
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa
File: 68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa (raw, json)
Hash identifier: ahkERPLDpBieW2hYOQC5ZIQxWKNsKeXo49vt7wgDo+M=
Subject key identifier: 4C:A2:F0:B3:FE:B2:8B:B6:FB:CB:1B:2F:C5:74:C2:AC:0B:83:64:C1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED86368B8CE8096771CF14B00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 7015
IP address blocks: 71.232.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:68:b8:ce:80:96:77:1c:f1:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=0aa5b770-20c5-44f8-b115-51a473f53171
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:8d:23:59:25:2f:41:93:11:b5:c6:be:9d:70:
35:55:9e:af:bd:96:1b:95:b7:1e:64:ff:76:59:bc:
dd:4a:da:26:18:03:c9:58:5e:96:13:12:dc:54:66:
2e:4e:3f:f2:71:55:7a:7f:ec:b6:86:3a:0f:b2:6b:
7e:fc:63:85:92:ec:a4:2c:87:37:00:08:8c:5f:1a:
69:f5:8f:cd:59:0d:9b:53:36:39:5d:76:90:65:87:
e7:7b:16:45:f7:6a:dd:93:6c:ae:c7:9f:18:f9:60:
e3:e0:04:e5:4f:dc:ab:70:75:e8:26:14:ac:fe:d8:
78:27:f3:0e:c0:cb:e1:50:88:f6:53:17:5d:dd:e3:
5b:13:a0:d9:e4:19:df:55:5e:53:f4:e4:83:f5:ee:
4e:4d:7a:18:f9:7d:ed:a9:b5:dd:df:55:a4:76:f7:
74:cb:ee:24:5c:a3:ae:81:f6:1e:d8:3c:95:ed:29:
89:6b:41:be:13:c1:eb:5e:e1:71:e3:51:44:0f:48:
04:2f:21:de:cf:04:17:60:79:b3:61:23:ac:b7:0f:
aa:e7:71:0e:e3:fb:f5:f4:f3:89:e0:42:45:a1:6c:
73:d3:f6:16:7e:12:94:77:5e:0c:8a:b9:4d:65:91:
2c:5f:b0:e2:c8:1a:f3:ef:5f:dd:9e:e4:da:95:85:
80:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A2:F0:B3:FE:B2:8B:B6:FB:CB:1B:2F:C5:74:C2:AC:0B:83:64:C1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/68e0bfa1-2f92-3a69-90cc-d928ec10f00e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
71.232.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4a:96:4c:b4:eb:a9:8b:bf:70:f3:92:c0:8f:c0:47:1c:4e:f1:
df:1a:35:86:c7:fb:1c:9d:5d:fc:78:fa:3e:b2:a9:35:17:6a:
b3:dc:68:7c:b8:b9:44:cf:04:55:62:39:88:2a:5b:9c:78:4a:
74:88:a9:ef:bf:79:ff:36:ab:2d:91:97:73:3d:70:59:ff:56:
e1:4d:91:47:45:31:10:b4:8f:71:38:28:21:a2:41:e3:11:89:
4a:02:5a:8b:27:32:47:52:50:07:3c:8d:cf:00:3e:20:50:d9:
e3:2c:5f:f9:19:65:8b:69:4e:c6:72:48:dc:20:75:1d:5c:25:
ad:c1:0b:bb:60:b3:91:89:aa:32:3b:99:30:84:87:66:22:a1:
c9:77:13:2a:0d:20:2a:18:b7:9b:49:83:12:61:e9:45:74:ba:
42:fd:8c:f2:a5:fd:ad:17:f1:40:73:4c:44:64:74:f7:15:d7:
f4:a7:da:22:c5:1e:f0:5a:3f:0a:27:62:f0:14:87:7d:26:79:
1d:e9:97:54:17:df:07:0c:8c:5a:fb:23:5a:a1:59:cf:12:0a:
8f:12:38:27:20:85:c8:cb:e8:d1:e9:a2:6e:e9:cc:42:03:1a:
c8:8e:75:ca:e5:50:9b:76:bd:9f:99:bd:be:27:9f:ae:2e:d0:
c0:e5:be:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 23:22:16 2026 by rpki-client