
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b856c3-f7ef-3bed-830d-81e93defefe2.roa
File: 45b856c3-f7ef-3bed-830d-81e93defefe2.roa (raw, json)
Hash identifier: zekSwhLKU2k2ydsU96IpIANZCN5BQZmx4sBcdv7sxLI=
Subject key identifier: BA:8F:B6:4B:87:7D:DD:B7:F9:23:49:C1:E4:53:68:EE:0D:84:B6:DC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78ABB52358443446CFD7480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b856c3-f7ef-3bed-830d-81e93defefe2.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33287
IP address blocks: 68.86.156.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8a:bb:52:35:84:43:44:6c:fd:74:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8eaff5da-92a7-4362-a4c6-a2e49f999488
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:66:13:f9:e5:ee:2b:45:81:64:89:fa:14:12:
e8:47:bc:91:73:f9:37:e2:31:8c:09:1e:68:46:2f:
1a:a8:bd:66:f3:29:2d:a4:cd:42:06:e5:8f:c0:74:
46:30:2f:c9:75:b8:ab:de:0c:c4:a8:79:b0:30:73:
a7:33:7e:71:61:1a:3c:c6:c6:a2:5b:57:91:60:eb:
58:f5:1f:bd:60:ef:5f:8f:de:82:96:37:e1:99:fd:
ad:b6:60:5f:09:47:85:49:fd:4c:4f:20:49:27:b0:
c2:b5:fd:3e:8c:08:a3:f0:37:34:dc:8e:4e:e0:cc:
56:39:10:8b:e0:ce:c6:79:a9:76:7b:33:46:d7:9a:
c9:f8:e0:9d:88:65:70:73:9e:d3:6c:f1:69:cb:7e:
00:c5:30:82:c4:c3:ac:22:63:2b:22:c9:dd:32:c2:
59:d3:d5:0a:94:ad:c8:26:4e:c1:98:7d:df:f5:03:
4f:a0:cd:55:12:97:3c:e9:d5:88:13:37:98:a2:7d:
5e:bf:b9:fe:8d:02:e0:25:2b:21:c0:0d:bc:91:37:
0f:07:24:05:2e:79:9a:17:02:23:21:2b:20:42:00:
4c:04:61:33:58:c2:df:87:8b:5f:81:07:96:91:23:
26:db:6d:3a:dd:8d:23:8a:3b:f8:2f:ee:3a:a3:bd:
e7:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:8F:B6:4B:87:7D:DD:B7:F9:23:49:C1:E4:53:68:EE:0D:84:B6:DC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/45b856c3-f7ef-3bed-830d-81e93defefe2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.156.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:e4:1b:fe:b1:3a:b5:5a:d3:e0:a9:99:b3:fb:11:51:bf:af:
23:81:d0:29:a2:e4:05:96:49:f7:1d:a1:92:d9:d1:51:eb:ba:
f1:c2:b0:6e:5b:1a:51:e8:17:42:41:98:b3:0e:d3:4b:e7:d9:
f2:13:0b:14:0e:bf:ff:3f:ab:69:08:4f:46:cb:a9:f6:2e:a6:
0c:43:74:8a:4b:b3:c3:d1:a6:b7:c8:0f:90:49:9b:69:99:c4:
e1:8c:f4:80:ac:43:6f:b4:94:67:c8:68:49:eb:e6:50:89:ca:
50:2a:25:db:62:96:0b:88:d1:6d:01:ae:8b:dd:95:5a:0a:4f:
02:36:4c:0c:86:01:34:a4:0d:d7:cc:f7:52:85:5e:c7:41:5c:
d1:09:9e:ad:ba:d4:ec:3e:4d:b8:30:e4:6e:09:e5:af:14:44:
97:1b:d7:83:3b:d2:64:93:ae:03:89:18:c7:6b:eb:59:dc:f1:
80:25:2f:f4:31:28:ce:ff:a4:d5:83:ff:97:6e:ea:8a:c3:42:
78:a3:43:34:7a:6a:f1:60:45:94:5f:f2:e3:05:9b:bc:3b:33:
05:d0:42:d9:94:8c:41:90:d8:00:6e:dd:f4:0a:04:cf:77:a6:
37:8b:6c:56:eb:60:78:3c:6f:ca:83:f2:e4:8b:ce:69:59:ef:
a8:1a:64:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:32:23 2026 by rpki-client