
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa
File: 220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa (raw, json)
Hash identifier: qwdz8K1tmifpkOJMbEQXd3hkGCk0aUehl2z2+XGc1p8=
Subject key identifier: 27:AF:3F:FB:9E:0B:A4:21:46:8F:FB:20:2B:D8:0B:3C:E6:72:38:65
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862C16966819A81D487C880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.60.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:c1:69:66:81:9a:81:d4:87:c8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=c7aba4b3-7cff-411b-b07b-0f98d9bf3814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:41:32:c6:d6:4e:e8:71:c9:c1:72:3a:6b:81:
1e:4a:00:da:e1:7f:37:38:4a:32:ec:10:86:76:b3:
62:f0:58:42:be:73:fe:96:f7:04:1d:a8:ef:52:b4:
ef:df:07:16:3b:38:41:8a:55:30:a0:b4:18:08:d4:
37:fb:b9:b8:50:7d:d1:f1:4a:86:36:5f:94:7c:d8:
e7:9b:7d:bf:ee:33:64:68:32:83:04:75:7b:9e:77:
b4:11:ad:56:af:83:55:58:b4:1f:ce:27:4f:53:2c:
f2:e1:8e:fd:18:cc:65:21:96:95:fe:67:89:af:0c:
19:67:10:79:7a:4f:8e:2c:48:86:fc:91:55:9c:98:
ea:0e:38:4d:a4:d5:d2:92:65:77:e1:b6:9d:a1:03:
d6:77:68:51:83:cb:df:bd:23:e7:7e:58:d6:e3:ce:
aa:ec:67:a5:44:99:b5:8b:3a:36:7c:9c:be:19:82:
6b:ea:aa:bd:5b:c7:02:b6:2b:bf:4f:42:60:74:fb:
b0:aa:d9:4b:1b:d4:db:1a:9d:c2:e5:66:a5:dd:1a:
af:fd:b5:e1:c0:89:4a:4c:c2:e0:69:75:74:63:4e:
d9:bb:93:6a:e4:20:d7:46:c3:16:a6:a0:62:c7:b8:
79:b7:12:29:c6:e3:5a:e1:b9:86:00:ff:8c:a1:b6:
f9:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:AF:3F:FB:9E:0B:A4:21:46:8F:FB:20:2B:D8:0B:3C:E6:72:38:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/220bfb7e-1462-3e0f-99e5-43b2f3ebd02e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.60.38.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5b:a8:0c:9d:f0:8e:4f:0e:81:1f:11:00:22:fc:80:af:5d:89:
7b:25:3c:ea:b2:10:c2:1d:c0:f1:40:61:b5:be:33:b5:f4:35:
de:fb:f2:ea:d4:2d:87:d4:54:e2:73:32:e5:80:95:c2:21:57:
98:1e:04:cb:e5:11:3a:36:16:36:8a:39:0b:4f:bf:36:bf:2f:
39:c5:d5:8c:ad:1d:80:2f:af:dc:31:f5:a2:a9:a6:45:e0:68:
c7:bd:e5:6d:92:ef:85:ae:39:31:a3:3d:52:b2:75:77:37:2d:
f1:13:06:7a:5d:a7:48:33:d4:23:01:60:53:09:87:94:35:ee:
c6:08:73:3e:d8:80:a2:14:4d:bf:44:dc:58:24:15:e7:cb:25:
f1:02:67:5e:b1:e4:89:cb:9a:84:a0:07:08:95:35:a0:d8:df:
02:81:05:d7:7f:24:1c:f9:00:fc:9c:09:b1:63:c9:83:55:be:
dd:c6:8c:d4:c1:36:dc:fb:01:e5:0b:5a:4b:11:38:90:27:13:
24:de:86:26:04:6e:7d:6b:d1:32:4c:74:43:8d:9a:d6:c9:e8:
b4:a1:06:8e:26:13:16:10:5f:52:c2:4a:47:69:23:f7:5b:d9:
f0:1e:44:9a:16:9e:02:98:1d:6c:48:bd:cd:ab:a4:34:eb:e8:
77:de:37:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 21:48:15 2026 by rpki-client