
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/172de811-4bd1-337c-a2a1-d4acf27533b5.roa
File: 172de811-4bd1-337c-a2a1-d4acf27533b5.roa (raw, json)
Hash identifier: DWxMVd83saCHpGArdyEG8oANWUll600jxRILpfT45CM=
Subject key identifier: D9:E1:DE:FC:53:E7:21:27:FB:11:47:04:AD:CC:79:9C:92:95:E7:34
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E360105F05F3BF82A3E56CC60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/172de811-4bd1-337c-a2a1-d4acf27533b5.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33668
IP address blocks: 68.56.254.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:36:01:05:f0:5f:3b:f8:2a:3e:56:cc:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=1af09de2-1ddd-429d-a5b2-197fd829e634
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:4d:3b:be:a6:15:1f:9e:af:a5:32:08:60:7b:
e0:04:fe:45:ac:78:d9:8d:cd:c6:6b:9f:9a:20:57:
b6:c9:50:45:90:92:df:78:2f:3d:a1:cb:f0:f4:a4:
3e:6f:1a:ec:3e:ab:46:7f:b7:f4:46:69:a9:b9:dc:
c9:65:d8:9c:10:eb:31:c4:b8:1a:77:7b:fc:a4:be:
04:f9:0e:ef:1a:ee:0e:59:51:37:e9:06:8b:98:69:
99:fb:50:23:cd:1a:0a:8a:08:81:06:b9:29:4c:63:
56:4b:c0:a2:63:ef:e8:d1:e5:98:58:e2:eb:81:fb:
bc:1e:1e:6d:40:4c:8f:0f:12:ba:c5:e7:46:42:d5:
e3:4d:99:01:1d:f8:25:f0:2e:f7:96:db:db:aa:d8:
b6:bd:dc:17:10:c2:aa:dd:82:aa:27:58:33:a4:dd:
70:16:85:da:4e:c5:e5:a7:84:85:b9:f2:09:94:30:
ea:94:cd:d7:e2:94:d3:cc:b4:0d:65:5e:db:d6:e2:
eb:91:91:71:c7:db:1d:d6:a3:41:37:6d:84:1e:84:
72:3e:e6:6f:39:64:ce:1d:dd:0b:59:ed:98:e9:68:
8f:a5:de:a8:40:9f:51:98:b9:74:3d:fe:25:be:14:
ea:20:81:53:ac:6f:33:a0:09:9d:eb:49:05:0e:81:
d1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:E1:DE:FC:53:E7:21:27:FB:11:47:04:AD:CC:79:9C:92:95:E7:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/172de811-4bd1-337c-a2a1-d4acf27533b5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.254.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c7:30:47:b7:b6:05:01:9b:25:c8:01:be:88:7e:3c:95:67:46:
6e:da:e3:99:23:82:c7:cf:85:e1:21:ac:87:ee:a9:4e:bc:4a:
cc:4d:61:53:35:1b:28:ce:86:8d:42:9c:5c:2e:66:a2:67:5d:
eb:cb:8e:b5:35:43:74:c5:19:96:5e:03:ba:89:fc:9f:53:68:
41:23:40:48:6f:2d:c0:7d:05:60:76:90:77:3c:70:dc:35:6c:
d9:20:cd:7f:56:a9:02:76:3a:77:15:d1:cf:20:28:03:25:b7:
7e:44:3d:57:6a:ee:54:03:99:f6:69:0c:ec:21:61:38:bf:88:
ff:51:c8:a2:38:d9:e4:3b:d4:9e:f9:22:6f:2a:ea:94:86:a9:
5e:43:83:e5:61:61:c2:9d:99:15:65:bf:73:5a:39:d6:e3:4d:
9b:bc:09:c7:4c:85:2a:5e:f9:92:4f:1b:7d:39:c9:fa:e3:b3:
27:82:37:ea:48:fe:1e:e6:94:b7:3e:f6:89:ac:8b:e3:5b:f8:
2c:88:9f:fb:c3:3e:06:30:1c:75:9d:d4:6e:f3:c9:51:e8:c9:
85:08:c3:6b:20:39:57:5c:6a:05:16:11:59:ed:64:e3:bd:90:
d4:04:84:50:8c:26:00:fc:02:47:9f:73:f3:7e:3b:94:7e:f0:
11:03:de:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:28:19 2026 by rpki-client