
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0be028c-ae11-3f0e-93b2-b128d025f391.roa
File: d0be028c-ae11-3f0e-93b2-b128d025f391.roa (raw, json)
Hash identifier: 6CwZU7E/QJTZFizoYZxYEcbWv05wblxblCM7ejmZE/k=
Subject key identifier: 42:44:E8:C3:6B:88:A2:6F:16:72:AF:E7:68:6C:4B:90:C9:90:42:17
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78BBFF7CC64FA0DC425F8E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0be028c-ae11-3f0e-93b2-b128d025f391.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 22909
IP address blocks: 68.53.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8b:bf:f7:cc:64:fa:0d:c4:25:f8:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=a8ebc7ee-dd2d-4bbb-a5b4-02a890474be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:03:a5:73:01:db:91:28:b4:e9:f2:4b:da:cb:
e0:61:05:9b:f0:da:8f:e2:25:f5:8e:3e:57:47:bb:
d7:fa:53:08:47:44:81:37:79:9a:3e:83:ae:f7:c3:
48:52:41:6e:28:7d:da:c6:89:5a:2a:7d:21:b9:05:
15:28:15:c4:bd:bf:ce:b2:a5:8a:eb:ff:fe:63:37:
65:12:f3:dc:9a:e2:f4:8d:39:31:46:ed:4a:2b:14:
99:fc:29:7b:9a:a1:bc:74:59:bb:e8:01:f5:5a:82:
28:43:50:bd:66:44:cf:0c:2d:6d:fd:2e:2f:e3:36:
cb:63:b8:67:cf:de:ca:0c:aa:0d:0c:06:ba:d1:53:
20:6a:82:76:c3:07:67:a1:1c:f7:ab:cc:1c:07:3e:
5c:7a:76:67:41:db:06:01:f0:4b:49:76:77:0f:54:
6f:0e:03:68:d4:e4:91:3a:59:cc:ee:5f:f4:d0:b3:
f8:a1:a4:f6:c0:c9:32:85:68:0a:58:6a:df:37:0f:
69:22:ff:61:1f:97:72:3a:8c:33:fc:14:46:31:80:
d2:43:18:27:48:70:85:84:74:9a:69:cc:9b:1c:53:
2c:86:74:53:0b:24:73:e2:5d:1f:58:72:06:9e:84:
3e:ab:b5:e7:57:b1:2b:44:ac:77:7e:29:76:65:c7:
46:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:44:E8:C3:6B:88:A2:6F:16:72:AF:E7:68:6C:4B:90:C9:90:42:17
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d0be028c-ae11-3f0e-93b2-b128d025f391.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.64.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
14:cd:85:07:85:b6:f1:3a:f6:3b:37:78:4e:16:94:d7:1e:6d:
91:fa:8a:3a:b0:05:c0:bb:95:9b:77:3b:cb:13:2d:cc:57:0d:
1b:54:21:71:4b:70:20:57:9b:87:82:18:88:1e:9a:75:ea:0b:
72:dd:12:b2:ce:4e:81:8e:d6:63:b2:5a:56:af:1e:8a:d7:df:
3b:1a:34:36:4a:6a:0e:dd:78:a3:a8:38:43:d0:2e:f4:9a:1d:
92:6e:84:0c:de:53:88:60:ef:22:62:c5:ab:ec:70:3d:2b:af:
76:ed:1c:d0:92:96:dc:2a:b4:03:f7:ad:26:03:44:7a:9d:0c:
10:f3:3c:56:02:28:02:0d:18:f9:5e:54:bd:55:49:db:67:2b:
18:2b:60:fb:4e:43:dd:54:08:e0:2c:da:45:d9:3e:c8:9e:6d:
12:38:c9:89:ad:0f:94:6c:39:0f:20:e2:21:43:4b:02:07:d6:
eb:46:fd:f5:aa:e5:a4:27:58:2d:7b:1b:07:84:65:75:cb:e2:
6e:1d:8d:2e:f1:be:70:6a:4b:4e:20:41:bc:7b:bc:eb:7b:d6:
8c:96:95:4e:ba:90:17:b7:89:f0:85:69:73:55:00:01:97:68:
52:2f:10:19:8d:42:1c:3b:46:13:dc:2b:54:00:82:33:df:8f:
63:56:bb:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 04:47:46 2026 by rpki-client