
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3c33f03-f08f-3e59-880a-9f571389cffd.roa
File: a3c33f03-f08f-3e59-880a-9f571389cffd.roa (raw, json)
Hash identifier: 1cNw17fWmbJR1J/1kouglawusb6NQPrCU35XnFR3nz8=
Subject key identifier: 72:89:A6:94:46:9D:19:86:30:FB:DF:14:14:6E:D9:32:73:01:0E:45
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F8C97334A3AD0E0E2F100
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3c33f03-f08f-3e59-880a-9f571389cffd.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.32.48.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:8c:97:33:4a:3a:d0:e0:e2:f1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=25f30bc8-e0e4-4e6f-aa50-fcbd2c382c93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7e:91:60:cc:10:71:7c:81:6e:0a:f4:43:69:
6a:77:49:74:30:be:c9:2a:82:0f:43:90:e3:19:89:
67:72:0d:d4:2b:70:bd:88:eb:b4:b0:0f:3a:95:80:
70:de:7e:38:28:3a:1c:db:89:e6:cd:cf:bf:9b:16:
36:ba:fd:9b:fa:b1:e1:57:81:53:72:98:73:52:c2:
20:f5:eb:11:a8:4b:3c:28:67:be:41:4b:13:3e:7e:
af:70:68:be:9f:c8:d0:a7:9e:9e:85:ba:51:01:4e:
5f:d2:2b:c2:ba:19:0d:29:bf:d0:a0:60:25:cd:e3:
61:78:8b:d6:15:5f:8f:09:0a:a2:6f:a1:ed:5a:21:
b6:32:4f:21:9d:03:27:c7:d4:a3:e8:b7:07:38:c8:
85:19:5a:34:66:84:c4:fc:09:45:83:35:98:8b:65:
53:46:97:2a:ae:4b:58:04:87:27:92:4a:33:56:08:
77:33:85:c6:a4:9d:b3:4c:d1:4b:f4:0d:55:bb:ee:
9a:27:d9:1f:12:1c:00:c0:f9:07:d6:51:3d:47:d9:
a5:e0:87:85:3e:fc:b4:37:1c:23:51:47:a0:27:a0:
14:9e:f7:fb:36:5c:42:61:76:d5:a5:b5:5e:d2:47:
ea:ef:af:8c:67:84:40:da:f0:ef:e9:18:af:a0:43:
da:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:89:A6:94:46:9D:19:86:30:FB:DF:14:14:6E:D9:32:73:01:0E:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a3c33f03-f08f-3e59-880a-9f571389cffd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.48.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:75:e8:e1:e9:ee:8f:12:87:3c:7c:cb:f3:8b:ae:bc:2a:af:
ae:58:bf:96:2d:74:2f:1c:e3:e6:86:52:c1:ae:51:7f:6a:ca:
1e:d6:e1:6d:30:c0:24:83:d8:51:c2:ad:9a:be:8c:33:df:3e:
ff:0b:1d:21:03:a7:1d:8a:a6:c9:d0:dc:1d:21:59:0b:62:70:
ee:32:98:c3:44:9f:64:e6:e8:d8:cf:a2:a1:2c:7e:d6:6b:5d:
be:52:83:bf:32:84:53:67:59:32:0d:70:c5:e4:4b:8c:3f:66:
26:0f:18:ae:ad:00:4a:4f:4e:aa:98:ec:ee:97:c9:10:be:fb:
23:c6:17:d6:90:b0:4b:c3:e2:03:a8:a2:1b:33:f7:09:4d:f2:
22:c1:b2:5a:97:7b:32:6c:b2:c1:fc:08:b9:74:8a:18:27:b4:
88:da:29:16:7d:0a:65:6d:3b:1f:73:8e:7a:19:9a:1c:ff:53:
1a:f5:88:31:48:6d:68:d9:2d:90:68:3e:20:4c:be:e9:43:03:
d7:be:f5:0c:84:f4:87:81:69:62:92:17:7f:4a:40:61:46:bc:
45:79:8c:a7:b9:1d:4a:bc:65:97:02:a8:c1:88:2d:c1:37:27:
49:29:cb:d4:f7:09:e6:e3:90:bc:73:96:1e:39:98:7d:f4:a5:
50:22:fb:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 20:38:10 2026 by rpki-client