
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/842693eb-4702-3883-bba3-0d1ad1693ec9.roa
File: 842693eb-4702-3883-bba3-0d1ad1693ec9.roa (raw, json)
Hash identifier: wGMZEu/2gmIsp2gDXVbCfsEs8eYqEt9S3fN0wKmB1zw=
Subject key identifier: 69:8E:79:3E:41:F6:D4:9C:E0:FD:B6:1E:50:D6:6E:AE:10:40:6D:15
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584ED001CBDD639E83A824757800
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/842693eb-4702-3883-bba3-0d1ad1693ec9.roa
Signing time: Wed 12 Aug 2026 13:00:12 +0000
ROA not before: Wed 12 Aug 2026 13:00:12 +0000
ROA not after: Tue 10 Nov 2026 14:00:12 +0000
asID: 201106
IP address blocks: 75.153.68.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 16 Sep 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d0:01:cb:dd:63:9e:83:a8:24:75:78:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Aug 12 13:00:12 2026 GMT
Not After : Nov 10 14:00:12 2026 GMT
Subject: CN=2edddc98-1988-4f5f-bd96-e44ba1e98fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:39:c9:47:65:51:69:93:80:7b:83:7f:7d:86:
ea:4c:2d:c5:f2:7a:e0:d4:74:d5:21:72:b0:d6:00:
a5:2e:07:49:2f:9c:e6:87:b4:9b:30:2c:d3:92:52:
ed:13:bb:de:9a:d0:af:08:fe:9c:5d:d5:8c:a1:b8:
c1:c8:a6:e8:8e:37:07:bf:fc:95:a2:5e:fc:74:93:
73:6c:fb:cc:f0:63:cd:14:c2:24:14:b4:53:8e:5d:
4b:7b:49:b2:a2:59:95:75:41:1e:87:97:6c:33:95:
7d:39:5d:21:88:12:c9:50:6c:5a:2f:a1:1d:6e:60:
bc:fe:80:17:ba:f2:b5:dd:29:a9:49:a8:e9:a8:2b:
49:db:03:fc:af:93:86:d0:c2:b0:f3:4d:f2:eb:06:
0e:fa:a8:96:41:41:a5:6f:68:ad:ca:93:84:f1:3c:
ef:07:bc:01:ee:0e:8e:b7:14:cf:3e:3c:7d:d4:58:
08:8e:1e:30:ae:38:c8:fb:0e:54:1b:53:a9:2c:65:
ca:1b:5d:b8:f2:19:92:ee:c2:2a:01:22:fb:b5:51:
28:07:5a:8a:5f:c1:90:02:b3:e5:27:ad:f4:b4:2f:
69:cc:0d:fe:c0:50:83:1a:d8:d2:9e:bc:0a:8d:d8:
9e:14:f7:6b:16:90:05:c6:1b:94:b6:72:74:06:f6:
c9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:8E:79:3E:41:F6:D4:9C:E0:FD:B6:1E:50:D6:6E:AE:10:40:6D:15
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/842693eb-4702-3883-bba3-0d1ad1693ec9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv4:
75.153.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
72:3b:9e:30:d3:e6:e4:ab:f6:fd:ba:8f:0d:70:a6:b0:78:96:
e6:31:18:fc:d2:5a:5a:50:5b:9a:13:dc:d7:65:81:95:0a:5d:
99:7e:52:90:93:c2:7a:85:7c:f2:ce:33:ab:f1:84:dd:42:15:
cd:3e:86:6b:59:30:47:3c:11:2f:7c:d3:6e:4e:d9:b8:04:8b:
ee:93:ce:fa:a8:fd:6b:46:a9:31:e3:6f:3e:1a:8e:61:2f:0e:
32:d1:e3:b8:9b:4a:2d:0b:80:91:e0:79:11:70:72:1d:cb:2e:
6c:d3:c5:7d:1a:e8:c6:1a:70:31:bf:bf:cf:fb:c9:60:96:59:
e1:23:de:5e:d6:8f:01:b6:1e:01:0f:b3:13:ab:d2:c9:38:a0:
35:30:e5:13:f3:3c:ce:58:f8:a2:0f:7e:38:85:85:d6:14:8f:
49:75:9c:9d:b0:66:0b:bc:c7:ef:8e:4d:2c:cc:d9:56:df:20:
4a:e3:7f:57:ec:83:97:9b:df:c3:99:30:41:6f:21:86:49:cc:
db:16:24:ef:97:07:1f:08:ad:95:b9:6f:f6:27:a9:bf:9b:9a:
38:c7:da:14:30:7a:fc:04:f4:cf:9d:1c:36:55:25:01:ec:01:
f4:d0:b6:e2:f9:0f:e8:a7:d1:97:bc:94:09:da:a3:11:fd:69:
61:7e:43:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 14 21:57:42 2026 by rpki-client