
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b/bb625388-d8da-3a6e-bd72-6e154dc02316.roa
File: bb625388-d8da-3a6e-bd72-6e154dc02316.roa (raw, json)
Hash identifier: yQGi1b9VxJUJy/zYBS6scPX3nupixg0YV+6AJZoTM74=
Subject key identifier: 29:06:FC:7B:62:73:D9:BF:97:53:96:F6:9F:33:54:1F:9C:06:C6:D1
Certificate issuer: /CN=b68a8dea-0054-42ac-b8af-5781df62023b
Certificate serial: 010D0C9F4328584F90A2FDCEAB2470C9033246C0
Authority key identifier: 5C:8C:E3:27:79:4E:32:C9:F9:63:4C:18:BC:86:AE:2F:A0:8C:DC:1A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b/bb625388-d8da-3a6e-bd72-6e154dc02316.roa
Signing time: Tue 20 Oct 2026 13:00:13 +0000
ROA not before: Tue 20 Oct 2026 13:00:13 +0000
ROA not after: Mon 18 Jan 2027 14:00:13 +0000
asID: 395559
IP address blocks: 192.69.136.0/22 maxlen: 22
199.188.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b/b68a8dea-0054-42ac-b8af-5781df62023b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b/b68a8dea-0054-42ac-b8af-5781df62023b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:90:a2:fd:ce:ab:24:70:c9:03:32:46:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b68a8dea-0054-42ac-b8af-5781df62023b
Validity
Not Before: Oct 20 13:00:13 2026 GMT
Not After : Jan 18 14:00:13 2027 GMT
Subject: CN=2dacab81-235f-4647-8848-62517b1a6c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:0c:a5:65:cf:4d:d5:c3:5d:15:7d:99:7b:ce:
4c:90:aa:33:78:a4:9b:bf:2e:b0:1c:0e:13:06:ce:
ee:a6:8a:9e:96:ef:42:a9:2a:69:d1:69:fb:9f:e2:
3f:c5:4c:53:a9:94:67:26:c2:44:34:11:90:82:07:
75:e1:ad:7d:9c:12:70:e4:e1:04:0e:cc:c1:d3:25:
a4:9e:5f:6e:79:c9:6b:02:97:cc:e0:ad:fc:48:0b:
5e:8a:1a:ce:75:31:a1:ae:9e:00:a8:62:34:ee:b6:
13:75:bd:45:f7:30:08:7b:73:c2:ad:71:10:68:08:
75:60:df:35:cc:58:e7:6d:ec:72:26:5a:eb:38:c5:
6a:c2:21:7e:0a:08:bc:5d:f5:40:6d:80:c9:fe:d4:
f4:be:39:71:9f:4a:d6:a2:88:c9:0d:3d:39:aa:a9:
55:05:4f:8f:e3:70:00:ea:ab:b0:0e:87:bb:61:44:
de:3d:a1:df:c1:67:b7:59:64:ae:43:4a:45:fb:7b:
e7:5d:84:b2:02:a5:a1:43:cf:b0:a3:2d:61:ed:f6:
5e:4b:30:6f:29:41:3e:7c:49:43:9a:ea:e1:6a:2b:
25:6f:d1:37:99:2d:8e:23:fd:a7:52:0d:1b:c3:0c:
16:43:6a:30:8a:9d:c4:f3:67:3d:82:e0:a2:ea:b0:
88:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:06:FC:7B:62:73:D9:BF:97:53:96:F6:9F:33:54:1F:9C:06:C6:D1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b/bb625388-d8da-3a6e-bd72-6e154dc02316.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b/b68a8dea-0054-42ac-b8af-5781df62023b.crl
X509v3 Authority Key Identifier:
keyid:5C:8C:E3:27:79:4E:32:C9:F9:63:4C:18:BC:86:AE:2F:A0:8C:DC:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/b68a8dea-0054-42ac-b8af-5781df62023b.cer
sbgp-ipAddrBlock: critical
IPv4:
192.69.136.0/22
199.188.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
84:8a:a2:5b:4d:8e:e4:e8:97:cc:08:45:0b:aa:76:3e:f3:c5:
d8:d8:1b:cf:63:b8:06:7d:50:b3:b2:5d:8a:0e:5e:8e:d7:07:
82:9d:2c:64:b8:92:44:a4:a5:4b:83:f8:d6:07:07:3c:5a:7c:
19:78:dc:17:9e:e0:79:73:52:e6:e0:e9:10:48:2e:31:11:ee:
a8:a3:da:25:41:05:c3:c4:f3:48:e4:60:41:24:18:d5:ac:a8:
a2:54:32:a4:b8:8b:92:ea:ae:29:b7:05:93:75:f8:1f:2c:67:
e0:8f:4e:56:f0:a6:b8:4d:0c:ff:21:7c:6f:bf:1a:71:bb:4f:
31:eb:34:e7:15:e5:83:02:5a:19:ce:d0:45:e1:4f:5a:e4:94:
37:e6:76:a0:22:da:a9:aa:bc:80:e0:57:47:1f:62:92:33:d2:
00:96:8f:51:01:0d:02:07:0b:e6:11:aa:40:12:10:0d:9c:07:
b9:c6:21:f0:45:0e:3f:89:da:5f:a2:28:15:d5:4a:ee:2d:e6:
f9:4d:34:88:08:dc:5a:f5:f4:fb:55:92:6a:98:06:69:4c:9b:
57:a2:59:ff:18:5c:31:7d:fd:2a:82:2f:bc:4c:82:e4:60:f9:
e7:14:61:df:c0:a0:b1:52:fb:1e:48:d9:70:42:1e:ae:ee:5e:
85:f2:88:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 11:43:20 2026 by rpki-client