
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa
File: 9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa (raw, json)
Hash identifier: +XSYOna+sg2pQ2ZYxjGnY+8x8N1dg0roWhDYPvaqo18=
Subject key identifier: 58:1B:A3:82:81:02:66:E4:38:3F:80:F3:93:C0:FA:DA:C4:FB:B2:1F
Certificate issuer: /CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
Certificate serial: 010D0C9F4328584EEA87533B32A33BEF871917C0
Authority key identifier: A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa
Signing time: Sat 22 Aug 2026 01:00:12 +0000
ROA not before: Sat 22 Aug 2026 01:00:12 +0000
ROA not after: Fri 20 Nov 2026 02:00:12 +0000
asID: 30036
IP address blocks: 68.66.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ea:87:53:3b:32:a3:3b:ef:87:19:17:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb
Validity
Not Before: Aug 22 01:00:12 2026 GMT
Not After : Nov 20 02:00:12 2026 GMT
Subject: CN=705dfb02-3bb4-4624-9132-9aec1ede5581
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:c5:59:39:51:a6:30:e5:f6:23:d0:07:17:65:
f8:de:eb:19:ba:44:b3:f5:2e:2e:4f:39:b9:99:a9:
de:61:5c:71:91:04:d4:e1:7d:06:31:b4:67:9d:fc:
42:43:8f:a1:b6:7f:cf:4d:f6:76:7a:b6:92:d4:98:
89:65:02:93:c2:5e:24:c9:ab:66:07:46:76:39:f0:
51:e6:1a:2a:01:a7:11:21:0f:81:65:21:17:44:3f:
00:b2:e5:ee:d5:4a:20:79:b9:a2:f3:d5:62:aa:9a:
05:74:d2:77:04:28:b2:49:9f:76:21:77:e8:2b:26:
8b:bd:d3:33:2f:7f:9c:ed:f0:8f:3d:5c:46:db:56:
42:15:03:d3:3d:25:12:c7:d9:a3:93:26:34:71:47:
f4:de:5b:2b:e7:14:03:65:af:cf:83:40:7f:45:ca:
3f:5e:95:9b:a6:5b:a2:89:37:17:f4:06:ff:81:64:
34:d2:a6:5c:40:44:3e:72:35:37:cb:64:f3:8e:48:
70:73:37:43:98:b7:44:a1:d1:11:3e:d1:03:aa:2d:
43:61:72:be:79:2d:dc:f1:8a:4e:a1:54:b3:16:ec:
4b:b7:a2:c7:9e:90:23:f5:d6:b1:dc:65:02:57:9a:
48:f3:cd:44:5a:80:e6:a6:8f:8a:7b:a1:46:e9:62:
60:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:1B:A3:82:81:02:66:E4:38:3F:80:F3:93:C0:FA:DA:C4:FB:B2:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/9a6d31f8-d669-33a5-b9c4-967bb14d4abd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.crl
X509v3 Authority Key Identifier:
keyid:A8:15:F3:CC:F9:79:46:E4:70:33:A1:8E:A1:22:A4:F3:D9:DD:03:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0c5b3178-a63c-4b1c-9c3c-03f7d9cc90eb.cer
sbgp-ipAddrBlock: critical
IPv4:
68.66.64.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:be:42:e8:7d:0d:10:58:2b:b0:20:4a:5e:ef:59:26:5b:18:
03:26:01:05:63:37:20:6c:03:bb:fc:e2:8a:18:fe:b7:00:f3:
d6:17:32:2f:45:78:b1:15:11:b8:06:ff:0f:b3:c5:15:b4:e4:
d7:62:68:ad:59:29:63:e5:3b:1f:46:31:c7:9f:27:4e:ec:31:
19:75:c4:77:2f:5a:de:ec:5e:cf:40:12:12:e6:13:52:c3:3f:
dc:c6:48:17:eb:b0:bb:fa:dd:c4:d6:74:62:67:92:e8:3f:f8:
57:41:8b:82:ed:12:81:9a:ae:e3:f6:b4:73:fe:11:1a:1a:fc:
e8:d1:f2:cf:ae:01:d5:4c:13:27:29:65:d9:d1:c5:70:30:c9:
03:e4:7b:63:7c:7c:9d:4d:2f:6c:6c:dc:82:37:e0:fd:41:09:
c8:20:66:4f:04:af:54:10:9b:a4:6d:77:48:d5:0a:76:47:d6:
f1:11:42:04:3a:42:46:46:4d:6e:1c:3f:b2:62:41:81:40:b2:
e2:d4:fa:45:a9:08:b2:05:f4:27:35:7c:0d:f8:8f:74:ef:38:
15:87:a7:88:36:45:27:ff:d7:e0:32:6d:02:a6:e2:63:a1:21:
91:ab:db:0e:3c:eb:88:84:12:c0:bc:6f:41:42:97:49:5c:91:
d6:cd:ac:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 18:44:15 2026 by rpki-client