
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebd8e8d4-7d7f-39fd-a007-952fd9a03af8.roa
File: ebd8e8d4-7d7f-39fd-a007-952fd9a03af8.roa (raw, json)
Hash identifier: xSOiVfjBOF8HCwWzLhoMsIK9TQ3ib5Jeqoihqmji99o=
Subject key identifier: 21:3D:DF:83:AB:3F:21:24:9E:13:93:76:36:72:45:ED:63:FE:A0:2A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862AA3E3EDAFC2CF55CE7A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebd8e8d4-7d7f-39fd-a007-952fd9a03af8.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.36.189.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:aa:3e:3e:da:fc:2c:f5:5c:e7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=ec9cc195-e908-40b4-9d8b-31d88a159c6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:68:bd:ae:62:53:55:10:97:37:ed:fe:49:fd:
f0:50:a8:ab:72:d1:bc:47:88:e1:8c:07:0f:5f:55:
6a:5c:94:a0:1b:91:d8:88:2b:0d:5e:6c:b3:c6:fe:
4e:15:0f:6f:16:47:34:fe:d5:fd:fe:bf:81:79:98:
33:4d:0b:4a:97:a5:35:44:40:3c:c9:7d:05:6b:aa:
cd:f9:30:7f:ad:c8:74:e0:a2:35:39:fd:e3:c8:49:
88:ba:eb:21:f7:d3:27:d5:70:d4:c4:07:d8:41:79:
f3:29:f2:1d:39:51:a2:17:a2:69:30:5b:ec:b5:c8:
2e:b9:ac:61:16:31:2b:07:59:c5:38:60:29:6c:2c:
19:5b:c6:ed:02:d3:e9:15:53:c2:0e:42:01:e5:f0:
38:0e:a6:06:9d:e9:a7:92:8a:0e:7d:c6:67:a7:41:
46:71:3f:39:c1:3a:49:6b:e6:f2:88:b6:0c:17:0c:
a1:e0:8e:e7:fc:3a:e0:77:4c:2c:33:c4:da:b9:9e:
33:61:d5:a4:8b:fb:f0:1e:4c:0b:88:b1:a3:2f:5d:
79:4d:77:6f:82:89:8e:20:e7:1c:2b:4f:2a:e3:7c:
18:fd:c0:52:f5:56:3c:50:6a:13:f9:e1:81:05:32:
b8:68:9b:7f:ab:59:56:c6:9e:1f:c4:aa:32:51:a0:
3f:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:3D:DF:83:AB:3F:21:24:9E:13:93:76:36:72:45:ED:63:FE:A0:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ebd8e8d4-7d7f-39fd-a007-952fd9a03af8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.189.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:d4:17:8e:30:18:26:37:dc:37:f4:59:7f:94:8d:c5:52:a7:
1b:bd:16:3f:96:b0:9c:33:66:c9:cc:1b:d9:4d:08:57:83:e6:
66:9c:c3:d0:18:88:54:37:ef:12:c6:23:04:d2:1f:bb:75:75:
cd:88:fd:b2:48:cb:ff:98:69:f9:33:42:f6:6d:d3:c9:fe:3c:
8c:75:33:d6:1f:53:44:03:9d:c4:d3:af:98:05:d5:75:94:dd:
60:33:52:74:b3:0b:4f:13:e1:f4:a8:13:f8:59:2b:88:70:ee:
39:02:90:32:69:60:57:df:9d:bf:c9:c8:c2:29:fa:d8:34:ff:
76:2f:6e:33:44:54:a5:4b:40:0c:91:79:59:e4:34:7c:c1:8a:
37:b4:ce:18:9d:08:10:64:ed:69:55:fa:ba:a7:e1:25:09:1c:
6e:0a:26:bc:1f:b3:b4:97:d2:ea:83:0d:6b:96:f1:28:d2:33:
d9:09:dc:95:4e:52:01:a0:dd:b5:36:92:87:07:e3:0f:88:1d:
e7:e5:eb:9b:2c:9f:e1:38:5f:63:fb:01:26:f8:db:6a:07:cc:
6c:0d:14:75:fe:f3:5b:58:7b:43:6d:10:7f:22:cd:ee:08:ca:
04:47:33:25:20:0c:e4:ab:87:e6:75:d9:80:6b:f1:46:fa:a5:
44:58:e8:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:31:43 2026 by rpki-client