
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cb9d2c6-2580-3579-813a-ceb7cdc7fe42.roa
File: 8cb9d2c6-2580-3579-813a-ceb7cdc7fe42.roa (raw, json)
Hash identifier: ha9TADigXYKWr9gsut05wBI0VqZ5UZQryftBiCeWpvI=
Subject key identifier: 81:EF:D4:B4:01:89:3E:33:5E:0C:E7:EE:80:FF:89:5B:F2:A7:1D:D9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863E12C92D0651B315E8480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cb9d2c6-2580-3579-813a-ceb7cdc7fe42.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.46.178.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:e1:2c:92:d0:65:1b:31:5e:84:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=f22ff2f6-98b2-4a26-ae8b-c1a031d0fbc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:8a:93:d3:41:7f:ec:e7:83:26:f4:69:5e:0c:
11:11:d3:8a:92:af:41:88:d9:fd:4c:db:02:29:1c:
5f:c9:d8:2c:2b:45:25:3c:2d:e5:90:8f:61:6e:fe:
6c:b1:66:2f:02:94:79:fe:30:ac:dd:55:9d:00:8e:
85:ec:a7:6d:d9:28:19:5b:33:d0:47:d6:d6:f1:42:
f0:f4:16:27:34:3b:ee:2d:2a:84:d7:11:74:1c:af:
6a:6c:2a:65:25:e1:3b:92:2a:35:41:d6:2e:c5:9f:
6c:f6:23:91:04:04:75:d2:f2:ae:43:45:f9:72:bb:
e9:c0:cc:44:30:a0:89:2f:07:6c:17:ff:a7:79:6f:
06:8d:bd:25:21:06:43:02:e1:1d:09:0b:6c:d8:88:
c4:f3:b3:cc:2f:e8:95:2e:d0:ed:2a:18:ba:45:85:
85:89:76:c3:18:1b:62:d8:f6:4d:71:51:0c:01:d7:
ff:df:f8:55:fb:22:c7:15:07:49:51:68:9c:26:50:
e6:5f:e7:cb:34:22:1f:41:b0:a9:bd:b1:e3:94:99:
91:92:e0:d7:ea:b7:25:34:03:ef:63:e6:5c:55:15:
35:73:89:84:4c:76:54:87:4e:84:a1:f5:2b:95:3b:
13:6b:5f:ac:ae:be:76:b1:b2:be:cf:24:d6:4a:09:
0a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:EF:D4:B4:01:89:3E:33:5E:0C:E7:EE:80:FF:89:5B:F2:A7:1D:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8cb9d2c6-2580-3579-813a-ceb7cdc7fe42.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.46.178.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d9:d8:f8:f4:8a:8f:a8:dd:8a:ee:37:b9:84:8b:84:3a:12:e6:
de:39:a2:82:fd:1c:50:5e:e6:b7:8b:de:dc:d7:39:49:1d:33:
17:f6:64:b9:69:00:10:2e:7c:48:4d:54:0c:44:e2:41:fe:2a:
a6:03:1b:88:9e:d2:c4:34:05:61:41:81:e6:1f:e7:e9:e3:29:
cb:98:2d:6e:cd:98:94:25:e3:d1:a6:b9:41:2a:2a:89:c4:c9:
dc:79:69:3b:67:08:91:c4:6f:53:c2:b6:e9:98:80:a4:15:2e:
9a:7e:e9:33:d0:f8:84:ad:25:d9:53:cd:d6:05:f4:64:7a:47:
28:5a:2c:78:09:b6:67:07:d8:33:03:24:79:6c:0d:0b:3a:40:
44:e6:46:59:46:e9:97:1f:51:ee:5b:51:bc:b0:af:df:6b:8d:
02:2c:d5:de:6e:0c:6c:64:1f:33:47:4c:ad:cc:7b:82:05:a8:
35:9b:7e:be:a1:b7:c8:6e:f8:d4:96:d2:89:75:a2:a0:e6:0a:
ac:e9:f2:74:67:96:ee:30:5e:88:a7:4f:e3:cb:31:ff:c0:74:
d7:eb:65:10:86:70:3c:77:e0:d1:3a:67:55:28:fe:01:75:91:
22:51:01:fc:c7:f1:47:8d:7b:0f:c8:5e:c9:33:e7:ff:84:8b:
98:e7:65:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:21:40 2026 by rpki-client