
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa
File: 6de1fbab-8ba5-3ece-969d-b6be65026f84.roa (raw, json)
Hash identifier: RA2XWf6x4JDJet2vDIUDe+hQla8xTQtFUwcaC9ykqOE=
Subject key identifier: B5:9B:F4:63:DB:B6:7F:C8:FC:2A:D9:06:93:DE:10:D0:5B:21:34:AA
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584EA7978EC98D636DE6F6B21C80
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 14618
IP address blocks: 68.64.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 22 Aug 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:97:8e:c9:8d:63:6d:e6:f6:b2:1c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=f8e60647-e19f-4013-a24a-7e2ca8795c99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:02:23:a1:62:ec:e9:a5:5b:00:67:dd:d3:1a:
4c:ee:81:97:3a:19:1c:e0:aa:18:a6:dd:79:a8:7d:
4d:5d:42:d3:14:e6:5a:1c:24:f0:12:dd:d3:3e:60:
53:17:dc:cc:67:b6:f4:67:59:e1:19:ca:5a:c2:a0:
58:55:a4:7b:5a:66:ed:49:40:52:56:17:89:cb:1b:
18:ad:a9:60:6b:f0:e5:4e:22:90:41:71:4e:7f:7e:
dd:c9:b1:6a:7a:47:66:e8:92:dd:e6:aa:b4:80:47:
04:14:9f:86:67:34:7c:3d:e8:c0:99:2e:6d:2e:a8:
7e:91:2f:a6:02:0a:16:d0:db:04:ec:1e:97:d9:49:
ef:28:9e:b1:dd:84:20:4a:db:f9:68:80:bc:a0:74:
77:fe:73:13:c5:8c:7f:11:bb:4a:58:6a:f6:ce:0d:
59:e6:64:e5:e2:9b:96:c6:12:cf:2c:05:81:12:35:
82:8a:fa:3e:01:8a:f6:c4:83:15:ed:95:dd:6d:8b:
97:06:d9:eb:34:f4:76:90:fc:1b:73:d2:37:80:8e:
16:e0:45:68:f9:63:8b:1e:72:ed:da:f8:42:6c:2d:
58:a8:0c:e7:1c:a4:fc:7d:a8:8d:76:eb:9a:41:03:
7a:dd:7b:b7:bd:9a:ad:28:4d:4a:c7:25:e6:ee:2d:
3c:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:9B:F4:63:DB:B6:7F:C8:FC:2A:D9:06:93:DE:10:D0:5B:21:34:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/6de1fbab-8ba5-3ece-969d-b6be65026f84.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.11.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d3:6d:21:2c:d1:38:a8:d0:c6:63:9f:cf:ce:31:72:1d:53:9d:
9d:f5:a4:52:e7:4c:bf:92:b0:54:0b:40:01:03:4d:e9:92:d2:
35:5e:1b:d3:87:7c:36:50:1a:e0:1a:32:cc:75:ed:69:85:7c:
b3:5a:3e:06:77:d3:1e:ad:39:8b:f7:e2:6e:62:5c:28:0b:be:
03:bd:f2:de:0c:70:88:72:6c:96:bd:e4:d2:1d:30:bc:ec:70:
c0:07:8b:9c:01:ba:ff:52:fd:fc:07:e1:33:eb:93:7e:05:a1:
c9:23:00:74:f2:6b:ea:22:97:e9:c3:14:d7:3d:46:eb:ce:7c:
c0:b9:60:c7:92:df:e2:a8:56:16:59:3b:09:c4:15:7d:b3:6b:
69:aa:4f:a3:bf:45:a2:14:0c:f2:3b:39:52:20:2e:86:93:e4:
8b:67:11:ff:f1:d3:ef:43:04:c7:fc:5e:61:4f:e2:49:5c:5d:
c2:25:56:ea:f7:d3:eb:3b:ff:e6:d9:79:f5:30:a9:48:6f:8f:
12:c6:76:3d:93:07:3e:11:3a:05:ee:ed:2a:e8:65:9e:30:48:
3e:77:9c:67:b1:7c:36:48:49:47:c9:de:52:7c:37:a3:8f:4a:
f9:23:04:77:14:4d:99:d2:ad:31:b4:97:25:77:c7:c9:a0:40:
97:a7:5f:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 20 21:58:26 2026 by rpki-client