
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f08a7f-28c5-3eb7-a09e-c80fa620bfca.roa
File: 17f08a7f-28c5-3eb7-a09e-c80fa620bfca.roa (raw, json)
Hash identifier: GFdsi3C9j7OuiYOPBudGpWnCTx+1UdKhQXoxebVjrjE=
Subject key identifier: 61:73:F4:B4:04:C2:F2:4D:EA:C9:D0:B8:33:54:84:24:B1:52:EF:0A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F9A286F927E9072457E00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f08a7f-28c5-3eb7-a09e-c80fa620bfca.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.43.70.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:9a:28:6f:92:7e:90:72:45:7e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=fec7fe3c-fc22-4f4d-80ed-f2d1f2178a3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e7:90:45:34:3a:ab:fd:43:ab:be:9b:6c:a1:
d5:1a:5e:08:35:1e:b2:8e:0f:78:af:a9:07:dc:64:
7f:c1:bc:11:77:10:ea:d5:f0:91:89:14:09:2e:72:
cf:a1:ce:c6:b4:82:75:b4:eb:c4:e5:93:e7:eb:1d:
c9:44:69:e6:d9:dc:03:59:68:f2:9d:c3:6a:d8:30:
00:9d:45:38:ef:fb:f2:14:2f:46:42:4d:a7:5e:fa:
c5:b3:1a:99:fa:03:ad:16:52:ed:ce:f0:08:66:9d:
a0:60:d5:22:71:81:96:91:33:27:64:db:73:4e:4d:
02:67:6c:d2:e8:9c:b5:24:b4:28:64:70:e3:8d:d4:
f7:cd:21:ef:f9:3e:10:ca:39:f2:bb:d8:b0:f8:2f:
94:49:dc:22:fa:d3:32:b3:6c:ff:c8:b9:26:aa:dd:
9c:b7:47:01:55:32:93:81:e6:18:c3:d3:03:d5:1c:
c3:7e:74:f7:ff:46:61:33:db:f7:08:47:b7:3e:f5:
e6:65:55:67:8b:f6:0f:73:fc:55:03:64:07:6d:db:
f2:13:6e:c2:77:f7:61:d8:54:24:a5:bf:8a:76:bd:
c2:23:c8:15:e2:84:f5:32:fe:fc:30:85:d7:ae:03:
7c:3b:34:61:fd:25:ee:a6:53:49:b8:86:f4:3e:a9:
e4:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:73:F4:B4:04:C2:F2:4D:EA:C9:D0:B8:33:54:84:24:B1:52:EF:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/17f08a7f-28c5-3eb7-a09e-c80fa620bfca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.70.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:1c:92:a2:27:43:e2:16:76:a8:99:b2:b1:71:39:c5:58:db:
d8:a0:44:ef:0b:a9:68:5e:58:e3:26:bd:3d:5d:cb:6c:74:48:
df:35:15:59:a7:65:e0:47:e2:a3:0a:7b:73:51:03:30:33:32:
c6:7c:26:74:2a:c7:cc:d0:f9:b3:8d:51:61:6f:67:a0:f1:47:
e1:2a:92:02:61:57:d0:87:26:18:bb:82:93:75:32:0c:d5:e9:
28:bd:f6:10:9c:b9:be:e1:92:e7:82:30:e6:2d:e7:45:b3:46:
e6:31:b0:cb:02:e9:1a:2c:fa:7b:55:bf:7e:49:c6:bd:69:df:
2b:82:81:31:0b:82:a7:bd:73:94:de:a4:9b:dd:e7:94:bc:22:
f6:57:2a:a5:f6:58:a0:d1:08:5e:20:b3:af:34:00:d5:59:82:
7e:3e:61:87:32:99:31:f6:9e:5b:8e:da:ba:d4:46:85:be:bd:
23:33:66:76:d5:01:b5:b5:43:d4:b8:26:07:a8:7a:5e:85:12:
94:ac:c0:3c:5c:b4:ef:5b:33:12:e5:0c:78:cf:71:22:b3:a0:
e3:e6:43:9b:59:29:32:1d:c7:65:ae:6c:38:ac:54:17:41:c1:
f5:c9:5f:bd:a6:4c:86:72:c4:fc:c9:37:8e:6a:3c:44:65:ef:
c8:9b:63:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 04:30:12 2026 by rpki-client