
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
File: 2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa (raw, json)
Hash identifier: AhhwOkzg0egJV4cdirc6fte2W3dHnlSpF87h/j6oq98=
Subject key identifier: 3F:B9:91:38:69:57:C3:1F:CF:0B:54:99:3C:10:D1:D8:3E:A6:FE:7E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863D96116DD71CDDB11E520
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.40.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:d9:61:16:dd:71:cd:db:11:e5:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=55588f4e-f8e1-4ca9-8c93-b3ea4ee01e55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:a3:db:ca:d2:0e:04:99:aa:9f:6f:65:4b:22:
29:71:10:20:61:61:e4:b1:33:d9:99:aa:3d:8a:00:
2d:ee:b6:6e:ea:f6:90:83:6b:45:7f:78:22:d8:9b:
1d:73:b5:e0:df:a5:2a:1d:9d:21:53:55:bd:54:75:
90:ab:d1:b4:ba:43:58:36:15:08:9f:1c:94:ac:4c:
36:ba:53:c7:bd:72:1c:dc:12:0d:c3:25:f3:1d:99:
c0:b0:02:69:64:92:18:99:23:1f:dd:39:fd:7d:f6:
fe:59:b4:ca:93:ff:57:98:b2:89:11:c3:a8:9f:fb:
27:1e:4e:06:73:b1:4e:88:b4:79:94:07:0c:3e:84:
88:ce:6e:a9:0b:33:cd:c8:ff:07:3f:a4:1a:56:d0:
4c:2b:e9:96:d8:35:25:6e:8c:d1:c1:dc:be:24:be:
f8:61:d4:87:6a:ca:d8:8b:ee:cf:6c:3c:90:a2:d9:
77:95:72:b3:94:77:28:7e:03:ce:42:6d:80:9b:fe:
09:b9:1d:e4:20:81:01:28:a7:dc:b5:c5:92:9d:50:
40:af:b8:d1:c8:a3:31:47:98:16:12:f6:80:f7:b2:
95:19:2d:91:d2:02:96:49:f9:49:9b:eb:5b:fd:41:
e2:78:e9:7f:ff:90:c5:b6:f3:45:06:c1:ed:9b:26:
19:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:B9:91:38:69:57:C3:1F:CF:0B:54:99:3C:10:D1:D8:3E:A6:FE:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/2d8777c6-c207-3f4f-bce4-13a34d9bf4bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.117.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:56:65:9c:71:85:61:fa:ed:3b:77:89:11:02:bd:14:aa:50:
54:2b:d9:f4:2a:34:a7:48:46:2b:3d:c1:c1:d3:f6:1b:dc:bf:
bf:50:70:cb:d7:89:4e:9b:06:19:d9:61:a0:41:40:c7:0d:b6:
0f:46:34:a6:3c:d1:8c:9d:4d:79:6e:94:62:0f:4b:f1:dd:b7:
78:51:35:b6:01:6b:76:eb:b5:6c:e2:b5:d9:07:dc:e1:12:75:
ba:62:62:cc:8c:77:21:e9:59:a3:c2:a6:8f:58:48:c3:45:1d:
83:0f:7a:8b:e2:5a:68:53:61:d0:de:d9:41:b5:58:05:00:f9:
04:00:c1:b3:1e:63:f4:f6:a6:e4:93:90:d4:83:29:b8:c8:61:
52:da:f1:a4:44:19:d8:ac:ab:72:68:b4:aa:71:12:fd:9f:4a:
60:cd:b8:76:5b:09:d1:ac:97:cd:86:8c:e5:02:1b:59:da:35:
74:83:c7:d8:b1:1e:f6:3c:cc:da:e7:7b:cf:88:e3:cf:d0:37:
f8:21:c6:24:a4:9d:05:eb:20:83:16:0c:aa:b4:8f:53:d4:1a:
4a:4d:a6:23:df:e1:8a:bc:a4:e7:fb:6d:4d:52:74:41:e7:8e:
2a:39:19:69:56:9f:8d:d8:06:fc:d5:70:82:92:60:35:24:b8:
5c:5d:d0:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:14:18 2026 by rpki-client