
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
File: 9dc53f79-5229-395e-abe4-ac308a1251e7.roa (raw, json)
Hash identifier: nDUyRfFP3jF69CTtRKp0W768NHubBTn0SyQS0PDwFVE=
Subject key identifier: 34:2B:D5:16:8C:42:33:27:A1:0F:4E:20:3F:61:13:3F:40:B1:46:CC
Certificate issuer: /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial: 010D0C9F4328584F3052814C1CA833FBCECAF120
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
Signing time: Wed 16 Sep 2026 01:00:12 +0000
ROA not before: Wed 16 Sep 2026 01:00:12 +0000
ROA not after: Tue 15 Dec 2026 02:00:12 +0000
asID: 40065
IP address blocks: 67.220.90.0/23 maxlen: 24
67.220.92.0/23 maxlen: 24
68.168.16.0/23 maxlen: 24
68.168.22.0/24 maxlen: 24
68.168.24.0/22 maxlen: 24
68.168.28.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:30:52:81:4c:1c:a8:33:fb:ce:ca:f1:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
Validity
Not Before: Sep 16 01:00:12 2026 GMT
Not After : Dec 15 02:00:12 2026 GMT
Subject: CN=ad9472ae-1c85-4ee5-83f1-686c024b23a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:76:5f:db:49:4b:5e:0f:1e:c0:bd:60:0b:49:
79:07:dd:e0:8b:6f:a7:fb:65:25:08:7a:6d:52:1b:
bc:26:65:c7:81:6a:ad:79:d5:64:85:5c:af:9e:ec:
01:81:18:cb:1a:54:88:3d:cc:94:30:b5:37:e8:29:
16:fb:68:d8:9e:f8:e4:9b:58:7f:ab:9e:8a:a7:80:
68:18:b4:8c:e3:17:f2:12:bf:48:da:17:a4:bf:cf:
b7:6a:2d:1a:dc:9f:13:c0:6f:5e:f5:af:e4:9a:72:
d2:9e:68:14:d7:e1:42:71:26:76:96:4b:97:45:90:
a4:62:13:b6:8d:88:7f:1e:cf:63:7d:a9:e7:ab:21:
60:28:95:3b:19:12:a3:e2:91:ad:6a:f2:f9:10:5e:
c3:8a:42:a9:00:e8:b6:9f:0f:16:e7:2b:a7:61:1c:
d2:54:94:da:0a:31:57:20:36:50:ad:c6:88:1a:c9:
27:8b:b0:b9:a0:ea:b0:06:e9:c8:f7:64:8a:eb:e7:
6b:5a:04:12:66:a5:a5:c9:79:f8:4d:65:f6:00:37:
fa:a0:a3:97:e7:55:1e:33:8d:8e:62:c6:aa:75:d6:
15:81:97:cb:be:9d:43:f6:ec:3b:80:b1:3c:e8:0b:
ca:b9:65:88:6c:e7:06:4e:02:48:69:18:5b:60:a1:
4b:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:2B:D5:16:8C:42:33:27:A1:0F:4E:20:3F:61:13:3F:40:B1:46:CC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/9dc53f79-5229-395e-abe4-ac308a1251e7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
X509v3 Authority Key Identifier:
keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
sbgp-ipAddrBlock: critical
IPv4:
67.220.90.0-67.220.93.255
68.168.16.0/23
68.168.22.0/24
68.168.24.0-68.168.28.255
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:7c:c4:03:ae:7b:6d:5f:ec:fc:33:cf:b4:b4:4f:39:9f:d7:
24:9f:80:71:5c:ee:d9:d4:5e:f7:e1:a9:aa:53:a3:e2:f3:5b:
bb:99:18:b0:24:38:ae:52:93:2d:5d:2c:9a:8f:6c:40:94:27:
89:76:98:03:0d:0f:d4:b0:b7:96:c0:45:3e:a0:d8:8c:ef:ca:
b0:74:5a:b3:fa:3f:37:f9:9f:09:19:9b:e5:fa:47:ae:b6:ae:
48:b1:56:89:93:2e:a3:a6:98:fe:2f:71:c1:b8:8d:71:68:4a:
39:2a:90:2b:ce:bf:ae:af:d0:16:0a:e7:1d:52:5b:ff:14:34:
fb:1b:4b:d9:c2:47:38:90:23:84:15:85:01:ed:e8:4f:38:ad:
51:53:4f:c3:85:c4:59:43:05:fa:8a:3c:7d:05:62:3d:05:b4:
9e:8d:da:7f:74:a7:5e:77:25:19:aa:50:6e:5e:9d:36:6e:a9:
34:a0:77:4e:b6:65:80:65:d1:a1:fa:62:f7:0c:f1:43:b5:7d:
c3:42:c5:27:10:73:68:61:ea:d8:ee:3b:d8:6e:c7:91:bc:72:
b3:10:22:94:c2:19:af:0c:5b:05:e6:5d:42:32:ed:cf:76:dd:
f1:e4:44:4d:8c:69:9b:b5:80:c5:48:4c:de:f7:a5:f7:ea:08:
56:18:94:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:23:13 2026 by rpki-client