
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/350ce59e-1542-30d8-bc8d-a47811134b70.roa
File: 350ce59e-1542-30d8-bc8d-a47811134b70.roa (raw, json)
Hash identifier: VvXzvRfjevG2+DH9pODSDpQkLlr4j/1BBhr1bKsMWG8=
Subject key identifier: B1:C1:DC:B1:DE:24:87:D8:ED:F9:17:AC:3E:20:2F:25:95:F4:82:4C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119DAD761455A655CCE4E840
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/350ce59e-1542-30d8-bc8d-a47811134b70.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 68.38.220.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:ad:76:14:55:a6:55:cc:e4:e8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=d3239fe3-0d25-4d80-98f6-e49683ab03a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1d:25:af:3b:e7:3f:2b:e9:57:6d:55:b5:6d:
6e:e9:39:80:a2:33:6b:cb:59:ce:c5:3a:e3:c8:c3:
c2:80:02:aa:7e:78:eb:2a:6f:c6:92:15:c1:d9:e6:
8d:90:cb:e2:16:da:d4:8d:12:f0:c2:1c:bd:14:0f:
b0:76:21:b8:23:66:68:f8:d5:91:9a:b8:63:b0:62:
b4:04:56:95:89:69:79:2e:2c:c3:0b:c4:01:d4:2c:
95:64:fc:a7:46:65:61:5e:6d:58:c9:0a:2b:97:66:
23:72:12:18:5b:18:21:76:c9:87:08:58:48:af:27:
56:4e:09:4b:74:28:74:ee:4c:a8:c1:c7:3e:89:eb:
a9:f7:54:34:65:9a:c9:47:6d:15:da:2f:c4:70:d5:
bc:01:bf:c8:32:29:29:e8:51:5f:16:e9:b9:1e:5b:
d5:96:9c:29:71:b2:aa:fe:e0:21:7f:d5:cf:95:dc:
df:83:72:83:d3:f2:0c:6d:f5:8a:46:8d:df:09:04:
e6:8c:97:49:97:45:81:da:b8:ea:2f:dc:47:cd:a3:
c7:9f:c1:32:1b:9e:52:f1:34:3a:51:49:76:05:7c:
d3:c1:25:81:92:f4:58:4f:80:17:b0:c2:9f:99:06:
f5:48:9d:f8:ed:64:1c:72:05:d2:a4:ff:42:18:e9:
43:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C1:DC:B1:DE:24:87:D8:ED:F9:17:AC:3E:20:2F:25:95:F4:82:4C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/350ce59e-1542-30d8-bc8d-a47811134b70.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.220.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:46:99:07:bb:31:fb:8f:57:f6:35:92:02:8c:db:9d:7a:0a:
87:59:b4:2a:90:92:0f:17:f6:6b:56:d5:14:31:a8:56:28:f3:
67:b7:0c:be:32:e8:d8:99:86:eb:b8:02:82:66:90:b9:b8:c8:
94:21:f5:6e:97:6d:3b:68:66:b2:62:4f:53:93:33:4d:3e:08:
82:de:27:f2:f3:a1:3d:69:ed:e1:51:83:a0:74:fa:47:8c:ff:
af:d9:1e:a7:5a:a6:27:2d:f5:49:c3:fa:6b:75:94:bd:17:6c:
24:72:a8:9c:1d:89:86:3c:39:52:95:ef:95:15:a3:b7:36:03:
5e:be:ad:a6:8e:21:0a:8c:f7:10:ac:59:e2:9b:ad:d5:81:a8:
2b:12:d7:4f:eb:a1:ef:15:11:f0:71:27:a5:85:7d:41:83:77:
38:fd:59:85:6f:a4:83:3b:fa:08:29:f4:b3:1d:05:c9:12:f1:
c0:05:61:1c:cc:73:68:96:64:76:54:18:00:d5:c3:d6:a5:5a:
36:18:ff:de:46:4d:a8:d0:25:eb:15:02:a3:ca:a9:ed:0f:e4:
cb:0c:4d:2b:15:ee:5c:03:d8:98:dd:78:74:e4:b7:45:a6:af:
25:c1:fc:f3:b2:3d:e0:c3:9f:01:58:00:ac:7c:35:20:5c:0c:
7d:29:69:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:14:07 2026 by rpki-client