
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70421477-4758-335e-b6a5-5523ba93d854.roa
File: 70421477-4758-335e-b6a5-5523ba93d854.roa (raw, json)
Hash identifier: lSb8UfYibYAhGcecC/uYpbRxO7Qi58HkyINtklmQRPY=
Subject key identifier: FD:C3:11:27:6F:03:89:13:67:4D:19:F6:11:98:F9:4F:A5:07:5C:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE86C3567259B3D7074770F8
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70421477-4758-335e-b6a5-5523ba93d854.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 33659
IP address blocks: 68.86.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 08 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:86:c3:56:72:59:b3:d7:07:47:70:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=a9eb60f2-b05c-449a-b676-8fc8020121e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:4b:8a:26:6f:dd:ac:d2:3a:9a:04:10:91:18:
6d:a9:c1:78:b9:f0:7f:2d:81:97:5a:c2:64:17:b8:
02:7e:77:27:6a:db:c0:e4:32:a7:61:de:9a:76:24:
16:99:2b:81:48:2e:24:75:e4:12:19:ee:27:b1:3b:
07:40:9a:67:65:4a:4d:84:6d:e7:fa:f7:53:38:2b:
2f:9b:6c:45:54:18:4f:71:9b:8c:b0:c5:0c:63:25:
1f:d7:81:06:37:48:8e:05:5e:ab:84:91:cf:c3:68:
7a:ca:dd:25:66:5b:30:44:b7:34:83:83:c1:37:62:
0e:f3:e6:c5:83:7d:7d:9f:4f:6b:a9:ab:80:35:94:
20:c4:a9:84:f6:a0:8d:cb:82:b1:bc:11:43:cb:a4:
cf:49:e7:54:1e:d9:0a:bb:d9:78:23:80:d5:4d:32:
9e:02:e2:43:70:ce:0d:36:a3:b0:8c:3b:6c:4b:25:
0c:91:b3:f7:39:ad:be:2e:11:41:68:89:5c:82:9d:
b2:3f:4c:65:7e:5a:48:0f:95:8e:8b:d3:41:4e:e9:
a6:1f:0c:dd:40:77:a8:20:34:d6:3a:58:e8:0c:68:
e7:ee:6d:cb:24:f1:6f:1b:94:f3:f6:a6:18:49:1e:
5e:47:37:09:1e:a4:1a:c0:d6:05:9e:8c:57:04:87:
18:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:C3:11:27:6F:03:89:13:67:4D:19:F6:11:98:F9:4F:A5:07:5C:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/70421477-4758-335e-b6a5-5523ba93d854.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.157.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8c:46:04:01:5b:3f:a8:e8:fa:af:64:e4:96:74:6d:b0:53:b5:
30:a7:19:26:b0:e2:9e:6b:5f:41:07:da:e2:fb:be:67:53:1e:
c8:0c:66:40:0f:a9:92:a2:b8:16:e6:34:fd:10:80:06:d7:7a:
88:9b:96:4a:69:22:f6:e4:d7:7c:46:1c:96:c6:14:b3:37:53:
7e:8a:84:96:10:f7:77:08:42:39:4e:fb:fb:09:94:9e:63:9b:
cd:74:d4:1e:74:04:73:7b:0f:eb:a5:9e:80:d6:ab:15:c6:85:
38:5e:09:6f:7f:99:41:0c:9c:f1:8c:f6:88:a1:4b:59:d9:09:
d5:10:55:19:54:8f:a5:fb:35:2f:33:ac:3b:a4:a0:17:70:0b:
7b:ba:c4:fc:f9:4d:2a:36:47:d9:db:1f:b3:a7:b0:a7:7f:7a:
79:7c:8e:45:69:f4:e2:b2:1b:69:c2:cf:38:26:58:32:86:13:
f1:ae:1e:21:3e:90:d2:62:15:2b:0d:29:b2:3b:85:39:68:f6:
cd:4a:70:92:6b:1a:8a:4a:a8:f9:18:5b:0b:2f:62:e3:b6:37:
a4:e9:1a:31:98:8f:91:0c:77:e1:e3:14:12:c4:f3:c1:94:e8:
a7:5d:38:bf:47:d0:74:11:e6:82:e0:24:8b:fb:39:ce:e9:14:
e5:fe:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 11:15:46 2026 by rpki-client