
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8f494c-49e6-3257-ba9a-02197e716d55.roa
File: 7e8f494c-49e6-3257-ba9a-02197e716d55.roa (raw, json)
Hash identifier: NfM44z8uvvWh2qiqT1HS95Z7EEo3o0Im6P3ild0ZPPw=
Subject key identifier: 4A:AD:33:D1:95:10:DC:D4:B2:83:57:75:07:3E:F8:4C:6E:83:C8:81
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119F1A580D0F351DDCD16F40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8f494c-49e6-3257-ba9a-02197e716d55.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 68.57.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9f:1a:58:0d:0f:35:1d:dc:d1:6f:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=4e33e559-8678-407d-9121-bccd831158ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:06:99:b6:26:8b:4f:99:66:04:25:b3:25:d4:
de:c5:ca:52:5c:94:c1:5b:50:67:79:7a:6b:0d:fb:
a0:d8:3c:08:0a:26:80:7f:6c:fe:7a:ce:aa:0a:6b:
34:74:96:a1:73:df:39:82:40:ef:e0:72:70:8d:e8:
25:6a:1b:e0:b9:fd:3e:de:d1:f7:12:90:f3:97:7f:
44:b7:f5:81:e0:22:70:e0:49:96:bf:14:5b:04:ca:
b4:b7:35:95:cd:5b:f6:ab:dc:ad:f7:d5:2a:89:7c:
43:5b:ec:a2:34:e1:20:59:25:51:b7:fa:12:88:e8:
af:92:fe:e5:1d:ba:df:dc:c5:a8:4b:cc:ac:d3:8d:
4d:b4:f8:2e:5b:a7:bc:84:56:09:65:cf:ea:76:26:
b6:0d:13:72:52:84:1e:29:1b:e1:92:14:8b:e6:66:
f8:50:c5:e1:02:c6:ba:97:11:d3:12:60:ba:fb:07:
0c:7f:47:af:76:20:2b:6b:a3:9c:bb:fc:7c:71:36:
09:11:c1:31:38:2d:be:a3:6e:6b:10:99:e0:71:6a:
7d:3b:1c:c0:9f:57:29:67:cb:d5:cb:c2:76:c1:7e:
b9:52:92:19:8a:2d:1a:ef:3a:b5:8b:ce:87:c1:ef:
46:2f:17:a7:77:d2:05:ed:f7:0b:d7:04:72:1b:ac:
d0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AD:33:D1:95:10:DC:D4:B2:83:57:75:07:3E:F8:4C:6E:83:C8:81
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/7e8f494c-49e6-3257-ba9a-02197e716d55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.57.231.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:02:67:9f:dc:17:d5:15:33:5b:8b:cc:94:da:9f:f6:8b:15:
23:d8:5a:b5:dc:f9:06:33:4f:a2:0a:01:a1:18:27:66:28:fa:
c8:8e:1d:fc:8d:a0:46:64:d3:30:57:64:2d:25:ff:1d:dd:19:
ca:27:0d:a9:96:ce:46:ea:84:cb:9d:f5:ab:69:c0:e0:7b:ee:
ad:19:ec:27:f0:12:d9:75:4c:75:a9:55:a2:78:91:e2:43:f0:
92:ba:48:55:ce:c7:d8:da:66:6b:b8:18:37:4e:ba:f0:5a:95:
91:62:eb:7f:d8:01:d7:42:9a:86:64:7c:55:c9:e8:32:06:19:
fa:5a:22:d0:63:5d:0e:1a:da:06:12:ce:c1:56:c7:79:ca:95:
96:24:fe:78:2d:56:73:d5:26:aa:14:6c:80:2f:0d:e7:d8:76:
fb:51:d1:70:62:1e:84:a6:4c:01:38:4b:2f:d7:39:bd:fe:9c:
46:74:17:af:01:a3:eb:14:70:a5:ae:20:92:31:cc:b0:73:c9:
70:f2:f2:28:f6:17:62:b3:a5:f2:30:e0:64:8d:19:e0:40:29:
00:d6:d2:85:88:45:d3:bb:4d:4e:a8:d5:33:a1:04:5f:63:63:
e9:fb:52:0a:01:21:5c:cd:00:fd:4f:a8:f7:4e:d3:a0:86:13:
d5:83:38:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 14:24:38 2026 by rpki-client