
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b317740-531b-36ce-80ad-0eca433fdeb5.roa
File: 3b317740-531b-36ce-80ad-0eca433fdeb5.roa (raw, json)
Hash identifier: g0fRt9uEZ+KcAbx/dliTyv1ioCPLS5cFFCGG/2rgD5M=
Subject key identifier: C7:5F:CE:B0:0C:A0:DD:4A:C9:4D:91:11:9A:54:0E:2A:E5:40:35:AB
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E6F3C2AC35EF8CCD011271780
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b317740-531b-36ce-80ad-0eca433fdeb5.roa
Signing time: Wed 08 Jul 2026 21:00:12 +0000
ROA not before: Wed 08 Jul 2026 21:00:12 +0000
ROA not after: Tue 06 Oct 2026 21:00:12 +0000
asID: 33491
IP address blocks: 68.38.58.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:6f:3c:2a:c3:5e:f8:cc:d0:11:27:17:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 8 21:00:12 2026 GMT
Not After : Oct 6 21:00:12 2026 GMT
Subject: CN=f987e4fe-6f9f-4809-8c2d-45ddaaf7adec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:a3:a0:a6:d5:7d:90:bf:75:f6:f6:b2:cb:29:
47:98:b0:2c:db:18:9d:2d:15:52:19:e1:6b:f0:8a:
31:62:98:8d:c1:d0:4b:a5:1a:38:a3:e1:e4:41:cf:
32:d6:0c:11:ff:51:41:a9:ee:d5:55:fb:4f:56:52:
1d:32:b8:7a:01:1f:76:e2:59:7d:d1:36:d9:4b:84:
d9:a4:b8:71:c4:ae:b1:8a:cc:df:27:6a:f8:fb:2c:
7a:29:7c:74:ae:96:3a:6e:19:dc:45:fd:89:c4:33:
37:a7:da:d5:5c:1b:9f:f2:64:43:f3:11:c5:60:d1:
92:1f:65:a0:72:a3:c3:5d:39:29:15:4d:c7:1a:e5:
dc:87:3a:bd:26:dd:77:d3:61:c2:0e:08:aa:14:9a:
72:e0:0f:89:e2:c6:3e:02:0c:91:78:73:22:61:ac:
91:bb:0b:b4:51:e2:cf:72:79:f1:5e:91:0d:4f:e5:
0d:1f:5d:a9:f8:36:26:ef:17:e7:d2:d2:da:ab:c6:
ab:c7:e8:8a:49:45:a8:df:25:ad:8d:68:7c:57:8e:
3b:4a:ae:87:81:74:be:9f:2a:a2:d2:8c:f8:87:00:
7f:75:3c:5c:de:7c:35:29:f8:29:ee:73:8b:4e:fd:
9e:0f:4d:dc:f3:b5:10:97:7c:75:50:8d:1e:79:86:
fa:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5F:CE:B0:0C:A0:DD:4A:C9:4D:91:11:9A:54:0E:2A:E5:40:35:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3b317740-531b-36ce-80ad-0eca433fdeb5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.38.58.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:e7:2f:6e:80:9d:f7:0e:00:a8:ba:fc:4b:7a:70:69:0f:9f:
db:60:7b:f3:0a:01:8f:9c:47:bf:54:aa:72:f3:8f:74:db:dd:
b0:1c:04:0b:05:03:6e:a8:2f:36:43:ea:7a:7b:78:68:29:04:
99:fc:0d:92:e9:0c:72:05:70:45:1b:5d:ec:d9:1c:22:c3:5f:
91:ea:aa:66:15:d0:81:76:88:c2:28:8d:d6:88:ad:f8:82:33:
c6:db:19:db:c8:d6:d0:ca:18:a7:f9:8a:f1:bf:2d:ab:29:7e:
b6:ef:df:bb:47:91:fe:6a:6b:00:97:00:5f:35:80:7d:68:4e:
bc:ef:7b:51:5a:22:74:fb:e4:48:52:d9:6f:ea:24:5f:41:4b:
e3:e5:fc:9a:d7:6a:45:f7:19:a9:50:07:97:1e:66:18:14:ca:
aa:60:6e:58:ef:6f:d1:46:fc:81:8e:be:30:47:e8:c4:6a:d5:
8e:6b:15:c7:20:af:bb:08:61:f8:f5:ac:f6:2a:d1:7f:be:b4:
87:59:ed:5b:1c:57:df:b8:b1:f1:63:ef:21:e0:53:a6:5a:53:
ae:35:1b:33:11:90:d1:93:06:d7:00:ba:86:d5:9c:c0:b4:a1:
95:06:92:d2:ad:49:85:eb:ad:7d:68:18:da:8c:9b:6c:49:06:
df:5f:66:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:15:56 2026 by rpki-client