
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
File: 3af553af-3e25-340a-8320-484a9fc606f9.roa (raw, json)
Hash identifier: iu+ZGX7D41bVKa1bDVY6IbZtUvr5iU9HP0M9apoin2o=
Subject key identifier: 3A:81:98:5A:3F:64:C3:9D:98:07:23:05:8F:20:A6:2E:68:11:D7:14
Certificate issuer: /CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Certificate serial: 010D0C9F4328584F119CF344C03BB940E23B9D80
Authority key identifier: DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 37277
IP address blocks: 68.142.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 14 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:f3:44:c0:3b:b9:40:e2:3b:9d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78369c58-f0b4-454b-ad08-df84f1fd007c
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=ce7c8130-b2c5-4b83-9695-b2ea471c1f6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:0a:78:80:5a:c2:e7:57:55:59:3e:8a:e5:c0:
3c:24:89:1b:1e:81:8f:04:31:20:b4:a8:77:d7:02:
4c:54:f5:20:18:e4:4b:cb:66:f2:c5:e7:84:8e:17:
50:d6:16:cf:a8:e2:66:5e:4f:42:8a:c5:74:71:7d:
39:72:2e:bd:d0:1c:83:fe:b4:ff:d5:e3:e8:6a:a7:
05:d4:4e:e6:16:0b:03:1e:26:1f:4b:6f:d8:50:e3:
a9:8d:28:48:78:61:c3:93:4c:78:5b:c4:e8:83:05:
af:82:e7:30:fc:21:2a:64:c5:bf:2d:94:8f:89:a5:
50:21:9e:76:3b:08:78:79:a2:cd:d2:b7:c9:d4:33:
0e:12:d9:8c:72:20:1a:09:66:31:15:96:47:0f:12:
83:01:4d:34:52:fe:74:1a:63:b5:83:d5:57:3c:17:
cb:10:f5:9e:df:89:e8:10:15:ea:5c:bf:6b:c8:61:
e3:77:a5:b9:4f:79:75:56:22:5f:76:cc:4c:b6:7c:
4f:7a:ba:fb:c9:eb:3c:33:84:6c:2d:98:c8:16:41:
e8:4d:c8:50:9e:80:09:60:00:91:58:f5:50:ea:bd:
3b:b7:b6:29:70:89:15:a0:d8:ff:a5:13:54:c2:02:
0b:5c:c7:04:55:ac:7e:cd:1a:e2:82:b1:3c:a9:90:
bd:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:81:98:5A:3F:64:C3:9D:98:07:23:05:8F:20:A6:2E:68:11:D7:14
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/3af553af-3e25-340a-8320-484a9fc606f9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c/78369c58-f0b4-454b-ad08-df84f1fd007c.crl
X509v3 Authority Key Identifier:
keyid:DF:0B:9E:09:06:31:D7:C1:70:E2:1A:88:6D:29:01:A2:54:75:39:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/78369c58-f0b4-454b-ad08-df84f1fd007c.cer
sbgp-ipAddrBlock: critical
IPv4:
68.142.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:28:71:29:82:be:75:1d:15:f6:da:e5:23:e0:d1:0d:d5:7e:
54:88:13:c7:f8:f6:73:4e:35:38:a7:d3:7a:0b:48:e6:08:5a:
0d:06:5d:2d:b0:01:1b:b5:6b:3e:fc:1d:fb:fc:83:17:77:78:
2c:9c:78:d7:7a:b3:d8:45:66:90:28:60:70:ab:97:6f:a2:2b:
de:c8:ab:16:32:b8:b3:5f:da:54:2d:da:02:6a:bc:b8:30:f9:
3f:8f:21:8b:3b:28:2c:fd:ae:61:91:e2:eb:f4:fe:c2:a4:30:
ce:8f:21:2c:53:4b:b8:6c:55:b6:25:73:f3:c6:4d:e6:06:2c:
87:f1:51:20:0c:32:97:1f:55:82:25:36:68:09:5c:b7:be:b5:
b2:d5:03:6a:7d:fb:c8:29:7c:9e:ba:a1:f8:f3:b5:56:25:cd:
d9:61:c7:b2:42:ee:3e:d7:83:20:28:b3:cc:e1:22:7c:51:cd:
e3:b7:5d:0c:79:4c:5e:79:61:eb:d2:fc:d0:82:a5:2c:9d:ff:
f0:82:af:8a:21:81:8f:b7:b6:42:e3:38:46:e5:91:c1:bd:18:
a9:9d:72:1d:e2:b0:05:83:56:eb:0b:f4:b1:e2:bb:14:48:ad:
45:80:57:61:32:e9:60:3c:e2:ab:ee:55:0c:57:5d:61:dd:11:
7f:48:23:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnPNEwDu5QOI7nYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzgzNjljNTgtZjBiNC00NTRiLWFkMDgtZGY4NGYxZmQw
MDdjMB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
Y2U3YzgxMzAtYjJjNS00YjgzLTk2OTUtYjJlYTQ3MWMxZjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmAp4gFrC51dVWT6K5cA8JIkbHoGPBDEgtKh3
1wJMVPUgGORLy2byxeeEjhdQ1hbPqOJmXk9CisV0cX05ci690ByD/rT/1ePoaqcF
1E7mFgsDHiYfS2/YUOOpjShIeGHDk0x4W8TogwWvgucw/CEqZMW/LZSPiaVQIZ52
Owh4eaLN0rfJ1DMOEtmMciAaCWYxFZZHDxKDAU00Uv50GmO1g9VXPBfLEPWe34no
EBXqXL9ryGHjd6W5T3l1ViJfdsxMtnxPerr7yes8M4RsLZjIFkHoTchQnoAJYACR
WPVQ6r07t7YpcIkVoNj/pRNUwgILXMcEVax+zRrigrE8qZC98QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqBmFo/ZMOdmAcjBY8gpi5oEdcUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2
OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0ZjFmZDAwN2MvM2FmNTUzYWYtM2UyNS0z
NDBhLTgzMjAtNDg0YTlmYzYwNmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNzgzNjljNTgtZjBiNC00NTRiLWFk
MDgtZGY4NGYxZmQwMDdjLzc4MzY5YzU4LWYwYjQtNDU0Yi1hZDA4LWRmODRmMWZk
MDA3Yy5jcmwwHwYDVR0jBBgwFoAU3wueCQYx18Fw4hqIbSkBolR1OWUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ODM2OWM1OC1mMGI0LTQ1NGItYWQwOC1kZjg0
ZjFmZDAwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRI5EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEocSmCvnUdFfba5SPg0Q3VflSIE8f49nNONTin03oLSOYIWg0GXS2w
ARu1az78Hfv8gxd3eCyceNd6s9hFZpAoYHCrl2+iK97IqxYyuLNf2lQt2gJqvLgw
+T+PIYs7KCz9rmGR4uv0/sKkMM6PISxTS7hsVbYlc/PGTeYGLIfxUSAMMpcfVYIl
NmgJXLe+tbLVA2p9+8gpfJ66ofjztVYlzdlhx7JC7j7XgyAos8zhInxRzeO3XQx5
TF55YevS/NCCpSyd//CCr4ohgY+3tkLjOEblkcG9GKmdch3isAWDVusL9LHiuxRI
rUWAV2Ey6WA84qvuVQxXXWHdEX9II1Y=
-----END CERTIFICATE-----
Generated at Tue Oct 13 15:03:58 2026 by rpki-client