
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7a5d3f-04e9-3b9f-832c-2cd5c5b45e66.roa
File: 0f7a5d3f-04e9-3b9f-832c-2cd5c5b45e66.roa (raw, json)
Hash identifier: Qjj7CAC7eGNQYwjDMmHJ8wLu04+/tXmHdgaL5EshH6k=
Subject key identifier: D0:DF:41:4B:0A:D6:01:77:76:7C:7C:FB:7E:B3:0C:4D:F2:0B:B5:03
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4977794612DF50E47652B500
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7a5d3f-04e9-3b9f-832c-2cd5c5b45e66.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 68.53.65.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:77:79:46:12:df:50:e4:76:52:b5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3a6df315-85b1-4350-a7f9-2224a851e654
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:ea:61:99:4c:6b:6d:37:e1:22:cf:09:bf:3c:
66:66:00:41:7b:2f:44:7a:50:44:c0:6c:b0:f7:1b:
3f:d1:55:5b:9f:4e:d6:2e:3c:59:e4:6c:67:f7:c7:
b0:81:e3:5d:4a:ed:1f:13:9a:b0:b0:1d:e0:e3:83:
68:f6:1f:c1:99:55:01:59:57:54:80:14:fe:9f:6a:
7b:54:c5:6c:f9:4b:32:b1:a0:a3:78:35:e8:e9:cb:
01:6e:f0:5e:27:52:93:67:57:4e:ed:a1:34:fb:84:
17:b3:75:7e:f4:06:b6:f5:81:2b:f0:15:bf:8e:f1:
9e:8e:fb:aa:9a:ad:20:c8:a2:ff:72:ae:36:67:2d:
1a:ac:6e:8e:58:ac:73:ed:d0:7b:67:91:cc:5d:08:
13:01:2b:0d:a0:31:31:4b:d7:06:1f:05:92:64:8f:
fe:fe:ad:a4:16:b6:27:38:dd:99:e8:88:3a:7d:33:
86:4c:a4:02:90:e0:82:05:05:ce:8a:0a:07:d8:50:
8b:b8:8d:16:9f:89:d2:80:05:fe:62:7b:f1:b1:78:
1f:5e:ee:5e:2f:b0:f2:b3:57:61:d1:c6:7f:f2:09:
13:b9:35:6c:96:f8:66:b0:9f:3b:01:84:51:73:4e:
df:6e:51:44:d8:3d:2c:4b:86:e4:63:f4:00:64:35:
1c:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:DF:41:4B:0A:D6:01:77:76:7C:7C:FB:7E:B3:0C:4D:F2:0B:B5:03
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0f7a5d3f-04e9-3b9f-832c-2cd5c5b45e66.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.65.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
74:8f:2a:3a:26:6d:87:dc:a7:bf:4f:21:94:4f:0d:42:e1:55:
97:d6:d4:90:87:1b:69:b7:c3:bf:38:0f:b5:83:cf:47:49:5f:
3d:a2:d2:52:ea:4e:6c:59:3c:28:e5:9f:3e:35:46:ab:37:97:
41:aa:70:b2:c6:88:ac:db:b9:48:27:c2:9d:e4:b4:4a:67:9d:
d8:94:d6:72:ed:6e:14:9e:e5:ac:f4:7e:7a:1d:9f:7a:b1:54:
f4:95:88:c8:c3:e6:02:9a:85:25:fe:54:36:2d:3b:36:71:bc:
18:30:7e:ae:c1:24:b8:a4:33:b4:b3:d6:0c:b4:87:e9:13:01:
dd:e4:6f:29:31:03:3c:ef:a7:13:a3:8d:23:7a:4a:ab:11:b5:
24:32:63:b8:c4:a6:4b:01:38:74:0f:f3:35:42:bc:c2:00:6d:
39:37:7a:83:a6:0b:4c:12:bd:f4:96:15:a8:42:37:a3:52:e7:
59:d4:bb:02:ad:08:65:57:f9:bb:63:40:9f:74:fc:40:12:38:
50:31:79:16:4e:b7:9a:c0:dd:b9:16:91:2c:8f:ab:0c:85:9a:
6c:0c:09:07:f4:a9:d3:ea:d5:f8:bc:c0:14:c7:d9:df:7a:9f:
91:59:61:68:ff:4b:8a:8d:c4:65:19:d4:96:cc:b0:d2:2f:9a:
51:22:b2:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 18:40:07 2026 by rpki-client