
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/c479f4a7-285b-3623-bd1c-e48a70738d97.roa
File: c479f4a7-285b-3623-bd1c-e48a70738d97.roa (raw, json)
Hash identifier: g4REhpY+4t7g4e8y5WLylFnODA8gDWWoFQ7gbxO0Pyg=
Subject key identifier: A0:D8:C8:58:3D:A5:D0:BD:D3:3C:1E:DA:A7:BF:18:EC:7B:EC:CE:9C
Certificate issuer: /CN=e0052649-4e2f-4a6c-8cfa-f0d0d8386887
Certificate serial: 010D0C9F4328584F21542E1AE9FAE5265D3EF3C0
Authority key identifier: BD:BC:B0:CE:8B:36:1D:8B:91:A2:A0:15:95:A8:B2:B3:E5:C0:D7:86
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/c479f4a7-285b-3623-bd1c-e48a70738d97.roa
Signing time: Thu 10 Sep 2026 16:06:44 +0000
ROA not before: Thu 10 Sep 2026 16:06:44 +0000
ROA not after: Wed 09 Dec 2026 17:06:44 +0000
asID: 4983
IP address blocks: 198.175.68.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 23 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:21:54:2e:1a:e9:fa:e5:26:5d:3e:f3:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0052649-4e2f-4a6c-8cfa-f0d0d8386887
Validity
Not Before: Sep 10 16:06:44 2026 GMT
Not After : Dec 9 17:06:44 2026 GMT
Subject: CN=9ba796f7-12da-4a66-aac2-da1acadd2145
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:52:98:44:97:16:ee:b9:0c:2c:66:3e:95:17:
f6:92:2c:1c:c1:2c:ea:ef:be:d1:a7:80:79:65:9b:
8c:eb:86:20:df:f2:3b:5b:21:ec:75:5e:e5:2c:f8:
03:94:6c:13:3b:6e:1d:f2:23:88:ad:25:7b:47:d5:
e2:1b:12:73:10:cf:fe:c1:2e:29:0d:16:0c:6d:2c:
7a:16:8f:39:9c:72:5c:43:00:d9:af:11:59:51:5e:
ff:0c:4b:fc:a3:a7:e4:fd:5b:fa:65:e3:06:88:df:
39:c1:0d:20:74:cf:3d:44:aa:d2:f1:44:49:43:2a:
ae:c7:95:54:d3:9d:de:9a:d4:ea:26:4d:31:69:ce:
ee:6c:bd:03:7b:62:7f:1b:ba:de:98:3b:b4:d2:9b:
fc:e8:c4:fc:70:6d:91:9f:e1:16:33:9e:03:59:89:
04:5f:81:aa:5b:79:3f:05:79:86:e9:ae:ad:31:64:
1e:6e:85:22:c5:7a:7c:cf:2c:ec:44:02:70:81:d1:
24:49:98:b2:dd:5a:6b:23:f8:e6:77:f1:91:10:da:
9e:00:d4:ce:2d:d7:79:78:e0:e2:ef:8a:91:97:66:
fe:67:6a:e8:1c:b2:1f:09:65:46:7a:b8:50:b0:3b:
82:a5:22:9f:7b:d4:2e:e6:f3:92:7d:30:cc:6e:c2:
6a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:D8:C8:58:3D:A5:D0:BD:D3:3C:1E:DA:A7:BF:18:EC:7B:EC:CE:9C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/c479f4a7-285b-3623-bd1c-e48a70738d97.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.crl
X509v3 Authority Key Identifier:
keyid:BD:BC:B0:CE:8B:36:1D:8B:91:A2:A0:15:95:A8:B2:B3:E5:C0:D7:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/e0052649-4e2f-4a6c-8cfa-f0d0d8386887.cer
sbgp-ipAddrBlock: critical
IPv4:
198.175.68.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:2a:25:5c:ba:4d:07:a5:d3:b1:fc:32:df:b8:31:48:9d:49:
0b:a4:62:ab:3d:b3:cd:41:99:e7:b6:a9:38:8f:cc:b3:d3:32:
c9:f6:d8:51:14:a4:94:61:bf:77:c8:5c:e9:66:20:fc:43:06:
04:26:f9:82:63:20:39:d4:24:bd:ed:66:dd:a6:b1:92:d7:d9:
99:00:66:b2:7f:9d:4a:2b:60:8c:b0:92:d2:ee:8f:60:5b:dc:
7a:cb:e0:04:a0:bb:87:5e:35:ae:fa:b0:50:e2:4e:99:b9:c7:
69:63:b0:94:3b:38:4b:af:71:d5:75:0d:87:cf:44:af:44:87:
de:c7:59:f2:88:50:81:1d:5e:f4:47:b0:60:67:4f:64:02:76:
88:5f:75:46:ab:b7:e9:d1:eb:d0:35:d3:42:cf:30:95:6e:a5:
0d:5e:cc:99:8d:0c:88:d9:c2:80:d5:b8:85:1d:35:2e:11:0f:
d7:45:f7:ef:21:02:e8:bf:9a:f5:98:5d:14:1a:e4:3a:13:7c:
b5:a7:89:c2:e6:38:06:b2:8c:ed:60:0b:0d:18:b5:68:bf:30:
aa:4c:95:11:87:db:11:c8:f5:9a:d8:52:1b:58:80:52:a5:f9:
61:98:2b:90:aa:1c:5d:65:9e:dd:6d:6e:92:0a:be:c4:02:3e:
15:b0:2a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 18:27:36 2026 by rpki-client