
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9a499da-f933-3111-86aa-0c0fe2cce4c0.roa
File: b9a499da-f933-3111-86aa-0c0fe2cce4c0.roa (raw, json)
Hash identifier: bH5RQhpSrb9tGFJOpSDBlX9kEH/Pkg3U0VT4g2XcwBo=
Subject key identifier: A0:72:10:95:C2:C1:98:73:83:3D:9D:E4:D8:1C:4C:A9:3D:14:C5:6D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F8E47CE4095CA2F6DB180
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9a499da-f933-3111-86aa-0c0fe2cce4c0.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.34.78.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:8e:47:ce:40:95:ca:2f:6d:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=b9c87479-2153-451a-b4eb-21edba81add5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6f:46:95:6a:1e:88:df:33:04:0f:e1:5d:a4:
b6:35:b7:a7:03:85:c3:6d:3a:d7:aa:10:c1:34:e4:
77:08:b3:fb:a0:51:fb:1c:62:6b:9a:70:8f:e6:ca:
aa:e4:41:0d:de:26:d0:a1:9e:cd:c7:23:30:b8:8e:
ee:84:0a:1e:07:ca:29:22:18:b0:f6:19:52:b7:44:
a3:7e:e5:62:13:f5:8e:09:e4:e2:49:ee:de:97:8e:
45:2b:0e:ad:21:24:f9:d1:49:81:46:76:f8:5d:aa:
97:27:57:eb:d6:20:1b:b8:3f:dd:14:e9:23:e6:cf:
b9:d8:aa:51:2e:5d:c7:a8:8d:25:af:3b:16:54:77:
4f:7a:ee:0f:a6:72:6d:03:a1:f1:56:03:3f:93:2e:
3c:9b:3f:7e:01:3d:7b:ed:62:c7:23:ea:a0:c7:ed:
97:df:21:9c:eb:a9:72:32:72:81:b3:cb:04:ca:08:
ff:70:f6:dd:47:b8:7d:8b:ee:a0:b8:e7:0d:d7:91:
fc:ee:2e:bb:26:c0:f7:6b:8f:0f:02:29:a7:f3:25:
e2:a9:48:0e:cc:ac:b7:db:47:97:05:ee:d1:4b:d4:
50:ad:e7:b4:b0:ea:e4:36:63:00:8f:b8:fc:f4:09:
fc:c6:fc:c5:8b:d0:60:56:25:fe:e3:68:d4:05:97:
2a:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:72:10:95:C2:C1:98:73:83:3D:9D:E4:D8:1C:4C:A9:3D:14:C5:6D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b9a499da-f933-3111-86aa-0c0fe2cce4c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.78.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:2f:84:08:7f:71:40:f1:2f:81:9f:1f:5d:f8:b4:30:9a:a2:
b6:87:32:c9:9c:a8:bf:de:e2:1d:37:8d:46:41:4c:73:52:51:
de:18:94:ea:e8:12:b1:74:c2:74:c8:58:1d:49:d5:c8:f8:d1:
50:86:4d:75:db:00:ee:c3:a0:49:30:09:ab:fa:8e:88:de:6e:
aa:d6:a6:8c:46:92:71:63:d8:d3:c8:7f:52:43:d0:83:a5:03:
e8:22:cb:96:5a:21:ee:c8:57:07:0e:38:e7:43:94:68:05:18:
13:ea:5d:d5:31:e2:ac:d0:01:a8:46:f6:bf:bc:2e:58:b3:bc:
d1:e3:7f:fd:f6:94:01:9e:c7:38:f0:3e:83:66:40:8b:cf:87:
56:50:50:00:37:c1:e9:85:80:6b:df:92:04:72:41:a2:35:b1:
f4:20:b8:cc:23:64:4a:66:e6:b1:00:79:fb:1e:76:ec:b4:d6:
96:ae:7b:d7:95:ff:1e:d8:17:8c:fa:d3:7e:11:08:b0:3b:44:
2a:58:51:40:06:0c:c7:55:b3:5f:15:c9:e4:30:42:f7:83:c6:
a7:f8:af:a7:b0:b7:3f:ea:22:77:5f:50:19:2a:e2:5d:3a:d0:
70:f4:23:27:46:6e:c5:89:7b:41:da:34:bc:da:cc:0e:0c:bf:
01:81:c5:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 25 14:16:24 2026 by rpki-client