
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
File: 4abebfc4-4b83-3d10-9999-aafd39dd7329.roa (raw, json)
Hash identifier: DaHqR+A6fQ7ghZ49hxixiXugx1EcVHZ4SPVPJ987Uno=
Subject key identifier: 9C:27:6C:32:07:68:BD:83:87:20:EA:B8:D8:66:D7:8B:C2:E6:23:38
Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial: 010D0C9F4328584F498729BF4A311B812EBF4B00
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 30221
IP address blocks: 68.68.192.0/21 maxlen: 24
68.68.200.0/22 maxlen: 24
68.68.206.0/23 maxlen: 24
68.68.208.0/21 maxlen: 24
68.68.216.0/24 maxlen: 24
68.68.218.0/24 maxlen: 24
68.68.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:29:bf:4a:31:1b:81:2e:bf:4b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=fcc1d625-e80f-4738-8993-d19eb3245a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:a8:7c:ca:bb:e4:5d:f3:52:0f:f4:65:4e:45:
55:a3:b5:41:29:43:fa:9d:99:94:cb:a7:9a:25:64:
b9:7b:a7:bb:cc:d3:10:43:da:7f:00:ce:09:76:3c:
bf:a9:b1:4c:75:92:c1:6d:3c:f6:11:4f:14:7d:68:
66:c6:4b:f0:e3:be:f9:25:9f:63:7c:84:b9:db:61:
e6:cd:45:88:92:bd:21:7c:b9:c3:ac:cb:b0:3f:6f:
51:cd:f0:2a:56:52:3b:a2:7b:55:20:9b:cc:67:1e:
4c:a7:c6:0f:b1:78:05:1f:1f:6f:a7:73:bc:66:ad:
b6:d3:31:10:31:7f:e5:73:74:39:12:5b:62:45:af:
a3:f8:29:97:86:1d:37:ae:83:82:74:e4:b6:8b:5d:
82:53:a2:cc:62:f7:01:a2:f3:c3:17:76:4a:32:f1:
99:38:7c:1f:e2:7e:17:18:2b:35:7e:1b:e3:56:09:
a3:52:a7:b1:1f:52:9f:4d:b4:d0:e9:94:88:d4:f5:
23:10:e9:db:f5:a3:89:62:ea:90:d3:1c:d2:81:99:
1a:d7:60:ee:32:cb:ce:4a:7f:3d:e8:ba:a1:d5:73:
25:09:db:bc:46:d8:ca:85:20:ae:b6:03:5e:ac:2e:
f6:16:1b:ca:a9:cf:ab:01:23:c7:df:97:ac:d1:1c:
5d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:27:6C:32:07:68:BD:83:87:20:EA:B8:D8:66:D7:8B:C2:E6:23:38
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
X509v3 Authority Key Identifier:
keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.192.0-68.68.203.255
68.68.206.0-68.68.216.255
68.68.218.0/24
68.68.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:f6:20:4b:be:77:e5:b8:c0:aa:e5:4a:bd:b9:01:e8:30:89:
0d:af:c4:92:89:86:9a:2a:fc:e0:c2:4f:6b:83:10:c7:b9:7c:
09:32:f7:ae:6e:8b:a6:f0:63:09:c6:cf:75:63:4c:27:31:54:
14:b2:4c:8d:fc:a0:f4:40:bf:02:95:2c:56:84:a5:b6:63:f4:
cc:25:63:78:3d:27:37:df:76:51:a9:34:c4:87:81:26:6e:5c:
7e:97:d8:03:17:9c:dd:78:be:a3:c6:b4:a6:db:a7:d1:2f:88:
d6:df:1d:93:65:fb:ac:ca:77:cc:8f:cc:70:db:67:e7:0a:56:
7c:37:26:47:f6:53:9a:39:da:dc:25:b2:f2:b5:94:26:46:00:
4d:1e:54:a5:f2:15:29:0f:3b:73:bc:b6:fe:ff:a4:fd:d2:46:
ce:68:f0:7c:34:73:8e:74:a0:f2:1d:3f:14:7d:90:3d:49:0f:
9e:d4:17:b4:af:10:a4:96:64:9c:56:e1:18:86:bd:35:96:78:
cc:ec:f0:fa:1d:e6:91:7a:6b:ec:84:46:95:00:8e:9d:67:ec:
81:8d:5b:5f:ae:6f:2d:68:ca:56:f3:04:03:8c:6c:b5:75:b4:
5c:eb:13:c3:2a:e9:d6:e3:f9:1c:bc:9d:f3:43:11:f4:8e:46:
cb:f4:89:56
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWE9Jhym/SjEbgS6/SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQw
MDM2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmNjMWQ2MjUtZTgwZi00NzM4LTg5OTMtZDE5ZWIzMjQ1YTg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqh8yrvkXfNSD/RlTkVVo7VBKUP6nZmUy6ea
JWS5e6e7zNMQQ9p/AM4Jdjy/qbFMdZLBbTz2EU8UfWhmxkvw4775JZ9jfIS522Hm
zUWIkr0hfLnDrMuwP29RzfAqVlI7ontVIJvMZx5Mp8YPsXgFHx9vp3O8Zq220zEQ
MX/lc3Q5EltiRa+j+CmXhh03roOCdOS2i12CU6LMYvcBovPDF3ZKMvGZOHwf4n4X
GCs1fhvjVgmjUqexH1KfTbTQ6ZSI1PUjEOnb9aOJYuqQ0xzSgZka12DuMsvOSn89
6Lqh1XMlCdu8RtjKhSCutgNerC72FhvKqc+rASPH35es0RxdGwIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFJwnbDIHaL2DhyDquNhm14vC5iM4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YzJh
NzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvNGFiZWJmYzQtNGI4My0z
ZDEwLTk5OTktYWFmZDM5ZGQ3MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWMyYTcyMjUtZGZlYS00NjBkLWFh
NjktODA0YWU1NzQwMDM2LzljMmE3MjI1LWRmZWEtNDYwZC1hYTY5LTgwNGFlNTc0
MDAzNi5jcmwwHwYDVR0jBBgwFoAUlYr+xsgzCViBPpDo757JLDrbd8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRh
ZTU3NDAwMzYuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoMAwDBAZERMAD
BAJERMgwDAMEAUREzgMEAERE2AMEAERE2gMEAERE3DBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQA79iBLvnfl
uMCq5Uq9uQHoMIkNr8SSiYaaKvzgwk9rgxDHuXwJMveuboum8GMJxs91Y0wnMVQU
skyN/KD0QL8ClSxWhKW2Y/TMJWN4PSc333ZRqTTEh4Emblx+l9gDF5zdeL6jxrSm
26fRL4jW3x2TZfusynfMj8xw22fnClZ8NyZH9lOaOdrcJbLytZQmRgBNHlSl8hUp
DztzvLb+/6T90kbOaPB8NHOOdKDyHT8UfZA9SQ+e1Be0rxCklmScVuEYhr01lnjM
7PD6HeaRemvshEaVAI6dZ+yBjVtfrm8taMpW8wQDjGy1dbRc6xPDKunW4/kcvJ3z
QxH0jkbL9IlW
-----END CERTIFICATE-----
Generated at Mon Sep 28 20:07:52 2026 by rpki-client