
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/993bc5df-0cea-31fa-a4c6-38765aa9f7d0.roa
File: 993bc5df-0cea-31fa-a4c6-38765aa9f7d0.roa (raw, json)
Hash identifier: F9i0JEQh3er7fl/3b4ndMdBzBVw+aOBCgeURiCEyBZQ=
Subject key identifier: 27:66:68:76:A0:38:22:E3:72:F2:AB:27:F8:AB:D9:57:B5:46:40:F9
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E69217BDA7C58819CCC40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/993bc5df-0cea-31fa-a4c6-38765aa9f7d0.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.43.184.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:69:21:7b:da:7c:58:81:9c:cc:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=a5cc7085-2d8d-4efb-b60a-a7a35670a343
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:ad:ac:4c:c5:d8:67:8b:10:ba:5a:42:e5:
81:e3:c5:a1:fc:2f:95:76:55:c9:9e:f7:96:ef:8a:
90:a9:e5:ad:3d:ea:2e:a1:8e:7f:27:b7:31:ea:4c:
dc:80:c6:42:3a:e5:10:7a:e4:50:0d:33:96:83:53:
41:d9:74:25:b4:9c:1d:22:ec:79:ca:4c:f2:3a:29:
4c:eb:a0:be:b5:94:8e:98:5f:8d:20:94:60:8e:0c:
49:5f:05:c3:5b:fa:6a:ca:20:03:84:2f:44:ea:84:
0f:a6:99:8d:38:06:55:0c:7a:fd:d1:40:2b:54:38:
95:71:d7:30:a6:c5:90:f9:f1:f4:7b:3a:dc:10:16:
2d:11:5f:a3:ec:69:c9:28:a6:1d:80:69:f2:ee:7a:
71:43:3e:a0:33:77:f3:ec:a2:b0:5a:8c:81:ea:8b:
d9:41:5f:a5:02:24:ed:e4:85:5d:d2:15:ae:b8:42:
2a:4e:59:68:e6:ba:54:59:f2:39:62:a2:1d:ae:01:
56:3c:e6:3e:bb:e2:29:3b:e5:73:19:ac:22:82:87:
52:15:c2:76:eb:3f:7f:b5:f5:cc:93:e6:c9:2f:c1:
55:c8:8d:fe:3f:d8:a6:7c:f0:0c:5e:1a:36:c3:c5:
92:55:25:37:79:e0:e0:df:4f:dd:03:bb:f1:63:ae:
05:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:66:68:76:A0:38:22:E3:72:F2:AB:27:F8:AB:D9:57:B5:46:40:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/993bc5df-0cea-31fa-a4c6-38765aa9f7d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.184.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:bd:69:b3:7c:85:48:82:ee:22:46:bc:7b:4a:25:9a:e0:51:
a0:47:d4:7a:28:93:7e:ca:04:ec:05:a7:a1:4a:9f:38:b4:1f:
56:c9:cf:f0:28:92:d4:39:9e:6b:d4:ce:ee:0f:91:2c:be:ce:
2f:43:18:3b:2d:48:b0:3a:db:81:77:2f:d3:f8:24:ea:2e:bc:
eb:bd:d5:02:18:2e:7c:41:a8:f8:37:84:33:f3:43:3b:1f:4b:
60:ca:4c:e5:e9:8f:c9:84:eb:08:e1:7f:9a:99:76:c7:a5:70:
4e:82:2c:18:d7:a3:7a:a9:a1:b9:d0:46:d1:17:22:27:dd:87:
0a:55:2f:f1:0f:9a:16:1f:39:b7:1a:15:cb:75:9b:73:06:66:
df:e1:17:1b:dc:c3:43:5c:7f:8a:38:28:32:d0:d3:b3:ed:2f:
58:82:71:cb:fb:61:63:2a:e3:30:ce:f1:70:ae:bc:d4:ea:1b:
f1:6c:56:99:9c:61:29:15:41:22:52:2c:0c:60:5d:ee:70:19:
18:5b:61:8f:bb:87:c7:db:3d:6c:e3:59:c1:3a:18:09:e7:4c:
9d:29:3a:b2:67:67:e8:80:cf:61:d0:0a:01:a4:4d:25:e6:56:
6a:53:85:19:d6:80:d9:c3:67:9d:4a:f1:94:07:ef:1e:8e:1b:
54:5c:b2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 11:29:17 2026 by rpki-client