
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca84166c-5f2d-3cab-982e-bde21ed55bc0.roa
File: ca84166c-5f2d-3cab-982e-bde21ed55bc0.roa (raw, json)
Hash identifier: yphoBsi+qXK9tXWo3WSyC19heSveCCxXuglhZhmE4b0=
Subject key identifier: 9F:83:54:9F:60:34:EE:47:3E:98:B6:8F:74:5A:A5:0D:C0:E0:C5:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862AB945771A0BACA7CBC00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca84166c-5f2d-3cab-982e-bde21ed55bc0.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.36.52.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:ab:94:57:71:a0:ba:ca:7c:bc:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=bbfc40c5-ae73-4b18-bc4b-87d79617d23a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:db:40:8e:32:b1:e5:0b:cb:55:23:b5:bd:97:
ad:92:eb:c5:ed:02:7d:55:63:d3:06:2d:f8:1c:e0:
f7:9e:f0:7f:76:5e:71:b1:16:aa:15:55:47:9b:ca:
8f:b2:b3:86:b9:ac:41:d4:e9:fc:f9:43:b3:75:af:
26:23:24:f8:be:8d:86:7f:52:e0:e8:87:f8:8b:92:
ad:ce:ba:3d:44:93:5a:bb:7e:8c:11:c1:ae:59:31:
23:eb:6f:e3:21:84:8c:75:b2:4b:78:42:7a:2a:f9:
76:70:17:6f:a7:70:4f:0d:42:f4:92:52:d7:0b:0d:
a9:8d:99:10:66:11:6a:d7:8e:64:b7:6a:1c:3b:2c:
8e:f0:35:5f:5c:47:69:cc:73:35:71:46:c2:f6:40:
b1:2f:5f:01:d8:eb:35:f9:b5:77:de:f6:57:80:e1:
67:60:5c:ca:0b:61:d3:69:f0:6c:9c:59:bf:76:cc:
83:ae:69:fd:91:84:b3:c6:27:88:1a:d9:3b:87:55:
68:3b:bc:21:37:34:1b:1b:8e:6c:00:07:2a:e0:e3:
5e:61:70:62:e2:c6:dc:b3:ae:ee:5d:05:51:24:65:
77:d5:4c:34:2e:27:d7:f0:ff:d0:31:a7:aa:ba:8a:
76:0c:19:b9:a3:89:9a:76:75:e9:46:f0:a4:4e:ee:
ad:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:83:54:9F:60:34:EE:47:3E:98:B6:8F:74:5A:A5:0D:C0:E0:C5:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ca84166c-5f2d-3cab-982e-bde21ed55bc0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.36.52.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:3b:dc:1b:08:32:66:12:35:e0:55:85:8c:1e:4b:b9:33:22:
2d:85:22:25:1e:b0:90:84:cc:c5:e5:19:4f:f2:eb:76:10:c6:
16:cc:c8:f6:39:54:b9:4b:d0:a1:56:c9:72:68:61:26:0b:77:
53:37:58:76:c8:91:7b:5d:2b:e7:1f:ed:ed:03:53:8c:12:e9:
7a:16:39:c0:e3:b2:7d:70:a1:bb:44:18:ea:5e:22:94:3b:c9:
16:6e:ef:5b:c4:8b:70:c6:57:6b:06:3e:e3:58:08:15:17:36:
c8:83:cc:f1:9c:a7:84:a9:1f:67:d5:f7:ee:6c:65:ce:e6:79:
cc:05:00:fb:66:1d:f0:11:c8:49:b9:e0:40:1d:54:fd:61:a9:
e4:4e:c5:f8:c8:ac:97:5b:7d:da:bc:fa:4e:3a:2d:51:54:1a:
9d:72:18:4a:8a:d5:7b:65:98:a6:31:08:ef:f2:91:e2:08:57:
0d:02:d1:fa:48:43:ef:78:8a:19:3b:2a:75:77:12:ba:d1:18:
d4:07:77:91:c8:f4:e6:2d:e1:02:5a:92:1d:b8:9c:60:b8:55:
c5:2d:16:84:f2:a4:56:18:46:08:3a:9f:bf:b9:39:af:a4:43:
33:35:f9:2d:5a:4a:54:1f:11:74:19:80:fe:6c:fb:4e:a7:3f:
e7:02:3d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 05:56:50 2026 by rpki-client