
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa
File: af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa (raw, json)
Hash identifier: OZyJ0++wqdYm+C+OG3TYAZx+G+lc5IJjzHE449+uB5M=
Subject key identifier: 73:CA:2F:C7:DB:38:7D:20:4B:18:4A:D3:CA:42:73:78:93:00:0F:FE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F03A807A6199358CDFDD3D5BB
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa
Signing time: Mon 31 Aug 2026 01:00:12 +0000
ROA not before: Mon 31 Aug 2026 01:00:12 +0000
ROA not after: Sun 29 Nov 2026 02:00:12 +0000
asID: 7725
IP address blocks: 68.34.236.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:03:a8:07:a6:19:93:58:cd:fd:d3:d5:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 31 01:00:12 2026 GMT
Not After : Nov 29 02:00:12 2026 GMT
Subject: CN=1a7b832f-31c4-47d2-bfc3-87228f1272d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:7d:03:d9:3c:d1:1b:13:55:b0:c8:19:c6:8c:
0a:c7:72:34:65:90:f0:38:69:43:11:43:68:c9:99:
b3:33:bd:ed:29:e5:fa:37:f4:e2:d4:4e:90:7c:62:
d6:94:20:64:a7:2a:cb:b7:aa:02:3c:22:4d:fa:da:
fd:69:ee:08:85:46:14:a3:3d:e3:f4:28:3a:49:f5:
63:40:e5:af:d4:3d:2f:cb:c6:f6:f4:fc:ad:89:8d:
27:6a:76:53:33:dc:fc:98:05:07:d8:3c:74:4c:b0:
39:b5:e5:69:ed:f5:73:cf:06:c7:3e:23:77:20:b5:
67:65:c9:38:73:d0:90:fd:aa:bc:ea:07:1a:6c:51:
2a:42:79:03:d0:06:46:1d:10:00:37:e4:1c:4b:53:
a8:f3:66:64:f3:42:78:ec:df:92:bd:f9:db:43:fa:
bd:d4:47:18:2e:85:aa:79:08:0f:6c:44:83:03:ae:
84:14:90:1d:e8:47:9c:93:71:1e:ee:6c:97:62:9c:
7b:30:88:bb:e9:59:a0:c2:46:20:42:b2:43:5f:58:
ad:72:bd:f3:a4:21:ae:c5:ea:cb:25:c4:cf:f9:9f:
19:9e:7f:af:25:37:d8:ab:be:15:5b:1e:51:49:09:
c6:cb:c7:14:1d:5c:32:58:26:91:03:f7:27:54:18:
20:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:CA:2F:C7:DB:38:7D:20:4B:18:4A:D3:CA:42:73:78:93:00:0F:FE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/af244ea0-8908-32d5-9b6c-bc10eb09afd0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.236.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:da:b7:4e:4c:b1:98:1d:73:7a:56:38:9a:73:79:3a:09:94:
87:73:db:92:93:35:33:0d:f0:ca:85:d5:c1:25:80:c0:7a:20:
38:bc:6d:53:46:f9:4f:71:5d:2e:ff:ff:a9:ea:30:d2:f5:f0:
5c:1d:f9:27:1f:ad:69:5a:16:f8:dc:ee:fa:7d:e3:e6:60:fc:
8a:ae:26:d8:f7:44:7f:88:2f:f9:fb:c8:ee:32:18:2b:42:1a:
67:14:11:64:55:a3:b1:14:59:c5:14:2a:ec:3c:30:61:92:32:
31:29:ed:a3:68:a3:b9:93:a7:d1:61:d4:cb:69:5a:4d:7b:9c:
1f:84:1c:04:72:92:ee:5c:5c:64:44:13:a5:ab:3f:7e:24:42:
76:d7:e1:26:95:f9:46:e8:27:ad:0e:0b:56:58:2a:0a:8d:c8:
88:04:2b:68:e0:ef:90:ef:4f:7e:3b:95:4c:94:68:c2:fe:ee:
5d:cb:8b:dd:2a:a6:70:bd:b3:c2:13:51:15:92:e5:63:e8:79:
3f:13:62:a5:3e:22:9b:0a:9b:ac:73:f6:fa:a1:e7:4c:7c:e0:
70:7b:72:0d:5e:10:37:e8:99:5f:b7:27:fe:38:59:30:5c:92:
cf:56:22:ac:91:3d:64:0e:aa:b2:88:36:40:e1:71:db:e8:4f:
41:0a:71:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 11:47:27 2026 by rpki-client