
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbc7eaa6-4d2f-3969-bbb2-be26305e26da.roa
File: cbc7eaa6-4d2f-3969-bbb2-be26305e26da.roa (raw, json)
Hash identifier: 5ekX+tP/G1CS9e27D63EOmJwBRa+pJo75IHFZM7OK78=
Subject key identifier: CF:1D:40:AE:38:2D:31:72:D9:70:96:ED:F2:85:97:83:A6:6B:F1:6C
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB23F1D36AEF5E0147EF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbc7eaa6-4d2f-3969-bbb2-be26305e26da.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.61.86.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:23:f1:d3:6a:ef:5e:01:47:ef:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=d1ed5c01-c6e2-4ad2-a159-b7f52a04b90f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:93:1e:84:64:a1:31:1f:51:14:4b:07:0c:b5:
ac:99:aa:0a:71:ef:ca:8c:69:b9:37:09:25:ad:42:
01:c5:5f:a3:28:46:31:bc:44:62:a2:db:f7:1c:3a:
3c:2b:ee:81:b2:e6:ed:5d:97:36:42:94:19:38:44:
f3:b2:2c:e2:a3:31:1e:ba:42:05:12:f9:4d:17:5b:
a4:3b:47:c7:05:78:f0:f9:d4:24:b2:f8:51:f0:a1:
77:2e:c1:cf:fb:a1:9d:2f:0e:e6:9d:0b:4d:aa:b2:
23:7a:de:72:d5:8b:87:a9:f2:b7:a3:ce:3f:5b:dd:
2a:77:da:16:f5:b4:87:57:12:18:fd:e4:3d:af:e0:
60:a0:6d:5c:2d:a8:06:59:5f:dc:c1:fb:eb:b6:af:
ac:59:2d:ef:89:e3:20:65:5a:1d:eb:f0:bb:37:9b:
f0:ff:d1:f0:fa:39:14:c6:9d:b5:31:55:7b:79:a0:
26:a9:e7:de:87:b5:86:19:70:2d:a4:50:f5:19:65:
b7:fa:44:1f:49:7a:e5:14:14:b8:b2:1a:a4:f9:ea:
93:bb:bf:fa:43:9d:b1:59:a2:82:97:65:66:3d:f9:
00:54:67:76:55:43:a8:23:24:ad:fb:a2:85:d1:ce:
39:64:7b:fb:b3:f9:cb:ed:6c:ef:14:ea:bc:e4:c8:
f1:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:1D:40:AE:38:2D:31:72:D9:70:96:ED:F2:85:97:83:A6:6B:F1:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cbc7eaa6-4d2f-3969-bbb2-be26305e26da.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.86.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:06:e2:e9:66:30:57:d7:74:07:74:54:85:bf:07:ec:24:57:
96:56:e6:16:57:b2:e6:3f:46:2a:5a:9d:12:07:5c:12:d8:2f:
47:e0:64:8f:4e:a3:dc:bd:95:67:11:f0:89:3b:52:d7:30:80:
b2:bb:93:ef:f8:e8:e0:14:87:77:3f:f4:d8:0d:01:35:aa:2d:
20:79:23:1e:4e:b6:82:06:55:1c:cb:ed:1e:60:a4:f3:b4:b4:
ba:f0:47:2c:e6:6b:53:b8:51:88:23:3e:67:4e:d4:db:05:5e:
63:4c:05:36:7f:a1:ef:b8:a4:d0:a5:1c:fd:33:4a:35:12:bc:
e8:ec:a0:ca:bb:7b:f4:50:cc:23:de:89:70:a7:da:61:4b:a4:
8f:b7:45:52:90:07:9d:72:d0:a8:36:e6:10:33:c6:e1:be:86:
f0:89:74:ac:31:97:ba:7d:5f:51:7d:17:45:08:4e:52:c5:78:
7d:05:37:2c:02:03:11:8e:69:28:5b:e5:42:5c:20:10:cf:cd:
8f:0c:b6:d6:a3:35:4b:ce:aa:e6:24:3d:ac:a0:1b:0d:3b:68:
cb:df:63:bb:40:8a:c9:69:2b:21:cc:25:d4:93:05:d5:4d:62:
28:eb:e6:cd:ff:ff:00:e8:96:8b:de:ba:90:a3:be:44:f2:a3:
3a:7d:aa:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 07:19:53 2026 by rpki-client