
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67947e2c-7412-3692-870d-8fb3f085e164.roa
File: 67947e2c-7412-3692-870d-8fb3f085e164.roa (raw, json)
Hash identifier: asZLXcmSTEw5/L8bmu9XsYKQC/WCUw1NsKX6e0/nwKo=
Subject key identifier: 3F:F6:8E:C5:3A:22:0E:05:3B:79:F4:B0:AB:D6:1F:27:46:D2:C0:E2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F8C5ECF3EB13C03864F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67947e2c-7412-3692-870d-8fb3f085e164.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.32.32.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:8c:5e:cf:3e:b1:3c:03:86:4f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=099628f9-45da-42e9-a88f-4b6fb87c66d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8d:d8:aa:b6:0c:37:39:b3:34:c2:6a:72:8d:
03:5a:5c:c0:35:70:46:86:fb:ae:b0:29:7a:97:e6:
e5:de:21:7d:c4:89:eb:df:0f:17:79:35:b6:2d:9b:
84:a9:1b:44:af:db:af:57:8d:03:56:39:97:c8:da:
17:44:ba:13:3e:e0:6b:4c:ea:1d:42:01:d1:48:36:
b4:80:21:32:30:2f:59:7c:03:33:c1:6b:0e:0f:0f:
87:a6:cc:75:4a:95:c4:02:15:26:a2:c0:92:5b:2d:
3a:9f:9a:02:d2:52:14:32:b3:81:91:5e:71:2f:5b:
fa:0d:22:ae:86:66:82:3d:e0:51:27:5e:be:27:2b:
c3:43:ec:bc:f1:5c:ea:c3:4c:f3:23:48:1d:54:d5:
f2:17:d5:32:12:63:be:81:a0:0f:de:97:58:de:70:
1d:3e:e3:08:be:c4:4e:63:2b:7f:02:3b:e3:c2:dc:
59:b9:de:db:54:9b:46:64:e8:4a:d5:6a:1c:bb:1f:
28:10:15:ab:5f:28:62:c2:c9:c3:d3:28:b5:6f:80:
6f:8e:4b:17:d7:75:a4:1b:e4:11:75:da:fb:ea:5f:
c5:ef:33:07:01:b9:94:7f:1f:69:ed:8d:9e:47:75:
94:8f:98:e5:d0:27:b7:37:df:3a:38:3b:93:65:82:
ba:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:F6:8E:C5:3A:22:0E:05:3B:79:F4:B0:AB:D6:1F:27:46:D2:C0:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/67947e2c-7412-3692-870d-8fb3f085e164.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.32.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b1:a1:7a:f3:2e:5f:e7:ae:f0:5a:ea:3b:6e:69:e1:20:8c:18:
83:33:f7:a5:31:42:62:85:97:ec:bd:fe:20:c1:2c:4f:5c:6d:
0f:af:5d:fe:c2:71:26:e3:eb:f3:c7:53:a0:d6:1f:6a:98:bb:
85:8e:41:bd:aa:a1:40:6f:94:72:29:3e:4a:0c:f2:b5:96:bc:
32:77:30:28:48:f5:52:b0:e2:6f:b0:f5:13:a6:1a:51:89:44:
18:65:12:d0:0b:6e:de:5f:b1:7f:dd:5e:7b:ab:40:a5:1c:94:
1d:dc:d6:bd:be:f1:68:93:74:db:ba:65:9a:3a:d8:d2:fa:d5:
d3:20:9f:7a:5c:38:1a:be:b4:ad:a8:4c:a0:26:d2:8b:1c:49:
1d:0d:e3:9c:dc:66:f8:52:7d:79:2e:d7:1a:70:a6:72:db:bd:
0f:b3:30:3a:e5:ba:de:82:da:6d:b2:ec:fd:18:6f:bc:a2:83:
b0:cf:37:c4:10:6b:5f:8a:9d:fe:cb:d2:aa:24:dd:73:ee:12:
7a:73:38:4b:ca:f1:08:0b:62:ae:79:3d:90:28:97:4d:93:e6:
e6:c5:32:f4:7a:37:ed:94:31:6a:c8:22:fb:bd:53:d0:dc:95:
30:72:a2:a0:9b:ab:55:65:d9:f7:10:a4:17:69:87:98:77:59:
15:0c:58:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 23:48:37 2026 by rpki-client