
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3de171fa-1b59-3098-a8a5-93e43558441a.roa
File: 3de171fa-1b59-3098-a8a5-93e43558441a.roa (raw, json)
Hash identifier: ACn7/OY0AqEMelR5xvKIq65DMfJXQ4/a+GVsnrEjMKU=
Subject key identifier: 48:6B:C1:7B:EE:14:11:B2:F2:F5:6A:11:9A:61:94:84:67:36:B6:19
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78D5EDD2861AE12E79F8C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3de171fa-1b59-3098-a8a5-93e43558441a.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33668
IP address blocks: 68.48.0.0/15 maxlen: 15
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8d:5e:dd:28:61:ae:12:e7:9f:8c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=759ad790-7d45-4649-bf02-1c1fa0589f0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d9:5a:d6:c4:9a:16:c1:02:66:40:4d:72:48:
c8:08:2e:04:a5:f9:d3:44:01:63:f1:d1:9c:0b:4b:
fa:57:17:67:93:31:cf:3f:42:16:61:8f:87:d9:8a:
7e:b4:fb:99:27:e4:9c:5f:a5:05:3b:06:fd:3d:ca:
d5:07:30:97:a4:42:5e:43:2a:bd:67:b5:1f:87:b6:
93:a2:ec:a3:f7:6d:01:97:ea:a4:d9:69:d6:51:eb:
3d:21:37:c0:0a:4a:c6:5d:12:5f:3c:75:36:52:90:
f3:f2:b8:e4:03:81:12:15:7e:a2:8a:dc:3d:c1:11:
26:f2:cf:a5:af:3c:68:d0:8f:3a:2b:bb:24:25:56:
3e:be:ac:1c:bb:a9:60:bf:2f:91:d3:74:8f:fc:af:
e0:db:bd:e3:58:12:f3:2f:c5:cf:51:83:cd:98:96:
d2:5e:d2:f8:94:4f:e3:25:6e:98:71:a8:da:00:bc:
20:bc:e4:ad:7b:34:02:dc:76:49:78:d2:d2:64:ca:
39:d7:0a:cf:98:af:2e:4e:e5:fc:36:08:58:9e:b4:
3e:5f:b5:f0:0f:1b:c9:5c:43:b6:f2:5b:46:2d:fc:
2f:5b:fd:55:73:08:9d:2c:67:06:8a:ee:59:f3:e0:
6e:60:f8:2a:cd:43:42:23:60:09:42:fc:c8:7e:54:
03:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:6B:C1:7B:EE:14:11:B2:F2:F5:6A:11:9A:61:94:84:67:36:B6:19
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/3de171fa-1b59-3098-a8a5-93e43558441a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.48.0.0/15
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:09:5a:03:a6:b4:9c:bd:90:19:dc:7e:69:28:5c:f0:33:dc:
54:d9:6d:b5:a0:ff:ff:5e:9e:06:26:85:22:ab:6c:92:85:4e:
bd:6f:e9:d1:45:45:6f:a7:ff:28:ac:85:3c:03:39:9e:ab:e1:
fd:40:b2:0f:21:8b:2b:c8:c9:7f:41:31:e5:8f:f4:bb:d6:a3:
84:73:a3:1b:b9:ba:e8:63:98:7d:5b:3b:27:53:89:1f:7d:dc:
c9:31:b7:a8:66:11:02:ef:10:44:a1:6c:4a:c0:e3:68:12:b0:
35:f4:87:a7:9a:3e:72:42:43:f4:ff:68:0d:7b:9a:5c:eb:f0:
a8:38:c5:e2:03:84:57:a3:7c:67:11:c1:06:0b:e2:5f:55:b9:
24:d6:9b:d0:f8:c3:78:60:b9:3e:b6:db:fd:a1:c8:c6:12:7c:
25:8c:78:e6:c4:27:68:c8:ee:ea:91:b0:2f:ad:0f:24:bf:9c:
0d:b9:d0:48:e1:bd:c1:01:7f:d5:27:f3:09:92:bf:c6:3d:12:
b4:c5:1a:64:96:5d:b8:c4:5d:91:e6:0c:f0:ae:87:6f:6a:ea:
24:d5:ac:59:d1:c4:00:d6:29:e8:90:9b:19:04:66:c0:d8:0d:
45:5d:0d:c5:71:4a:2d:17:8f:41:ec:77:a7:ae:97:18:87:8f:
15:59:30:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 05:50:01 2026 by rpki-client