
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90aaec78-88e0-3962-a29b-c066bd26de9a.roa
File: 90aaec78-88e0-3962-a29b-c066bd26de9a.roa (raw, json)
Hash identifier: 77gLLkha/tAkptkw8Z5onVFjGCiraANkkRb7ojOor2c=
Subject key identifier: 3D:F1:A8:27:56:ED:E5:FB:27:95:27:5E:0B:1E:0B:3F:D6:96:C0:B7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E5A599ED4C4000E057900
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90aaec78-88e0-3962-a29b-c066bd26de9a.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.32.186.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:5a:59:9e:d4:c4:00:0e:05:79:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=5d46a67c-a46f-43bf-868d-e4c4d1793cba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ba:47:59:16:a6:81:a5:b6:90:bd:14:f4:2b:
64:ec:7e:da:ed:41:ae:db:dc:68:0f:9e:8a:88:8b:
fe:f7:47:56:bb:64:b7:23:e3:40:e7:b5:fa:ff:19:
1a:67:fc:3a:84:8a:00:d3:51:c2:7f:48:0a:ad:02:
23:00:c4:88:12:af:df:8c:26:1c:5a:ed:2d:40:19:
ce:e4:ac:94:42:e2:9b:19:f9:3d:67:b6:50:ec:dd:
e2:41:03:32:7e:ba:d3:05:a2:df:97:75:06:27:93:
5b:6c:3c:40:9b:51:ee:b9:f2:ce:ea:82:89:e8:5c:
2b:bf:fb:2c:95:8e:fd:84:59:c3:ae:ef:a6:03:38:
db:82:f0:9e:bd:5d:ed:b9:9a:e6:c2:4f:57:91:2c:
2a:24:d0:52:da:ac:f9:af:06:92:f4:23:a2:c7:54:
75:eb:df:3f:50:ec:f6:c2:8a:53:e0:e5:24:7a:14:
69:59:ec:be:06:2c:f2:16:77:b6:e9:ef:6d:74:c5:
ea:e6:a4:8a:35:9d:a3:cd:6b:56:a6:75:9a:c7:8e:
25:8b:56:11:42:aa:7b:96:2e:9e:db:b5:67:5b:6a:
82:5f:31:c8:96:09:d2:12:f3:33:aa:98:6c:fe:bf:
bb:4a:ce:67:fd:9d:be:9c:fb:d0:12:33:f7:7b:25:
76:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F1:A8:27:56:ED:E5:FB:27:95:27:5E:0B:1E:0B:3F:D6:96:C0:B7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/90aaec78-88e0-3962-a29b-c066bd26de9a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.186.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
63:b9:50:db:2d:87:9a:e6:80:85:1e:32:98:12:56:ea:87:29:
e5:ed:c7:63:5f:96:a7:15:87:bd:b6:0a:ba:29:2b:b4:a0:b6:
87:93:6c:4d:c5:a2:3b:be:6e:96:8e:1e:eb:dd:3c:a7:51:4b:
35:12:c1:ce:bd:f6:47:80:8c:5e:bf:ed:b3:27:b1:ce:d1:c1:
2a:f3:00:1c:31:3a:b4:dc:cd:3e:8b:d0:9b:c8:f0:a4:96:78:
98:89:24:6f:c2:00:b0:3b:76:85:77:33:56:81:c0:0d:08:50:
13:77:9d:34:ec:c6:1f:3e:a8:63:b0:17:0b:69:71:33:dd:84:
27:e5:f9:7e:89:b8:79:cf:5b:6c:e1:07:4a:98:ce:0d:cf:0f:
89:31:76:c3:ed:13:66:78:9a:8a:10:ae:1e:26:5c:36:18:cf:
d5:01:9a:6e:ea:70:59:88:31:61:dc:1f:f0:bd:8b:4a:90:04:
47:ad:72:a3:83:26:76:a8:48:ac:91:f8:7f:89:5e:34:4b:44:
e9:a7:a9:f0:b0:eb:a3:a0:68:86:df:cc:a6:f3:cf:00:66:8b:
f7:b5:e6:ed:43:49:0e:a7:9d:da:a2:43:53:b2:3b:5c:d8:e7:
25:62:50:96:e6:f3:cf:bb:8c:a1:99:eb:b3:fc:7c:9c:31:d1:
07:0e:0c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 20:17:51 2026 by rpki-client