
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b9c2ed-3226-3ccf-8a86-998310dde108.roa
File: 78b9c2ed-3226-3ccf-8a86-998310dde108.roa (raw, json)
Hash identifier: p8L77wqJboyNOcDUC8ljclpAE+mPqSVIdkK+LsELlhk=
Subject key identifier: 4E:BA:06:6F:A3:B5:B1:7F:12:B6:C1:CB:29:A1:B6:6B:75:62:91:15
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4978EC41472A853AA899C140
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b9c2ed-3226-3ccf-8a86-998310dde108.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33668
IP address blocks: 68.86.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:78:ec:41:47:2a:85:3a:a8:99:c1:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=638357ac-ca26-4a64-b410-70334bc6de74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:86:53:ab:ee:2e:5b:33:61:fb:46:2a:a3:5e:
8c:06:59:21:36:de:01:9a:68:01:cc:17:00:dd:33:
e1:11:44:f4:96:7f:ab:a7:db:88:02:f0:f2:43:48:
09:fe:61:4c:54:3b:c7:0d:55:50:6e:25:4a:e5:c2:
6a:3d:d6:4f:eb:94:7e:9b:14:ec:8f:f9:4e:87:7e:
50:2b:88:c1:06:de:8c:ae:3f:78:60:92:11:56:db:
3a:bd:d9:04:9c:56:92:89:e1:dd:f7:46:3c:95:4e:
50:2c:35:a5:d5:a8:00:1b:0b:28:c5:47:21:7f:39:
15:b1:7b:f0:13:d9:a7:ef:c8:7a:f3:27:38:99:b1:
1d:b8:b7:9b:db:0c:7b:80:f7:b1:57:02:3b:0d:25:
7b:54:d5:ef:ee:e6:a2:6b:78:e2:6c:d4:da:b2:d3:
c1:70:c8:d3:d5:ed:8a:da:47:dc:f7:88:85:c9:f3:
91:6b:ec:eb:45:83:a1:8b:1e:d4:d6:3b:b1:cd:46:
86:83:39:85:58:35:46:5c:4f:48:59:d9:52:4e:88:
50:51:94:d1:60:44:b2:fb:29:5c:f0:3a:3b:69:de:
ab:8e:5a:ad:98:bd:3a:22:dc:07:90:21:31:96:00:
6d:a7:aa:0d:fc:42:43:66:a0:f9:be:45:9a:6d:94:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:BA:06:6F:A3:B5:B1:7F:12:B6:C1:CB:29:A1:B6:6B:75:62:91:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/78b9c2ed-3226-3ccf-8a86-998310dde108.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.21.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
dd:cd:79:9d:71:bd:31:0e:57:0f:2b:88:d1:73:cb:be:4a:34:
25:7d:7e:ce:74:06:eb:b6:3e:a2:a7:ca:83:44:73:9e:96:ba:
58:91:51:99:05:53:a2:1f:dd:d1:70:9c:91:9b:08:93:9f:7d:
91:d1:0a:e6:cb:00:96:95:a1:e8:18:35:19:a5:ce:c2:01:a9:
34:0d:64:94:ae:e5:14:ce:18:32:ef:df:88:f7:30:ff:3a:06:
84:8b:26:ea:b9:5c:2b:4c:0f:93:58:ae:af:74:db:08:eb:98:
b9:30:92:4f:49:1b:18:94:50:8a:66:ba:8b:90:45:77:9a:01:
e0:9c:97:10:99:75:53:a9:35:6f:dc:84:eb:59:15:da:cc:af:
9c:11:f9:55:28:1b:06:dc:05:41:dd:e3:c1:6f:d9:73:ee:3d:
78:fb:88:f3:77:df:33:8e:9b:11:91:47:dc:a0:5c:da:17:7c:
8e:47:06:f8:f5:33:a9:7a:19:cd:08:37:ef:86:5b:ae:f9:8f:
98:56:69:cf:42:2c:39:85:d4:df:9c:ae:06:42:8a:69:3e:a9:
78:81:7c:ec:88:67:33:97:b0:1d:dc:13:c7:1d:11:d4:2c:91:
97:1f:56:ee:3d:d1:cd:52:c1:7c:12:ad:22:bf:fa:05:da:b7:
14:40:b5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 19:14:23 2026 by rpki-client