
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e1757f-27ba-325b-8b3e-59893e3a59af.roa
File: d4e1757f-27ba-325b-8b3e-59893e3a59af.roa (raw, json)
Hash identifier: nZMNDhj6jSWzzl+hhnxKQyKknFhwKr8o9LDSQY4nCfA=
Subject key identifier: 96:F0:D6:2F:F0:1C:A7:64:EB:72:84:F8:92:0F:39:0B:16:0F:C2:E1
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E72A52A5064CACD80B400
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e1757f-27ba-325b-8b3e-59893e3a59af.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.56.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:72:a5:2a:50:64:ca:cd:80:b4:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=a16a0f30-e2e0-4eeb-98b2-7cac6c67c323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:8c:ba:01:ee:0b:70:63:a4:22:7c:51:e8:8b:
f0:89:42:5a:81:1d:ac:9b:2d:4f:4f:81:df:04:1b:
ee:79:4d:e1:36:00:90:6f:45:6c:36:c6:32:33:22:
66:78:a8:2d:94:a8:6f:de:be:f6:81:80:a9:8c:98:
60:7c:65:a5:02:56:d5:32:97:37:48:b1:3b:9d:91:
a8:c7:9f:ef:a7:96:45:2f:f0:37:29:68:29:62:3a:
fb:18:f6:a1:34:42:4e:7d:ee:53:be:f5:3e:37:5c:
4f:9e:41:91:ba:fd:56:c0:0d:ba:41:e8:a2:d7:b1:
f4:32:a3:42:04:60:05:4e:dd:3a:17:a8:ea:ef:a6:
b8:e2:31:3a:b9:75:d5:be:52:6b:08:1a:72:83:67:
a5:0c:88:21:44:c1:08:57:67:92:da:a2:14:c4:40:
7b:6e:36:78:17:5b:d8:5d:45:8e:f0:54:c5:6e:e6:
01:36:80:b8:a5:86:40:e0:fb:40:3d:70:91:1c:4c:
4d:02:30:df:78:26:10:ce:0b:cb:c4:0d:11:e3:5c:
6d:18:ce:66:01:4b:e8:6c:f3:e7:ef:b7:f2:ff:7f:
41:56:c2:62:e0:ea:6e:1f:de:c7:0b:2b:88:5f:3b:
bf:bf:73:16:3b:6a:af:5c:21:1e:09:2b:f2:31:3b:
4b:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:F0:D6:2F:F0:1C:A7:64:EB:72:84:F8:92:0F:39:0B:16:0F:C2:E1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4e1757f-27ba-325b-8b3e-59893e3a59af.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.56.217.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a2:2f:76:9d:eb:d5:a9:bc:9b:b2:dd:32:a8:ad:1b:cf:83:16:
4e:f1:04:d1:22:38:cf:fc:19:c1:69:dd:e6:a3:12:8c:26:95:
03:27:d1:5e:f5:9a:f0:2d:59:53:89:dc:79:d9:70:9d:63:c0:
b4:0e:9e:a4:ee:f8:1a:1d:a1:fa:42:37:dc:a9:2e:9a:f4:34:
25:3c:5b:a7:ab:82:23:3d:55:10:5b:2b:94:7f:0e:12:8b:bf:
36:79:7e:99:75:92:90:6b:75:ae:dc:11:18:27:bc:14:43:eb:
cd:f5:52:5c:0d:7e:6b:ad:16:9d:0c:e1:25:6d:d7:87:86:29:
65:02:43:14:27:4d:bd:fb:b9:b0:8c:89:72:7f:b5:62:46:32:
52:23:29:b1:51:25:26:27:c2:12:3e:e7:84:45:93:78:b4:32:
95:64:9b:2a:30:10:e5:0d:9d:9b:38:1d:20:ff:75:b7:a3:68:
0b:57:df:ad:b3:7b:a7:a2:35:78:24:0a:48:24:f2:ea:c4:5d:
93:ea:9c:bd:5b:5f:cb:b4:8d:e9:73:bc:0e:43:63:ca:3f:85:
45:fb:c4:b2:f0:84:6e:41:ff:b2:a1:d8:01:f0:44:cc:bd:3b:
df:bb:7d:6c:d8:b9:d7:be:5c:39:df:1d:6d:4d:0a:78:2f:58:
6d:dc:11:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 22:10:54 2026 by rpki-client