d:06:f0:7a:db:25:1c:
7f:97:41:56:3a:96:a5:24:85:ce:17:da:22:b7:1f:12:35:ad:
e2:f3:32:b5:a3:a9:fc:6c:82:17:0f:17:39:96:cc:a5:8c:3e:
7b:91:c3:39:85:c0:44:3d:3e:9f:df:50:ff:6d:49:16:ff:61:
11:2c:da:82:f9:00:8b:fc:29:e5:03:1e:52:51:73:e2:5c:f7:
80:85:7c:e7:a9:41:16:88:9d:20:0e:0d:ce:bd:ed:bf:ca:8d:
b3:ed:7a:38:1c:b3:4e:f5:e6:77:23:d8:f4:70:34:6f:14:f3:
19:7b:78:a6:75:03:ad:d1:7f:cd:b7:fe:77:09:85:12:8f:b7:
ca:c5:af:b6:73:32:fe:b4:05:67:bd:c6:45:80:8f:35:1a:2d:
28:a2:da:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:32:55 2026 by rpki-client