
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85b5bd3a-472e-3d57-93d6-ac6a54b015a3.roa
File: 85b5bd3a-472e-3d57-93d6-ac6a54b015a3.roa (raw, json)
Hash identifier: N7Si8JaFSMLIklKApIlyszSRRr73KsK1w9B0OmQqnOY=
Subject key identifier: 4B:6A:B5:39:CF:06:CE:30:0E:51:10:4F:7B:76:15:A2:54:B8:D5:3A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F8E6A76B71D40FB9DC420
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85b5bd3a-472e-3d57-93d6-ac6a54b015a3.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.34.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:8e:6a:76:b7:1d:40:fb:9d:c4:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=f34bf032-a563-4072-b49e-40a0799b03a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:45:b8:02:d5:11:7a:4d:65:54:0b:36:ee:cc:
e4:0c:a8:55:47:3c:85:8c:20:2d:05:99:45:07:fb:
b1:19:99:2e:82:c0:4b:c6:be:9e:04:21:8c:db:c5:
6d:69:b6:c6:6c:b1:46:9a:b7:20:a4:90:b2:18:d0:
a0:1f:d6:f1:a3:91:91:79:5e:85:01:cf:73:46:41:
b5:07:71:8e:28:5e:de:d9:1c:a6:b5:5f:57:84:3a:
0f:a6:3c:22:b9:5f:74:dc:56:12:bc:89:af:e6:d1:
0a:29:9c:3a:63:4c:b5:cd:24:2d:94:2c:5f:dc:1a:
00:11:93:ae:8f:a5:ba:ea:12:8a:1f:8c:6e:7b:26:
7e:2c:5a:fa:62:6a:09:c9:4d:8c:04:06:54:b9:da:
08:80:03:f9:5b:38:59:c7:59:3a:0c:9b:c8:14:f2:
f9:4c:09:ec:ba:04:de:04:4d:d1:6e:f9:b1:42:0f:
19:ca:8c:51:9e:8c:fd:b2:21:34:f6:88:90:d0:60:
54:7c:04:4e:06:c1:02:05:a8:cc:01:81:6c:a7:8c:
95:c9:6a:5f:f3:0f:8c:85:bb:dc:eb:58:00:30:04:
c6:f6:8b:5a:35:cf:d6:3b:e7:16:31:d8:bb:48:6f:
5f:95:5f:9f:dc:a4:6a:2a:a7:2c:0f:3e:bb:a0:ac:
d8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:6A:B5:39:CF:06:CE:30:0E:51:10:4F:7B:76:15:A2:54:B8:D5:3A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/85b5bd3a-472e-3d57-93d6-ac6a54b015a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.82.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1c:78:36:0c:b2:4d:97:68:18:4f:94:79:bf:43:f2:49:50:5f:
41:96:1e:0f:5e:da:65:26:f2:f5:20:5c:ab:1a:05:f5:a3:54:
b1:53:36:6f:7e:3c:c0:4e:43:76:22:3e:ed:3c:67:00:70:ed:
f8:b4:80:da:6b:32:96:51:76:8d:f2:93:3d:3c:bf:39:bd:81:
48:d5:42:6b:3a:e9:64:6c:17:f6:0a:ba:af:32:66:46:8c:18:
45:60:cb:e4:d7:33:8b:9c:26:3f:c4:b2:ac:c2:ee:99:85:5f:
a9:8b:bc:06:58:33:12:ef:a9:52:bb:cd:d5:59:69:7b:7f:92:
bb:14:f7:7f:18:0f:2c:ca:ce:81:0b:0b:79:bd:94:4f:d9:43:
89:dc:d2:13:b3:4b:07:96:fe:11:93:56:14:9c:ed:c1:e4:46:
54:6d:52:3b:8b:e4:2c:5d:fa:3e:04:40:2e:34:a2:8b:d4:cd:
00:ad:11:88:0f:85:95:7f:2f:e1:da:58:97:ac:2e:0e:de:fa:
70:7a:97:cd:90:e9:95:24:94:5f:50:24:84:58:66:82:6f:dc:
4d:e4:32:3f:b4:2c:e8:7e:4b:51:82:d7:f7:9d:6e:07:8b:1d:
9e:ca:00:c3:1b:1f:94:f2:09:e6:d9:15:18:fe:72:55:0b:87:
fc:97:14:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 24 05:34:15 2026 by rpki-client