
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa
File: cf6479c8-89c9-3878-b98f-958d98676384.roa (raw, json)
Hash identifier: NNL5BvB13dDTNZcPytYhKHwZ6zNo1meygIJJVclU7sA=
Subject key identifier: DE:54:99:DC:7F:33:45:92:28:D7:09:46:E0:5D:4B:38:19:EC:28:36
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA7895F70C8D77FBD8CA3FB00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 33489
IP address blocks: 68.86.168.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:89:5f:70:c8:d7:7f:bd:8c:a3:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=3b29cc39-12c0-4d40-b1e1-271d4a8b88ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:48:ef:b2:36:35:36:c2:5f:1c:e3:a7:3c:c2:
3a:93:4b:9e:34:22:bb:0d:54:54:6c:16:e2:3c:c6:
10:78:b5:e8:0f:86:3f:ba:c8:36:96:53:29:29:ca:
6b:42:ef:f1:0e:64:46:0d:c0:89:18:05:33:31:6c:
26:3b:5c:02:e9:44:df:0f:96:e4:78:f4:28:69:95:
ed:3d:69:da:66:94:b7:81:86:74:84:2a:48:f0:76:
c9:43:f0:bb:d5:17:f6:fd:cd:5f:6a:be:aa:a4:a0:
e7:92:7d:7b:75:19:52:de:06:6b:0a:55:2a:45:ab:
9a:08:b8:de:47:8a:a1:95:0e:a8:d0:a1:48:64:b1:
46:fd:3f:d7:9c:b9:ca:21:d9:15:42:61:5f:2e:51:
51:ea:cb:e7:bb:8b:de:db:52:72:7e:b1:a9:34:a4:
b9:6e:94:1e:29:e7:df:29:77:77:f8:2d:a1:ae:a0:
ba:4c:bc:46:19:ef:90:54:ee:07:8c:70:2a:f1:d7:
0d:90:46:41:b2:be:ea:d1:d7:ed:45:46:55:5a:2f:
4b:a2:af:e9:64:ad:da:c1:e9:25:f3:56:80:97:cc:
d6:be:da:94:7e:0f:fe:37:84:9a:fa:95:96:57:88:
e0:ea:5d:13:fa:12:e7:d3:8b:70:80:60:e9:33:b4:
04:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:54:99:DC:7F:33:45:92:28:D7:09:46:E0:5D:4B:38:19:EC:28:36
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cf6479c8-89c9-3878-b98f-958d98676384.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.86.168.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:49:fc:0e:5c:98:cc:a7:6f:36:a8:b9:7f:7a:c6:18:03:ee:
c1:37:48:f5:24:37:93:0e:28:a3:d2:ad:13:b9:3a:5e:ed:5c:
d5:25:e6:f7:04:eb:4e:66:83:1c:5c:5b:b7:1f:24:67:25:30:
a2:3b:3a:06:63:36:38:9a:15:86:55:35:f5:89:f4:60:4a:31:
bc:c0:6a:d2:4e:dc:20:38:6d:e8:d6:c9:7d:84:24:5d:54:1f:
12:ea:a2:d7:0b:2f:df:04:68:68:93:27:6b:ec:44:10:e6:c4:
49:3c:e8:38:80:b7:e0:21:f3:5e:2b:5e:69:83:6f:e5:f5:87:
2a:0e:33:c0:24:ee:4e:78:8f:1f:9a:e3:80:37:e3:a2:0c:c6:
51:7f:59:36:b2:7d:71:90:0f:46:fc:22:0a:44:70:b2:3e:b1:
21:6a:b0:39:32:2d:52:d4:9d:5e:a1:0c:a5:f7:e6:d5:e7:b7:
31:85:4c:04:ff:c0:41:cb:36:5b:f0:32:b3:a4:91:67:4b:ae:
96:c1:26:e9:6d:69:e8:13:66:11:9c:c5:10:4b:71:24:59:4c:
7f:25:87:c6:e5:98:19:08:6d:7f:fb:46:9c:e4:68:bf:f9:4c:
8e:ab:49:28:1c:56:1c:29:1f:0d:f7:91:ed:74:b7:5f:3c:86:
50:1c:29:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:56:20 2026 by rpki-client