
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c8b37e0-97af-37cd-b301-ab331bf17e69.roa
File: 9c8b37e0-97af-37cd-b301-ab331bf17e69.roa (raw, json)
Hash identifier: jvPtFQZ1+qd63YgB8IG1vLt5+/ivxkCAFf0BnqFNdIM=
Subject key identifier: 3E:3D:59:B3:C9:49:E6:1C:1B:63:BB:A7:D4:1D:4F:BD:27:4D:20:35
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497A17734AB91CE421B9E600
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c8b37e0-97af-37cd-b301-ab331bf17e69.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33657
IP address blocks: 68.87.168.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7a:17:73:4a:b9:1c:e4:21:b9:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=a7f6ea09-c808-4d3a-881f-b1d9eb64f9ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:f4:ab:45:96:43:21:6e:ac:31:7e:1c:4e:f1:
8a:36:ae:a6:41:6a:5d:63:4f:41:a1:91:b4:78:13:
a6:f2:5d:d4:0d:b8:fa:b3:89:ad:08:39:55:72:3a:
eb:2c:02:9b:98:2c:92:a1:8c:82:5e:ec:e3:b9:6e:
ae:03:5c:01:52:6b:7c:e5:c7:5e:03:b3:e7:a9:57:
61:d6:ac:d0:2c:bd:96:ad:3a:8b:9f:78:7b:ac:25:
a6:b5:46:07:31:21:a3:e9:bf:f4:e8:f3:ab:d5:89:
a6:ea:a5:38:32:95:b0:83:5d:46:e7:7c:6c:00:00:
5f:f8:41:6d:d7:19:06:6b:7c:e0:00:9b:2b:cd:b9:
d3:1f:7b:a4:88:50:87:d6:e9:5d:f1:4f:df:b2:85:
f4:ae:e0:cf:cd:e8:fb:0b:b1:68:49:4b:ad:30:e9:
70:a9:cb:33:b2:e9:1b:41:36:7a:21:a7:c9:68:e9:
6f:13:a6:05:47:ad:0c:03:84:e3:af:72:e7:e8:4f:
7f:fe:e2:f1:2e:1b:bf:3d:1c:03:13:3d:68:41:eb:
a3:02:08:d7:db:17:6d:98:b5:cc:c6:ca:46:50:91:
73:fd:d5:3c:02:1d:41:e9:8b:50:45:11:32:76:07:
22:68:79:c7:b8:a2:41:2f:b8:04:67:d8:79:92:c8:
3b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:3D:59:B3:C9:49:E6:1C:1B:63:BB:A7:D4:1D:4F:BD:27:4D:20:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9c8b37e0-97af-37cd-b301-ab331bf17e69.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.87.168.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:c2:d5:39:df:74:bc:4e:bc:38:9a:f5:72:62:8c:50:14:cc:
f4:21:25:66:94:40:35:c7:f9:0b:ae:f8:ec:17:bc:8f:99:1f:
c5:be:e1:b1:71:e6:70:52:6c:c5:6d:62:d6:14:84:70:6a:6b:
13:14:07:ad:98:d1:5c:95:63:1b:bf:5c:11:c1:53:25:fb:63:
0f:39:58:46:33:61:f6:b5:b3:06:06:79:8a:da:fc:ff:6d:8d:
13:10:e4:c1:c4:b2:f8:19:e7:14:2f:27:c8:36:18:28:e0:32:
d5:db:f7:ea:86:23:ec:76:c1:74:8a:4f:6d:d4:f0:5f:c2:d7:
a9:27:7d:4b:3c:fc:3a:b6:00:30:41:ca:83:41:86:a7:41:f1:
a4:3b:f0:9b:2b:73:b3:f5:73:5e:9c:22:54:94:59:13:b5:7e:
f9:36:94:7b:dd:87:8a:4f:69:aa:83:03:04:80:09:e5:bc:05:
9c:cb:8e:b9:b1:5e:90:fa:fe:a6:c7:f7:91:1e:20:b2:57:94:
c4:8d:83:ac:f0:8e:b2:4c:01:1f:00:25:ad:0d:9a:09:0e:31:
b6:9b:59:a1:55:ea:d5:40:b0:84:f5:fb:1a:30:48:28:f3:f9:
d6:0c:46:44:f3:00:10:15:bf:26:f3:4e:bf:5c:64:6d:e7:75:
59:e4:d2:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 04:15:30 2026 by rpki-client