
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa
File: c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa (raw, json)
Hash identifier: fZJkz+CBrwZTxh4NyiLykAKU4D/Y3sISZOdDABzVlPo=
Subject key identifier: B1:C4:AC:10:16:09:76:D0:52:99:97:03:5E:47:4A:55:07:70:48:79
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584EA7875E4C2025B3C1D0BEFA80
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 23473
IP address blocks: 68.234.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:87:5e:4c:20:25:b3:c1:d0:be:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=aa5b29b9-3afb-499a-9e55-33193dbdf11e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:1a:b5:28:16:12:ba:d1:19:33:6b:dc:c8:cd:
6a:3a:de:cd:e1:fb:0d:e7:be:5d:06:c2:b3:22:2d:
37:fd:df:5d:72:1d:65:00:7f:d6:ed:99:15:66:a6:
cb:71:21:b5:b1:10:40:91:6f:dd:60:c5:82:db:9c:
de:fb:92:74:e1:c0:1e:7b:56:00:1f:56:67:1a:90:
01:5e:e9:96:7d:59:dc:b8:8e:20:bd:bc:9d:db:8c:
6a:1e:5f:53:74:91:55:96:ed:28:d3:10:25:98:c0:
27:c2:a2:28:f6:e5:2d:0b:0a:bd:20:23:fa:e4:c7:
89:ae:f4:f5:e7:86:cc:35:4c:c9:f9:dc:00:08:94:
c5:d3:3d:57:40:af:fb:78:fc:7c:09:44:5a:bb:63:
c4:6f:8d:40:3a:bc:45:11:b0:84:e9:cf:fc:06:55:
b5:14:53:c6:ac:50:e5:cb:d6:51:02:88:43:6d:a7:
73:51:a3:15:93:4c:1d:be:3f:57:e8:80:b4:e9:7b:
73:cf:f7:11:ae:ae:4a:a9:30:ee:9b:89:f8:4e:8b:
7e:51:62:5e:c8:7d:af:85:ab:41:1f:c8:ad:75:1f:
4e:8d:d5:fb:34:ac:bd:5d:27:b2:b8:04:5f:84:55:
0f:04:59:c8:41:13:34:d2:38:49:f9:ac:16:f0:1c:
a8:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:C4:AC:10:16:09:76:D0:52:99:97:03:5E:47:4A:55:07:70:48:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/c5ebc18d-ecf3-3fb3-8d50-5ecf0a308ce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv4:
68.234.128.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
6d:1c:83:dd:a8:69:3b:8e:92:b8:c4:6c:2c:6e:cb:e1:73:fb:
10:57:be:42:a7:da:39:09:e3:48:82:c4:40:46:b4:2e:5e:d4:
e7:ad:53:b7:28:b6:b3:21:14:92:fb:34:ce:40:fe:63:4b:29:
1f:02:a9:55:18:a6:c2:c9:de:a7:14:35:ef:47:02:70:a8:60:
8b:ab:a1:be:21:c0:83:cb:1c:78:aa:fb:86:85:17:92:9f:19:
73:d3:2d:13:62:12:92:c5:73:14:63:95:26:c9:e1:32:e4:05:
6c:a9:b2:b8:b2:ac:42:e9:93:ad:2d:d9:9d:fc:18:fd:73:41:
19:02:29:4d:0a:f5:fe:7c:cc:20:0f:78:01:d3:80:d2:a0:34:
9c:4a:b2:fd:f8:fa:f1:4e:ca:26:10:a4:6d:38:0e:05:19:d3:
96:ad:7b:75:4f:15:56:fe:c9:4d:95:4a:bb:41:eb:71:a3:4e:
fa:b5:b4:bd:68:64:90:41:ff:21:52:2e:b7:7c:d5:c6:0c:3a:
63:c4:6e:68:db:52:d9:e9:8e:46:c5:47:3c:59:69:91:60:69:
19:b2:98:c7:a6:16:b5:2a:22:fe:58:8b:be:04:34:b8:24:91:
2c:e0:e7:3b:b6:68:7e:3c:b0:38:a0:d2:43:60:35:6f:a7:29:
c3:29:84:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 11:00:23 2026 by rpki-client