
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88de8e1e-8a64-3a25-86ba-1a7efadf2541.roa
File: 88de8e1e-8a64-3a25-86ba-1a7efadf2541.roa (raw, json)
Hash identifier: agSjPRGaPKiPoleudIUutGmMoWhJ3Zne0ykoQ9uRlcc=
Subject key identifier: 7C:C4:CD:9F:99:CC:D7:4F:8F:B8:45:9F:00:37:1C:A7:45:7B:86:3E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119F1B2D1B68E6987D38E680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88de8e1e-8a64-3a25-86ba-1a7efadf2541.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 68.58.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9f:1b:2d:1b:68:e6:98:7d:38:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=f732ca92-5c34-43be-8482-722175f6fd5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:39:0f:a7:a2:4f:1c:72:06:a8:16:24:2b:ee:
14:e6:76:c5:a3:5a:87:28:9e:7f:d1:b8:8f:1f:b7:
bb:03:33:d2:fa:c9:0c:03:03:7d:0d:4e:ec:e0:d7:
13:cf:4d:8a:7a:fe:ea:7d:f1:77:99:03:0f:59:d8:
a7:a8:6d:c4:86:5b:6c:b6:25:3d:54:d9:a1:d6:48:
77:fa:f5:3f:d7:09:dc:e2:cc:d6:90:bd:91:f9:31:
52:56:49:43:27:01:d0:e1:86:5c:fe:92:65:2e:9f:
28:35:1c:6d:d3:f5:8a:9d:aa:e3:89:28:72:d3:c8:
09:18:0a:3d:d0:dc:00:e5:5f:16:4d:78:35:50:16:
24:6d:46:f0:48:af:54:0d:b2:65:f4:83:85:45:3e:
75:05:7d:ba:6f:f3:54:03:b4:57:67:37:16:e8:99:
c1:99:e5:70:0a:12:d5:e8:ef:46:23:39:e2:96:a5:
2d:39:2f:b9:2f:61:32:ec:4e:07:0d:17:2e:4a:3d:
19:15:4f:33:38:e2:15:1c:53:ca:83:a4:f4:00:d7:
9c:08:c2:cd:5b:fe:c8:c0:8e:5f:9a:f9:82:8b:2f:
e0:51:a4:67:6e:04:c3:6f:a7:9a:1a:6c:2b:98:a9:
88:d6:6d:e1:55:01:09:cd:ad:a5:63:92:5f:99:34:
ba:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:C4:CD:9F:99:CC:D7:4F:8F:B8:45:9F:00:37:1C:A7:45:7B:86:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/88de8e1e-8a64-3a25-86ba-1a7efadf2541.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.58.146.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:6b:89:23:34:e9:83:0e:fa:f6:01:61:07:c7:68:51:ed:7f:
88:0c:1d:cc:be:5c:1a:31:95:e3:f1:5d:41:ad:84:87:60:33:
fa:8b:d0:06:ed:1d:b5:35:13:80:0c:fb:8f:bb:1a:83:ab:3e:
ac:62:0b:e9:6c:b1:43:11:e3:72:4d:90:c0:61:e4:e9:46:a9:
f0:bc:91:b5:79:85:93:c2:aa:fa:cf:37:69:27:12:92:fe:19:
bf:c2:2c:f1:7d:05:c5:3b:a7:c8:d1:6e:38:1e:e7:d3:89:84:
67:3a:73:60:8b:b9:cb:fa:e2:f8:22:21:11:ef:ad:f5:90:98:
cd:89:45:c6:04:f2:59:68:ba:37:ee:e7:42:79:12:50:41:09:
0f:8b:80:a9:6a:7b:c0:7a:fb:47:69:66:59:ec:5e:2d:9a:14:
d3:d1:a9:bc:f7:a3:cc:a7:00:4e:75:c4:72:64:85:8f:72:fa:
15:f1:a4:e0:3c:2c:1f:c5:15:20:c3:31:da:3c:de:8b:1b:86:
08:39:37:72:c0:4d:d2:f0:e9:30:46:96:54:e0:16:8e:d5:3e:
69:bf:97:38:ae:2e:9a:ab:73:b1:d6:70:48:6e:6a:72:e8:30:
92:da:f2:22:55:7d:8c:3a:9b:41:16:aa:c8:1c:c9:d2:6d:c9:
25:71:31:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 11:11:38 2026 by rpki-client