
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87afc83c-b465-3145-a5cb-91ad649ec4a9.roa
File: 87afc83c-b465-3145-a5cb-91ad649ec4a9.roa (raw, json)
Hash identifier: 0eWZte+Lzo7efVnBelul6iLicgB1TT1whtMMEbvMZ5U=
Subject key identifier: D7:D7:4B:8A:A8:EF:03:6C:67:EA:74:2E:5F:8C:8B:0F:1D:0D:C5:63
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78E60550B72948F2AC60B80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87afc83c-b465-3145-a5cb-91ad649ec4a9.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33491
IP address blocks: 68.87.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8e:60:55:0b:72:94:8f:2a:c6:0b:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=8dfa8718-a728-4ceb-9c1e-3518e83b8d5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:ce:fd:4b:c8:d7:96:53:3e:7d:2c:52:29:21:
ee:43:d4:cc:9f:37:03:a3:2c:0c:e4:1b:d8:5c:70:
2c:8d:06:65:b7:87:5c:ec:d3:81:ac:08:65:85:c5:
b1:48:c2:c5:1e:15:fe:a8:f1:97:b9:e2:0c:51:85:
b0:29:66:81:68:49:56:04:69:a5:63:f7:df:02:fb:
fc:07:24:05:bd:d6:ad:d3:63:f2:c0:b7:b4:c3:e2:
1b:e3:1b:81:66:09:68:f9:1f:fb:1d:78:9c:cd:dd:
9e:41:64:90:d6:bd:9d:3a:e3:b8:18:ef:cb:f5:e0:
3b:be:ac:1e:f9:ff:09:cd:8e:87:20:1a:9f:a1:b6:
00:bd:53:59:39:37:90:aa:b1:f6:ec:fa:a7:10:56:
3a:5e:8c:2a:c1:e5:f8:dc:7b:60:33:3a:5e:d5:73:
df:01:c2:51:0f:22:19:49:7b:55:b4:02:ef:ac:0b:
0d:41:0f:f7:b1:f2:08:84:cd:b1:ab:38:4f:9f:4d:
70:2a:6f:2b:6d:7a:ca:57:81:5f:0f:05:e5:18:e0:
08:ce:41:93:87:b5:b6:2d:f7:82:45:2d:94:0a:6a:
9f:88:e4:8f:5b:b8:bf:43:ff:d2:5b:ae:50:ca:81:
2b:8d:08:73:99:40:87:9b:72:fe:54:2c:46:4e:d1:
80:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:D7:4B:8A:A8:EF:03:6C:67:EA:74:2E:5F:8C:8B:0F:1D:0D:C5:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/87afc83c-b465-3145-a5cb-91ad649ec4a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.87.204.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:03:15:73:af:e7:4f:6e:9a:ca:db:85:5e:36:2a:c2:13:48:
0f:de:dc:f0:57:cd:67:b1:7e:f0:9c:82:18:52:81:ae:5c:3e:
82:39:23:87:61:28:a4:cb:bf:36:57:e6:6b:29:c1:be:ba:75:
66:36:10:85:b1:1a:56:c9:ed:ff:b8:a5:5d:f2:f8:18:21:07:
0c:19:d2:7c:0a:b2:05:64:1b:6f:e2:49:ed:b4:70:5a:63:22:
7b:09:60:74:52:d8:4d:2e:55:68:29:2f:f2:31:51:78:df:d0:
aa:11:8a:3b:f4:4a:7e:46:f0:ca:3c:8e:18:38:ef:63:20:07:
76:b4:54:1c:e2:eb:1e:7c:48:65:16:46:60:8c:e1:19:48:72:
f7:e7:5c:68:df:93:eb:c8:70:51:ee:c0:c8:5c:b0:ee:83:b8:
84:84:c1:30:d9:b9:2d:5b:98:64:86:f2:e3:85:d6:89:8f:67:
2a:d5:f5:e2:70:85:c8:2d:02:ed:7b:be:1a:8f:d3:57:9b:92:
4e:9f:08:15:0a:02:4b:8d:5f:ac:2c:c4:63:d0:56:8b:3d:18:
4b:dc:3a:6a:a6:ee:8a:66:f3:6a:07:21:a2:1f:9f:cb:5e:27:
fc:be:7d:06:59:62:4c:8a:64:81:13:50:af:ea:6f:04:4d:12:
3d:e4:69:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 07:14:49 2026 by rpki-client