
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa
File: 068688c1-0def-318a-acc5-4f64a4b57119.roa (raw, json)
Hash identifier: GjW+gd+XOAMSio6jzvABvDiQ2Ak4cMdZPgARbTZP1lU=
Subject key identifier: A1:AB:3C:F4:1C:24:89:04:7A:FB:2B:6F:80:A0:81:CC:97:72:E8:15
Certificate issuer: /CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
Certificate serial: 010D0C9F4328584EA78809FEBCD1727CFCB86F1C
Authority key identifier: B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 32923
IP address blocks: 66.94.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 06 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:88:09:fe:bc:d1:72:7c:fc:b8:6f:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35b4b3a4-a195-4325-8f07-9376a8ef2903
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=53db2507-2ef6-450d-87c9-b5289cc47f75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:e9:b1:18:67:e0:f7:d4:44:2b:77:ad:bd:44:
a8:58:14:40:c0:54:80:55:96:59:62:0c:52:88:ea:
16:1f:bc:e5:fb:de:78:0f:d8:7c:fb:91:5e:0f:e9:
42:2a:be:3b:6c:4d:12:21:c6:2d:09:ad:7d:69:10:
0c:d4:38:a4:fe:58:a3:ae:02:66:92:26:9f:d6:0b:
d0:6f:b7:45:c9:17:d4:ee:3f:f4:51:f3:49:1e:69:
10:af:de:e5:9d:a8:34:3a:be:ea:a0:d6:09:0d:36:
e9:83:87:99:f6:da:58:2a:71:37:1c:76:6f:4d:e7:
80:3b:44:8c:95:e0:41:b0:11:a2:12:92:6b:74:2e:
89:a4:fd:46:7e:4c:15:8d:2b:67:9c:68:98:7c:12:
a0:b2:37:e1:95:39:55:40:43:a3:01:eb:3e:04:23:
b5:9b:56:17:27:35:b8:6b:36:db:4a:41:7f:f2:d0:
19:f8:2b:aa:04:4f:88:ae:54:40:29:dd:98:8b:fd:
16:f4:c5:8f:1d:0e:48:52:36:a8:41:a6:87:af:f8:
de:66:7d:05:db:48:5d:27:f6:8e:86:16:d8:a4:d0:
b6:3a:77:76:0e:21:8f:c2:ca:99:56:8e:90:ee:6c:
d4:ad:a3:f4:7f:33:27:9c:69:f8:c0:c3:d9:05:9f:
12:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:AB:3C:F4:1C:24:89:04:7A:FB:2B:6F:80:A0:81:CC:97:72:E8:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/068688c1-0def-318a-acc5-4f64a4b57119.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903/35b4b3a4-a195-4325-8f07-9376a8ef2903.crl
X509v3 Authority Key Identifier:
keyid:B9:A9:F4:73:94:60:F8:F9:C3:99:A8:3D:01:57:52:82:5F:7B:DC:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/35b4b3a4-a195-4325-8f07-9376a8ef2903.cer
sbgp-ipAddrBlock: critical
IPv4:
66.94.48.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:88:52:67:15:18:b7:78:33:2b:ff:bd:b8:14:65:03:8b:43:
63:d4:cd:09:01:88:dd:27:75:27:85:91:e0:ed:dc:c3:60:cb:
95:6f:e1:98:e2:f5:9f:df:a1:1f:7e:10:a0:64:c8:35:5f:9b:
b3:eb:ad:5a:ce:ed:67:d3:ee:6f:4e:c0:ad:47:81:f7:f7:aa:
f9:c9:06:e5:79:a8:61:38:c8:fd:54:6d:8f:bb:28:6a:cc:9e:
70:a1:0d:5d:b4:a3:ad:c1:89:d6:43:36:85:aa:21:dd:8e:65:
3e:2f:6a:2f:42:de:24:c9:18:f6:70:52:d5:9b:0b:32:6f:a3:
64:be:43:f3:a2:95:81:b9:42:ca:86:1a:f1:35:1a:4c:0c:db:
48:f4:6b:0d:ad:69:a7:53:bd:62:03:6b:52:da:ec:0c:f9:da:
12:74:8f:26:61:ff:5f:17:fc:11:f3:ec:00:d2:b6:d5:29:9c:
af:0e:46:25:01:c0:b8:10:8a:cd:a5:e7:e2:86:3d:d8:fc:32:
36:a6:ed:42:2f:72:c8:a3:c8:fe:4f:6f:84:b1:af:e9:20:e3:
13:47:ea:8b:71:56:9e:49:8b:a8:13:52:42:cc:6a:8f:fd:f7:
19:ae:b9:2c:53:44:4b:b5:51:51:af:a0:8a:d4:d8:21:4b:7b:
c3:67:f9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 02:45:55 2026 by rpki-client