
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa
File: a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa (raw, json)
Hash identifier: IhK2uFApZ9UnY6b79XG5MTNU+XBadXmskRANpMpOEWQ=
Subject key identifier: 5F:08:FF:AE:9D:B0:53:48:93:93:5A:28:BF:E1:10:6F:AE:4C:00:D7
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E7006962E53E92D9AAE80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.55.104.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:70:06:96:2e:53:e9:2d:9a:ae:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=e72a6bef-9d50-42d4-8247-7dd245827491
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:ea:c9:22:a8:40:94:e6:ed:73:30:99:3f:f2:
28:ab:0a:56:b5:20:77:cd:df:61:42:5c:62:ed:1b:
5d:1e:80:20:98:27:74:6a:9f:53:c8:62:06:89:45:
3d:e1:08:92:b3:c0:81:98:d4:42:a7:c8:73:ea:26:
83:da:d0:15:c5:cd:32:5b:a7:4d:bc:2e:ec:ed:43:
7b:a7:96:94:7a:78:f7:29:29:22:92:6b:30:c6:46:
86:48:62:4d:ce:57:9f:37:68:32:15:ac:58:52:eb:
35:74:54:1a:22:1e:0f:da:a6:30:2c:42:b8:c7:65:
d8:c0:bb:d9:20:f0:30:28:e9:7e:d2:9d:55:8b:3b:
29:bc:0c:d4:92:05:67:26:23:b7:e7:91:f1:64:76:
c0:93:76:c0:a3:76:fe:a0:7e:b7:5b:cc:1e:90:94:
57:dc:66:6b:b6:4a:db:12:be:8e:cb:7c:29:c4:59:
68:b8:2a:07:06:a3:ed:72:a0:f6:f8:ab:66:8e:ff:
76:2d:00:9a:d1:00:49:8c:e1:0e:71:02:20:f0:a5:
a0:9d:40:fd:9c:75:6a:59:f2:b7:46:21:08:1a:6e:
61:ca:61:f9:9e:aa:f7:70:a5:a6:be:e2:e7:a7:4f:
4f:c5:21:39:55:c0:31:6d:40:8c:8c:79:a4:5f:56:
fc:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:08:FF:AE:9D:B0:53:48:93:93:5A:28:BF:E1:10:6F:AE:4C:00:D7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a24e4f94-62b8-304a-b4a5-e52dc41e0289.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.55.104.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
99:df:75:16:7b:c3:ad:4f:85:c2:68:16:72:a4:b4:c2:9c:0d:
9b:4e:36:db:d8:b8:0c:ac:af:e2:cd:71:d5:dd:e4:34:3a:2b:
f8:0b:d2:2e:b4:b7:90:45:48:2a:51:37:2c:bc:b1:28:82:27:
47:20:05:2d:29:08:0f:cc:ad:61:0e:2a:35:63:72:98:71:f3:
a7:33:b7:1f:6d:c4:6f:26:6b:26:4f:a4:15:6f:ba:ab:71:5d:
d2:ab:2d:cc:86:13:84:74:fd:49:79:6c:1e:fc:d5:be:3b:8f:
74:61:e9:76:2b:9b:df:c5:dd:2b:97:45:b1:2f:70:1e:e8:ad:
89:3c:3c:60:57:19:52:ed:76:6d:75:88:47:be:ef:26:35:21:
ef:45:b5:9d:8a:fc:b9:37:51:8e:2c:d2:01:f2:91:6d:93:00:
c7:20:b3:e3:86:ae:18:68:e2:3c:18:9e:19:f5:2a:f0:c1:2c:
40:a2:ea:76:cc:9a:83:13:d3:06:77:39:f2:6f:7c:49:17:73:
31:53:c0:ed:d6:32:13:a2:ac:43:c8:66:31:4c:2b:23:f5:b9:
c3:0f:5c:bb:84:d3:b7:46:68:27:7b:68:2e:e7:29:09:a9:65:
fe:ac:0f:75:7c:32:f4:57:ee:06:cd:f8:2f:ec:30:b5:81:0a:
5f:8c:85:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 14:45:29 2026 by rpki-client