
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa
File: cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa (raw, json)
Hash identifier: JYiHjquIxMi8pClQkQXW55H0wH9wxSum0C0/C37KouY=
Subject key identifier: 0C:A3:E6:6F:0B:B6:C8:2F:15:2D:96:85:32:98:A7:BB:A4:9E:72:07
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863E853CB5FADC69939E8C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.56.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 02 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:e8:53:cb:5f:ad:c6:99:39:e8:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=6840da7d-0840-4b80-9f23-1d7113e774db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:d9:38:56:da:72:4e:1b:ad:03:55:42:74:
ec:f2:86:f1:12:5d:f8:32:f0:61:e0:cb:53:e3:fc:
34:ae:eb:aa:ce:63:c9:5c:19:9d:a4:bf:be:9f:64:
f7:7c:cf:ea:92:62:42:80:d8:f0:51:07:1b:3f:8d:
c3:ba:4e:a7:1b:38:d2:52:0c:21:cc:0b:c5:d9:30:
f1:06:61:cc:3d:7b:80:3d:36:51:8c:08:3b:36:da:
57:65:42:7b:1c:1e:fd:d6:bd:b7:aa:5c:b3:85:24:
6b:7f:a0:d3:a8:02:1b:5b:09:0c:17:0b:e8:c9:9a:
6f:b3:6a:e3:09:75:2f:b1:bd:a3:94:4d:71:85:b3:
b9:64:58:ba:30:b3:4f:76:93:19:fd:27:7f:5b:37:
88:cc:cd:c1:94:92:00:05:67:f6:43:c0:67:3c:3f:
90:2e:fe:8a:08:95:e7:09:84:e6:01:78:fb:17:9e:
b1:68:55:21:a0:2a:56:a3:1a:55:1c:32:9e:e2:9c:
f3:f4:ba:af:06:f1:44:9e:57:1e:bc:22:2c:28:f3:
74:6c:dd:0b:db:5b:9d:ae:ef:57:38:d6:24:e0:23:
60:4b:ea:3e:fa:8b:26:56:6d:53:0f:b0:56:dc:ca:
63:87:44:2c:0c:40:b5:5c:37:06:5e:a6:73:12:d4:
e6:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:A3:E6:6F:0B:B6:C8:2F:15:2D:96:85:32:98:A7:BB:A4:9E:72:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cb94b5b4-500b-3422-87fd-21e7f1c1b482.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:88:9e:f3:63:ae:bc:ac:ed:38:58:27:85:4f:b7:8b:36:aa:
35:8b:5a:5f:19:9b:48:35:d4:7b:21:32:cf:3b:be:3b:a4:fc:
c6:77:85:18:1f:21:ce:2a:28:d8:7c:f2:2c:fd:5d:10:6a:57:
5d:66:18:c9:2e:64:53:79:60:25:a9:ad:e0:5f:13:18:a5:c9:
2a:55:e4:3a:f2:91:f8:80:7d:a5:6b:a2:76:14:f3:fc:66:b5:
69:1e:be:2b:b6:8e:ac:ef:c6:0f:69:23:23:0d:bc:ff:74:3d:
fe:95:72:61:3a:ce:4d:27:b0:b9:a1:d4:b7:73:aa:1b:e8:32:
a2:32:3f:d4:e7:25:13:39:e0:1c:17:1b:e8:aa:9e:6a:52:f0:
bb:1d:89:2f:50:96:22:f1:e2:1c:eb:91:d8:d2:1f:1f:bf:9d:
3d:13:2b:c1:bc:e6:72:22:1a:67:f6:b8:0b:cc:ec:80:69:d7:
5f:53:0d:63:8e:3c:e1:42:f6:ce:45:eb:a6:42:a8:a5:29:f1:
f0:4f:28:dd:14:ae:8f:c1:bb:71:9a:75:5c:04:be:bf:5a:5a:
1e:7c:74:d2:b9:e2:f3:e7:07:23:0e:65:da:f0:e2:c5:98:11:
1c:04:9e:ff:42:77:fb:4a:cb:1f:6b:6c:e2:ae:6d:10:c0:c2:
00:e5:1a:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 05:10:30 2026 by rpki-client