
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa
File: 5d1f7826-3d31-3968-88e1-911730883791.roa (raw, json)
Hash identifier: Nd0WUOXvuVxbvIJvjUTSTmJ2BwHYg0ChS7tE9KKm10I=
Subject key identifier: 35:31:E9:54:94:7E:61:02:A0:6B:97:CC:5B:8D:AB:49:1E:78:95:69
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E67F40CEA47E8B3FC6EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.42.64.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 28 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:67:f4:0c:ea:47:e8:b3:fc:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=de3ec9ec-2c03-486b-878b-f2bdfd3212bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:b8:b7:1a:01:13:86:3d:e4:67:6b:3a:7d:a2:
8f:4a:b3:ae:99:57:b4:14:ae:00:a1:0b:dd:b7:dc:
a4:d0:c1:42:84:18:00:06:ad:b6:13:51:90:4e:1e:
6d:73:60:b2:d2:25:78:e1:fd:82:cd:f5:e0:9d:0b:
11:ff:74:68:9d:c9:5e:6e:e3:b1:2d:53:3f:ef:d1:
c0:25:48:25:cf:35:bc:d1:45:be:b4:02:52:5a:07:
a1:c0:b3:15:be:44:79:99:4e:c8:ec:40:9f:45:9d:
25:1a:0b:f8:42:2c:e6:bb:52:d1:2d:8a:a1:ab:b0:
4f:d2:d6:8d:ee:ba:00:6a:1e:e4:c6:13:03:61:61:
26:19:88:58:6d:69:ee:86:69:b0:93:b6:8f:0f:b2:
d2:f1:b4:4f:c6:ae:fb:c7:95:31:af:08:06:b7:7b:
c9:6f:87:2d:ed:4b:41:bf:bc:8d:62:af:b5:f4:ac:
ba:21:c3:62:2d:5e:be:5e:7b:05:95:d6:2a:0e:41:
01:f6:e9:20:8f:8b:5f:a4:8b:ae:0e:c1:1b:03:41:
84:05:8e:9c:ac:e3:30:07:9e:fe:c5:8c:0f:bd:7a:
ac:ed:41:76:17:41:f8:5e:e8:c4:37:e1:76:a9:af:
1f:5e:cf:c6:c4:b5:45:4b:9e:f2:3c:ea:7b:ef:65:
78:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:31:E9:54:94:7E:61:02:A0:6B:97:CC:5B:8D:AB:49:1E:78:95:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5d1f7826-3d31-3968-88e1-911730883791.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.64.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
12:a6:5d:32:0c:7b:63:1b:4c:20:bc:fd:e2:b6:b0:9c:b1:b7:
95:98:f0:de:13:ea:71:c4:99:b1:60:af:a8:4d:29:e7:45:b4:
ee:77:5b:c1:80:23:ae:b2:ef:6d:51:59:3e:8e:33:f9:53:fb:
3f:c2:18:a1:05:82:0c:64:4d:cf:54:45:7b:a1:1d:5f:ea:d0:
df:64:ce:dc:48:2e:94:87:09:c0:f1:95:73:85:be:fd:a8:d7:
be:31:e7:60:96:a9:4c:42:8c:1e:cc:5d:b7:29:e4:26:5d:5a:
08:c4:98:76:c2:c7:bc:84:08:7a:f9:a8:a9:72:ee:07:fa:fd:
23:86:ce:a4:5d:70:f0:dd:8b:3e:80:51:b4:dd:90:f9:63:4a:
b6:86:68:44:27:91:f8:6d:38:8f:51:22:9c:b2:89:7d:71:3f:
c4:2a:0e:c4:15:38:80:8f:78:4c:0e:12:16:32:fd:33:9d:90:
db:5f:b2:d1:fa:ef:44:80:11:c0:39:35:eb:42:77:93:f3:0c:
12:e6:26:9e:7a:f8:df:98:78:83:7e:24:5f:ed:2f:59:eb:8a:
f7:61:5f:79:c4:cd:63:ca:26:23:b6:d5:1e:df:7e:53:d0:09:
ba:d2:34:73:d1:31:09:cb:87:71:1b:4e:53:54:d1:fb:93:31:
25:05:0e:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:05:20 2026 by rpki-client