
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa
File: d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa (raw, json)
Hash identifier: pQltkX0z7TMiWwjY05Ym3DdvDUahqRYOSFtk8F/5WTE=
Subject key identifier: 2F:E9:C6:9A:81:C9:3F:3F:81:4D:E8:B9:C1:9A:14:D9:1C:4F:1E:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584E3600F6833498FD7EDFF0F980
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa
Signing time: Thu 18 Jun 2026 09:00:12 +0000
ROA not before: Thu 18 Jun 2026 09:00:12 +0000
ROA not after: Wed 16 Sep 2026 09:00:12 +0000
asID: 33668
IP address blocks: 68.37.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 20 Jul 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:36:00:f6:83:34:98:fd:7e:df:f0:f9:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jun 18 09:00:12 2026 GMT
Not After : Sep 16 09:00:12 2026 GMT
Subject: CN=f04d7e95-a5f4-47ea-86e2-4f0637aaa3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:29:43:87:82:19:df:44:8d:0c:73:b1:ed:9d:
61:66:86:d5:d5:d3:b8:df:72:84:40:34:ea:17:74:
b0:c6:77:4e:1e:17:3c:3b:6d:a8:e8:bd:c2:e3:33:
48:3a:f2:5b:bf:7b:46:d4:52:3c:0a:a0:28:a7:ae:
d8:bd:ef:88:3b:77:2a:db:1e:12:ae:19:fd:1a:eb:
56:75:50:3f:fd:de:f6:19:46:48:1d:fa:6f:2d:82:
bc:8d:e3:dd:53:98:5c:ae:dd:f1:42:fc:f8:31:be:
47:3e:5a:ff:7a:bd:b4:7b:1e:5c:86:ff:e6:e9:32:
91:d9:76:8e:86:dc:00:82:53:ad:e5:55:b6:86:97:
67:95:d3:b0:ed:55:5c:04:76:f3:c3:91:aa:d3:50:
ab:bd:a0:ed:78:7c:9e:79:33:1c:cc:b2:21:58:32:
1f:94:f9:30:3b:23:03:81:64:6d:ca:b2:7a:21:3f:
b9:4b:bf:25:31:ef:bf:a7:4a:05:66:ea:e4:48:53:
c5:31:c7:a4:6f:7f:fb:b6:19:58:bf:ac:4f:78:27:
cb:0c:a9:80:57:85:87:1c:4c:30:d0:13:d8:98:0b:
a7:e4:36:06:09:9e:a5:13:01:3d:b6:a9:4f:98:3a:
f8:6d:b4:c1:08:f9:bc:53:16:6b:19:31:bf:9c:da:
85:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:E9:C6:9A:81:C9:3F:3F:81:4D:E8:B9:C1:9A:14:D9:1C:4F:1E:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d2b89801-ec04-3d08-8102-8e5ca788b7a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c0:c4:ef:d5:d5:7c:bd:1c:f5:03:b6:bc:76:e2:88:d3:f6:af:
8f:1a:57:cf:40:40:a9:b8:f5:94:a4:0d:63:ce:04:55:88:bf:
2a:66:76:a2:f4:42:ca:6a:60:f5:2f:65:b2:3b:4c:b3:39:b4:
91:48:5f:41:a3:ec:fd:92:d4:a6:8f:11:b2:4a:b0:d8:fc:9d:
bd:62:ec:2c:de:f8:4a:b2:db:de:83:77:5c:b7:8d:70:33:b4:
76:1a:21:89:00:40:70:9e:b9:14:a1:91:0e:c1:00:e3:c6:c3:
f9:6c:79:dd:02:f0:69:b8:6e:fc:8b:fd:58:0f:fd:cc:4e:c1:
d2:7c:62:ba:0f:2a:ff:25:e8:7e:f7:db:50:f7:84:a6:b5:2e:
91:26:49:bf:96:41:13:75:85:aa:48:31:d6:c9:56:ce:01:f4:
c6:81:61:c8:2e:65:7a:cb:40:54:ee:46:12:6f:44:06:f7:b8:
97:aa:7e:60:5c:e2:d5:7d:4f:63:23:16:9f:2e:7c:e7:b1:f5:
ac:99:47:2a:26:aa:54:7e:15:86:ba:c3:0c:e9:aa:b9:1f:84:
ed:fb:0a:31:2b:65:7f:62:d5:e1:be:a4:ec:24:d9:3d:b6:d5:
33:6a:3f:6b:1b:f0:86:f8:6b:f8:0a:4c:0d:91:61:ab:a4:fc:
b2:b9:8d:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 05:26:49 2026 by rpki-client