
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd13d24e-6a33-3b27-abf4-8ec6d7cf79a8.roa
File: fd13d24e-6a33-3b27-abf4-8ec6d7cf79a8.roa (raw, json)
Hash identifier: oCbMHJFcnXDZ/EqO3wGzXeomzFxCWVSjGOKMCmTfHRQ=
Subject key identifier: C4:98:D7:B0:84:0C:04:21:35:D8:01:3B:CB:D5:13:33:1D:E0:44:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119ECCEA28ABA96466817F80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd13d24e-6a33-3b27-abf4-8ec6d7cf79a8.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 68.83.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:cc:ea:28:ab:a9:64:66:81:7f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=fa6a01bd-e241-484d-95c7-5ebeb38be2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b1:6d:88:0e:df:2b:3d:96:f9:c4:f1:62:f8:
13:cc:f8:24:8d:47:1d:c0:e0:39:7d:be:40:eb:91:
37:be:10:97:cd:a4:7a:6f:01:75:52:65:bf:65:38:
3c:b8:b1:69:59:27:03:21:bc:a4:8d:77:b5:ec:11:
e1:71:69:ba:a0:1d:af:90:3f:f4:5e:07:25:b6:8c:
27:77:3a:f8:a9:4a:58:4d:cd:ce:d9:3e:1a:3a:45:
b7:88:7f:5f:38:cc:2f:a0:5e:3c:4a:65:92:24:a1:
b6:2b:b7:bb:bc:39:cb:ee:0d:bc:59:19:13:cf:ce:
c7:a3:49:2d:22:71:14:d0:a9:8c:3c:f0:ff:7f:9f:
c4:7f:d2:1d:6a:a0:25:37:13:a2:ec:1e:38:df:3d:
11:4f:81:c7:1b:be:36:5e:22:36:30:b0:1d:d8:72:
27:76:6f:97:d0:0d:d7:ae:a3:a4:bc:2d:23:b9:49:
96:6c:1c:47:b5:4c:de:42:cb:f9:2a:80:77:6e:3b:
17:cb:ab:9b:6a:22:89:89:d4:2a:8a:dd:89:16:56:
e3:35:ad:6c:bf:a2:2e:6c:25:39:4a:b2:c6:44:e9:
7f:a7:f3:d3:9a:8a:8c:0a:a5:50:84:49:d0:e0:2c:
da:35:23:ce:bd:2c:3e:64:00:79:97:bb:e6:61:86:
9b:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:98:D7:B0:84:0C:04:21:35:D8:01:3B:CB:D5:13:33:1D:E0:44:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd13d24e-6a33-3b27-abf4-8ec6d7cf79a8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:5b:49:d3:0f:d8:76:4b:bc:47:e7:ac:55:78:8b:eb:0a:2e:
82:7f:66:83:b4:6f:ae:87:a1:b2:6e:f9:0b:94:2e:f5:bc:f5:
16:4c:1b:f9:95:68:92:ac:8b:cb:12:a9:93:29:3b:d5:dc:a2:
a9:f8:63:2b:89:bc:5d:63:e9:38:9b:42:7a:f9:2b:48:95:84:
79:21:98:ce:50:27:10:bf:95:70:1a:bc:82:6b:e8:5d:b6:e7:
83:b7:15:34:cb:c7:dd:67:35:28:6a:68:37:b6:e8:ae:e0:d3:
cb:0c:2e:ff:59:2d:28:99:3b:38:84:03:28:7a:63:29:74:a6:
90:99:c6:9a:d2:71:59:e0:a7:04:b6:bb:ea:bb:25:23:fc:5b:
9f:d8:4a:00:a7:fe:1b:00:44:57:a9:ee:41:93:49:37:55:c4:
c7:a1:ac:6f:5d:15:7d:8b:cf:ca:01:5e:10:98:f1:c0:9d:81:
33:c5:94:f9:b0:2d:94:18:04:22:dc:ad:4c:93:c4:56:b2:81:
7e:c5:dd:2c:eb:5e:61:20:50:94:31:e4:84:e5:e5:70:43:23:
a3:06:c3:98:dd:b0:94:f5:f8:1f:28:d8:34:70:95:69:97:8a:
e9:b1:73:88:f2:80:8c:49:5e:47:ef:bc:a9:3c:bc:94:8e:91:
b6:e2:2f:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 11:02:06 2026 by rpki-client