
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5313c2-db2f-3245-94cf-a85fd93bdf6f.roa
File: 5a5313c2-db2f-3245-94cf-a85fd93bdf6f.roa (raw, json)
Hash identifier: Sm+k1rK7mEZ+7QKgfd+K/tRLdNu3PqysaTuODwAz9O4=
Subject key identifier: 24:60:96:D4:A8:6C:A6:A7:13:50:D4:1C:D0:C4:6A:10:1C:09:B3:93
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863DA078A8909DF343D5B40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5313c2-db2f-3245-94cf-a85fd93bdf6f.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.40.152.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:da:07:8a:89:09:df:34:3d:5b:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=369b44f4-e99e-4746-b0e1-0214ee7a93a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:88:1e:63:ed:d0:da:28:77:2b:d0:34:d4:97:
de:0b:d6:ae:fb:07:db:ec:7c:27:0f:ae:c6:0d:e4:
c5:3b:04:fb:c8:4a:d4:ff:ce:cc:df:ff:07:71:f8:
b9:16:71:78:9a:87:2f:f7:c5:68:b0:b5:87:89:45:
7e:12:41:26:2b:e9:2d:2a:58:bc:ec:96:e9:69:a9:
7f:94:84:15:cf:f7:8a:1e:d8:a3:4a:02:6f:78:f2:
f8:67:4f:d8:32:8a:38:be:b8:d8:b5:31:6e:21:26:
cc:04:5f:17:37:98:f8:bf:1f:09:a3:0b:0e:c7:f8:
b8:1a:17:ef:9a:0e:01:98:e6:ae:12:d0:39:74:40:
04:65:c0:46:29:86:e4:90:55:15:ed:1e:f2:90:e2:
84:90:98:e0:f8:24:d2:9c:32:fc:4a:55:e2:5c:88:
c6:85:46:2c:73:d0:5d:78:a5:7d:ce:89:56:4b:30:
ac:fb:7b:cf:28:38:b0:21:0f:40:d1:85:73:45:cb:
79:ee:1c:2f:9d:50:16:1f:05:cb:f6:8f:08:56:bf:
8d:3c:ef:42:69:ba:85:c1:bd:58:3a:8c:38:46:fc:
9e:0a:aa:32:81:df:aa:da:16:9b:bc:20:a5:3b:e7:
7c:0c:17:5b:4a:90:0f:3a:e8:a1:dc:5c:22:4f:58:
fb:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
24:60:96:D4:A8:6C:A6:A7:13:50:D4:1C:D0:C4:6A:10:1C:09:B3:93
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a5313c2-db2f-3245-94cf-a85fd93bdf6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.152.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:06:0a:00:e8:c0:13:1a:ae:07:9b:e4:5a:45:75:c2:9d:95:
cf:34:8d:40:bd:4f:68:5d:e2:72:a1:38:7b:d7:dd:b5:8f:d8:
4b:46:81:11:d4:d1:cb:7c:78:6c:d5:86:bf:4d:be:4c:59:b1:
0e:4b:46:5e:2d:08:fc:9f:c2:aa:c3:90:3c:b6:a0:a4:ff:18:
f4:02:54:82:dc:9d:65:c6:61:6e:90:89:d3:0a:19:f1:3a:cf:
8f:11:a3:9c:06:a3:64:a3:46:c0:60:d5:8a:e5:96:a9:92:5d:
72:2f:05:bc:09:02:0e:69:cc:df:8e:60:9b:2e:e8:01:2d:c9:
94:10:45:37:bd:ea:02:03:37:39:d0:bb:b8:64:ca:df:36:72:
bc:97:e5:06:d9:a3:6a:e6:68:24:8d:ce:6b:f2:ca:90:3c:fa:
04:1f:de:b4:ea:ff:ae:c3:83:84:d5:84:32:93:01:45:a8:1e:
08:35:cf:b9:8f:f5:ad:cc:0e:a1:dd:6f:61:fa:4f:1b:cb:cf:
0c:d4:7f:66:73:12:a8:6e:b4:f4:25:3a:d6:77:4b:9d:68:b2:
4b:e9:7c:ed:f3:8e:e3:a7:f5:1a:cc:ce:8c:ac:ff:5f:e4:ed:
f8:29:fb:54:1e:9b:cb:4d:3c:32:c6:a6:6d:58:d5:2c:99:a3:
69:e7:2e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:07:15 2026 by rpki-client