
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa
File: f41ae493-596f-3b0d-863e-061030a2e329.roa (raw, json)
Hash identifier: 2PdS+EtOWWXkGly0yUBwuFPqDlJQqIvwHgPF1Q0y1zM=
Subject key identifier: 62:57:7A:DF:2C:14:3A:38:CE:06:76:CA:8D:6F:C6:0E:1F:DB:66:8E
Certificate issuer: /CN=68b287f4-51cf-421c-923b-f0e384de5eea
Certificate serial: 010D0C9F4328584F30528547D42388595F0B5780
Authority key identifier: 35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa
Signing time: Wed 16 Sep 2026 01:00:12 +0000
ROA not before: Wed 16 Sep 2026 01:00:12 +0000
ROA not after: Tue 15 Dec 2026 02:00:12 +0000
asID: 8069
IP address blocks: 52.122.240.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:30:52:85:47:d4:23:88:59:5f:0b:57:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b287f4-51cf-421c-923b-f0e384de5eea
Validity
Not Before: Sep 16 01:00:12 2026 GMT
Not After : Dec 15 02:00:12 2026 GMT
Subject: CN=93665b4b-7947-4fb6-8014-de3712ebba99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:13:24:9d:7d:14:ca:c0:98:76:69:70:a3:06:
4b:39:b5:4b:64:69:f7:32:e2:1c:a6:92:cd:5c:7c:
ac:60:c4:18:51:73:b5:1e:93:06:11:67:31:45:af:
4b:df:e3:4b:ba:54:f9:47:a9:c8:e8:c7:b8:3c:ab:
9c:4b:55:1d:d6:79:31:96:f9:53:c9:bc:4f:06:62:
82:42:72:b8:0c:b5:aa:24:0a:44:87:0b:52:bc:60:
26:4a:5d:99:ee:26:61:20:cc:0b:1c:2d:b5:33:d5:
8e:cb:cb:ac:b6:22:7b:88:6f:d9:d4:24:cc:8f:30:
6f:2f:4a:7f:38:7c:ba:cf:43:68:51:bd:7a:69:7e:
97:3b:a6:25:c0:5e:87:64:08:82:e3:f4:2f:6e:ee:
47:28:bb:b5:a4:1f:04:0e:1e:04:60:8c:d2:08:8e:
e4:12:e4:2a:49:14:bf:d8:a5:79:de:93:4a:b0:23:
e7:ce:a8:27:83:f3:5a:6d:c2:98:c3:c6:6a:ae:dd:
e6:b0:1a:07:6f:79:0f:f1:ab:89:80:77:58:61:f8:
a9:03:73:a3:16:31:8f:6d:bd:b3:77:1f:13:14:86:
9e:a2:a5:b6:45:72:e5:50:98:d0:13:f6:c4:21:8d:
e4:4e:75:97:b7:ec:83:25:e6:f5:bd:5a:bf:66:8f:
ac:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:57:7A:DF:2C:14:3A:38:CE:06:76:CA:8D:6F:C6:0E:1F:DB:66:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/f41ae493-596f-3b0d-863e-061030a2e329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea/68b287f4-51cf-421c-923b-f0e384de5eea.crl
X509v3 Authority Key Identifier:
keyid:35:7E:4F:98:41:25:A3:72:03:F5:E2:BA:41:43:AE:4A:FA:E0:BC:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/68b287f4-51cf-421c-923b-f0e384de5eea.cer
sbgp-ipAddrBlock: critical
IPv4:
52.122.240.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9b:18:db:2b:88:7d:06:91:c0:02:db:fb:18:96:2d:9f:db:14:
18:e0:2e:8f:66:81:58:15:78:53:e1:5f:dc:ac:aa:1d:5f:df:
69:db:fe:05:cd:66:b4:f3:c5:7a:fc:4b:21:dd:33:e0:e3:0e:
75:f7:b0:62:99:db:35:12:eb:ed:1d:e5:5a:06:41:60:a4:d4:
df:f1:82:ab:a9:fe:7c:7e:81:85:b0:8d:b1:bf:72:9f:2c:bb:
8f:f9:99:b7:54:b8:7b:de:2d:28:f2:7a:cb:f5:87:8e:eb:d1:
71:e8:5d:a5:c8:ee:97:a8:bc:4b:fb:34:2b:a7:0a:44:d5:e9:
35:0e:bb:c5:e4:f6:d5:c7:b7:a0:14:78:0c:2a:1e:00:f7:a7:
2d:93:c1:95:40:94:53:42:f0:b9:86:90:d0:d6:34:b8:2b:7e:
90:e7:c8:af:c9:b7:99:d6:dd:a7:10:e1:17:d5:0d:6f:0d:a0:
3a:9b:9c:43:4b:01:2f:7c:50:1f:63:5c:81:69:5d:20:de:e6:
56:d5:27:32:62:09:ba:96:b4:f1:f9:e1:9e:c7:1c:05:dd:ab:
f3:4f:ce:6e:2d:01:93:2b:85:1d:98:fc:7a:a3:16:b8:89:45:
9f:17:2b:ea:f2:07:03:f5:5d:12:fd:f2:68:eb:2c:dd:74:f3:
7e:21:97:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 18:08:47 2026 by rpki-client