
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ebb2c2b-a993-3b86-8b70-193fe6f816c9.roa
File: 3ebb2c2b-a993-3b86-8b70-193fe6f816c9.roa (raw, json)
Hash identifier: 3VhKF4SGWLLpmwtmb0uCPTsBtm1UQGzQYH1vlIpotII=
Subject key identifier: 0F:AD:46:3D:CE:E6:99:C7:71:25:A9:56:5E:42:6D:80:ED:B0:A7:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862A6F2314B50EED2E3EFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ebb2c2b-a993-3b86-8b70-193fe6f816c9.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.32.26.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:a6:f2:31:4b:50:ee:d2:e3:ef:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=b4e5f4f0-53d5-4aec-87a2-9409ff451ff7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:d1:a6:17:d4:42:c4:48:b3:9e:66:57:cf:3b:
69:10:be:d7:32:6d:e1:ff:af:5f:bd:42:c9:01:95:
75:79:a6:40:0f:12:de:75:1a:6d:67:4f:51:21:1b:
35:64:e9:d9:cb:a8:0b:d1:76:d5:17:3a:c2:54:cf:
a3:d3:99:ad:9f:0c:8f:f7:88:0b:95:55:69:38:61:
ca:d1:d1:06:a4:af:3f:31:f8:36:d3:c9:47:88:19:
19:20:45:1f:90:94:4e:ce:19:c4:a3:a4:b2:14:7f:
31:a8:b6:c1:2c:81:2a:c7:27:da:26:a2:75:11:f4:
ab:7e:b3:9a:be:7a:15:15:70:68:2f:b8:a1:de:06:
03:ea:10:0a:ad:56:9b:39:cf:10:51:d5:29:15:51:
c2:3e:1e:f6:f5:9c:40:01:97:8d:0b:dc:b6:33:3e:
bf:23:31:37:f6:eb:d1:13:02:9b:d1:4a:67:df:e5:
5e:ab:41:d7:28:9b:6f:36:ed:fc:f5:a1:76:65:38:
f4:71:11:2c:01:b6:28:aa:c8:5c:90:42:d4:54:73:
10:7e:4b:6e:23:41:83:31:e2:6a:d5:16:8c:ed:ca:
94:e2:84:10:02:cb:45:23:34:67:7b:34:46:18:e7:
ae:0e:48:59:de:fd:48:4c:2a:52:f0:bf:0c:84:31:
36:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:AD:46:3D:CE:E6:99:C7:71:25:A9:56:5E:42:6D:80:ED:B0:A7:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3ebb2c2b-a993-3b86-8b70-193fe6f816c9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.26.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:4c:0c:bb:7c:83:e1:5b:f3:e4:07:ee:cd:7a:68:bc:b1:fb:
b9:7d:5f:af:69:27:8f:9d:57:a4:28:64:3e:fe:e2:12:26:54:
42:95:d5:6b:b5:94:cb:53:c5:14:87:a5:b3:5a:8c:30:8f:64:
95:38:34:57:bb:96:d8:b7:b1:1b:9a:1f:12:ab:fe:9d:2e:6f:
f3:51:4d:87:bf:3a:e5:5f:1a:59:34:8c:67:90:67:77:2f:b5:
c5:cd:a5:cc:a5:b5:c5:6e:51:3f:6f:df:be:4d:b6:aa:bf:4a:
44:02:1d:68:65:69:78:da:6e:fd:78:50:59:07:09:be:22:44:
60:04:3c:24:07:40:be:43:72:9e:61:ee:1f:d3:2c:61:10:90:
f0:08:85:2a:81:e8:41:a7:30:98:a6:7b:24:3d:62:9f:e5:76:
cf:de:73:7d:82:b1:8e:39:22:62:da:89:95:a6:11:56:5a:24:
62:5d:d8:92:e6:67:a3:97:b9:45:06:96:ee:00:7d:3a:8f:77:
09:47:b9:49:6e:63:73:08:32:e1:a0:03:6f:03:94:b0:77:1b:
b4:1c:9f:a6:e9:7d:6d:f6:9f:0c:a4:c4:de:e0:bb:bd:e3:cb:
56:43:d7:74:07:9b:e3:d2:3d:e5:91:f4:77:e8:7c:d1:ac:4b:
46:bf:9d:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 12:36:55 2026 by rpki-client