
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa
File: 4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa (raw, json)
Hash identifier: FpuZ4sHj9jpVkw7qt45FrmJDKlSqMNiWX+rg90hug+k=
Subject key identifier: 15:1D:2E:E2:EA:A4:86:97:92:4D:C1:2C:E2:CE:E3:10:F0:F8:4C:04
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E756F13853F13ACD29980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.60.148.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:75:6f:13:85:3f:13:ac:d2:99:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=c75dac2a-db17-4693-a38e-149ccb57dece
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:b1:15:61:3f:65:f7:bf:42:ab:cf:7e:f6:93:
c2:ae:87:51:e4:94:f8:ca:98:1a:7b:5e:2c:33:57:
0d:04:58:fd:52:11:4f:10:07:92:65:30:11:8b:67:
36:28:35:e0:98:9b:af:73:c9:33:33:dd:f6:64:cb:
63:c9:d5:5d:f4:11:54:90:77:ad:da:b0:74:f4:57:
3d:1c:87:51:0a:56:c3:c8:bc:e0:fa:31:35:89:9a:
db:fe:90:28:a7:8f:38:46:44:aa:d7:1c:02:cc:c3:
a1:05:93:f1:d6:27:f2:1d:28:13:6e:c3:49:f0:b6:
bd:53:88:74:d2:1d:fa:30:5e:91:0e:b7:7d:3d:e4:
b4:1a:c2:d7:77:1a:96:1b:8d:52:6d:9d:4b:58:93:
a0:ff:5f:13:ed:da:2c:21:29:99:06:de:d8:cb:0c:
a1:d5:e5:75:00:af:7d:52:cd:f2:23:6d:db:2f:d0:
f1:fe:75:4c:03:63:b6:8b:25:89:5b:d3:2b:57:d1:
7e:df:ff:55:96:93:fd:f6:ed:92:48:5e:3d:f1:0a:
9d:d6:93:76:e6:f5:32:cb:a0:4d:8d:0b:b4:bd:2a:
56:4f:30:61:24:ff:cb:96:5f:31:09:bb:e2:a0:88:
c2:0b:a3:4f:20:1e:f7:f7:24:f7:e7:33:e1:3e:e6:
ef:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:1D:2E:E2:EA:A4:86:97:92:4D:C1:2C:E2:CE:E3:10:F0:F8:4C:04
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4ac42a2c-da90-3e70-a0c7-6a2e7989e32e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.60.148.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:35:41:ac:b0:0a:34:c2:c1:dc:12:c9:47:2e:89:5e:57:3e:
f9:30:1b:f5:85:4f:73:6d:da:05:01:63:2b:f7:7c:9f:6b:2a:
4e:7b:83:b3:cf:71:2b:73:c4:1d:cc:fb:68:80:28:01:e5:c6:
e7:18:e1:d8:91:b1:90:bb:3d:f8:41:a7:d8:bc:57:0c:8b:5b:
99:a9:bd:e7:15:ce:52:d0:61:e3:32:b3:18:c2:74:18:4f:7d:
d6:0a:6e:2b:50:cc:26:25:fd:22:1f:3b:68:bb:36:48:1b:ca:
82:e6:ce:d5:0d:e8:b6:fe:0e:23:ae:fe:d0:c6:9c:7f:87:d6:
3d:b8:4d:db:4b:c9:c0:03:2e:32:e1:05:28:5e:93:97:24:02:
5d:66:84:d9:a8:5e:3b:1c:d9:ad:de:57:2e:71:29:77:ad:6d:
4a:a3:0d:a0:3d:7c:9b:ec:2f:05:dc:b7:dc:55:2e:9c:af:97:
22:13:c3:3e:77:9c:bb:ce:15:f3:2a:e6:d4:92:c6:a7:b5:9e:
3f:32:f7:76:0f:e6:8f:63:28:fb:5e:2b:0a:0f:b6:6e:bf:8f:
b3:05:e3:13:bb:1f:4c:23:02:cc:49:22:f4:cd:04:3f:64:c9:
25:ef:4f:23:78:11:f5:d9:0f:fa:e9:44:56:ac:9e:70:ca:d9:
19:16:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:09:12 2026 by rpki-client