
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2948afc9-423e-3da8-9e6e-fdeb2169027d.roa
File: 2948afc9-423e-3da8-9e6e-fdeb2169027d.roa (raw, json)
Hash identifier: ZDQL9w2vu7LXRCwrISvQ9XDKz1D4AUXID5I9S4s9egg=
Subject key identifier: 04:CB:AE:9C:C3:F9:57:A4:EB:F3:C4:69:F6:AF:DF:D8:A5:CC:32:1D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E35FFDE5065402CBC6EB21B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2948afc9-423e-3da8-9e6e-fdeb2169027d.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33668
IP address blocks: 68.42.194.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:35:ff:de:50:65:40:2c:bc:6e:b2:1b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=4290171b-6dd4-445d-b97e-39a9edb1e1f4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:37:ff:a1:e1:6b:bc:ab:2c:2a:88:49:95:7e:
55:f2:26:88:ae:0f:df:80:88:9d:56:e8:5f:56:fb:
39:ee:b4:d3:46:37:e6:49:21:e6:7a:1e:2c:65:95:
c2:fd:d0:b8:1a:bd:5c:b8:63:eb:5b:8c:55:24:2b:
74:1d:dd:fb:fd:9e:f5:fe:63:03:ca:dc:59:11:ce:
15:38:df:1e:67:77:91:68:2c:52:8d:a0:3d:fb:4e:
f2:15:e9:b0:56:7c:d4:58:53:df:50:83:d8:1d:95:
15:06:f9:ae:61:66:37:28:76:4c:83:88:19:c7:86:
b8:06:13:35:9d:2c:22:1b:88:d0:d4:3c:d2:0b:fd:
98:47:c4:23:1e:52:64:2b:1e:1a:af:e5:d0:17:38:
3a:eb:ea:82:50:c8:9b:6e:30:cf:ed:05:2f:65:fb:
8a:e7:5a:66:21:6d:45:43:c1:be:45:07:a1:36:de:
08:b0:fe:ce:c4:93:ee:2b:98:5c:b9:81:9c:a9:dd:
85:ae:c6:ed:0b:91:d9:d0:a2:f0:26:89:54:12:5a:
b4:87:c3:2a:09:53:d2:0d:12:dc:af:49:5d:5a:58:
04:24:4d:67:91:0f:56:d9:a9:e8:38:b7:f9:56:35:
59:98:ff:27:4d:6c:92:ec:71:8e:88:12:a6:72:5c:
3c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:CB:AE:9C:C3:F9:57:A4:EB:F3:C4:69:F6:AF:DF:D8:A5:CC:32:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2948afc9-423e-3da8-9e6e-fdeb2169027d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.194.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:a6:a6:6e:76:cd:05:aa:a8:04:92:b0:bf:ca:98:d2:6e:f1:
f2:26:0c:f9:66:51:82:ad:88:5c:bb:66:8a:d5:5c:91:f8:ef:
47:ff:ef:8b:d8:7d:ba:de:10:77:7e:da:bf:d1:2b:6d:5d:cc:
70:62:1f:b5:8d:d0:ad:44:5b:77:04:f1:bf:55:d9:ac:b5:df:
29:91:c3:07:5a:42:2a:da:a6:73:c5:e7:5d:a6:a3:91:af:06:
3d:fd:f5:a7:4e:a1:c9:76:a5:06:a7:95:54:52:46:e4:ba:ac:
d6:4c:5b:e5:96:f5:23:74:13:3d:da:4e:0d:a6:90:b1:3b:ef:
27:75:b4:9d:12:a4:00:72:46:03:90:83:0f:99:96:94:b1:ec:
ba:01:cd:50:3d:2e:5d:1a:c8:ba:84:f6:ce:b7:64:aa:d4:2a:
b0:f8:65:06:77:ac:81:03:c2:20:2a:2a:20:e4:f3:51:ac:b0:
0f:01:ba:cb:7d:13:fa:d2:ae:10:2e:17:44:a9:c0:64:39:c3:
9a:bb:94:55:8f:a7:0c:8b:0a:c0:bc:a8:17:b9:3c:a1:f4:18:
b7:ec:ef:e0:26:3c:a3:92:b6:c3:0f:ed:31:33:17:89:d1:1d:
94:5f:69:72:81:d9:fa:a6:51:5b:80:c8:df:28:02:4a:3d:bd:
17:e7:5c:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 04:34:56 2026 by rpki-client