
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa
File: a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa (raw, json)
Hash identifier: JZ0qYss1oqiqV5cRbjRHUsDsGSir939q41mNy+McdaI=
Subject key identifier: 0F:F1:39:5C:E0:84:3F:B5:45:FD:9A:8E:73:0B:4A:F2:F2:C9:C0:90
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4977798463A1033E95315220
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 68.53.72.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:79:84:63:a1:03:3e:95:31:52:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=7f9348d0-58d4-41fe-be29-a472f49f0609
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fc:a6:06:ef:1d:15:bd:a6:79:f1:3b:93:c5:07:
b6:40:d0:0c:ee:41:59:f7:98:4c:ec:86:18:72:78:
20:d8:e0:df:59:5a:d2:d4:4b:ac:f8:c8:56:2b:e2:
9c:bb:b7:8c:28:29:0b:b1:48:17:af:f0:21:ac:13:
4d:7e:45:27:3a:04:81:2b:12:ce:50:3f:72:ec:28:
71:8e:a1:c5:b2:c9:03:4b:bb:28:20:20:56:53:e2:
55:6f:df:20:09:a9:da:79:c9:35:c2:7f:0a:ba:66:
5a:09:55:1a:ac:6a:42:92:7f:5e:c7:42:52:5c:5f:
5f:79:b8:2f:74:6c:be:38:0f:91:cd:1a:c4:c3:46:
d4:5b:3f:22:11:7e:78:d4:fe:e1:35:2d:15:5c:33:
91:7e:61:5b:86:c1:b4:84:25:a4:0d:bb:16:57:67:
41:d5:3c:9d:60:a0:e2:75:33:7b:64:3d:27:4d:f7:
84:1f:02:05:60:46:c6:f9:67:b9:87:af:32:88:4b:
ee:d1:f4:aa:0d:02:1a:bc:56:46:68:c0:fa:f0:b3:
42:01:8b:63:bd:62:e2:ce:ec:15:f9:0e:b9:fa:c4:
59:40:95:b0:35:74:10:df:56:44:e2:89:e2:67:20:
f0:22:db:76:7d:a5:e9:6c:dd:f1:bd:78:7c:cf:78:
a8:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:F1:39:5C:E0:84:3F:B5:45:FD:9A:8E:73:0B:4A:F2:F2:C9:C0:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a1f9e0eb-52c2-3602-95cc-5b5428e0d69a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.72.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0b:12:8f:b7:b6:77:e0:3f:1a:8d:72:52:25:c3:ca:7a:76:4d:
91:07:cc:8f:bc:f4:c0:f2:fa:b8:26:1e:45:c5:a4:5d:78:a3:
a6:38:fc:33:fa:7b:0b:c7:ed:73:32:b9:28:a1:5b:91:44:6e:
16:f7:95:44:2c:21:81:d5:e4:c6:29:a6:03:c8:b4:04:f3:94:
b1:c4:91:4b:e7:1a:9e:3b:23:e5:54:cd:b5:42:54:bc:12:4e:
30:c9:e6:a8:23:84:59:61:21:84:00:a2:7c:34:d0:28:ad:ca:
fd:ae:27:48:b7:15:49:87:b9:25:de:25:81:72:8e:55:aa:d4:
b7:5c:15:c3:6c:d8:9e:74:68:bb:4b:18:09:67:14:fe:2a:e2:
4a:5f:10:fd:74:d1:66:53:39:57:4c:59:76:47:ee:eb:1f:d4:
0d:c0:4c:05:18:da:8a:d6:61:26:08:7d:bd:dc:14:76:63:99:
8a:7e:15:3e:73:81:d7:4a:d1:f5:58:37:e9:c8:20:84:5e:6e:
12:cc:87:e8:9d:8d:e5:77:28:5b:0b:3e:db:9c:9b:a7:12:55:
d6:5e:42:b9:e6:60:db:95:c0:2e:19:81:dc:68:b0:af:e6:99:
89:7d:c9:58:b2:4a:62:64:1d:e4:bc:52:f2:02:07:a7:c0:a5:
b6:fb:44:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 13:33:20 2026 by rpki-client