
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa
File: dfaa2688-c8ee-3021-915c-efda099beed5.roa (raw, json)
Hash identifier: 3NA0jLh823z2GlmlnZV0dRNBgcDxLqcyvmlQEwxuxwA=
Subject key identifier: 6B:F6:4C:2C:58:D4:74:AE:44:DC:75:AB:96:6F:38:54:EA:E1:94:A7
Certificate issuer: /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial: 010D0C9F4328584EB84718EE415D6C6125285480
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa
Signing time: Tue 04 Aug 2026 01:00:12 +0000
ROA not before: Tue 04 Aug 2026 01:00:12 +0000
ROA not after: Mon 02 Nov 2026 02:00:12 +0000
asID: 31898
IP address blocks: 68.64.1.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 09 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:b8:47:18:ee:41:5d:6c:61:25:28:54:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
Validity
Not Before: Aug 4 01:00:12 2026 GMT
Not After : Nov 2 02:00:12 2026 GMT
Subject: CN=0fc95bf1-064e-4cde-8b30-d6de03872cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:50:6f:dc:fb:77:5d:60:b3:37:fd:90:4a:85:
52:f8:f3:c4:a0:19:cb:1d:98:24:1f:33:e6:63:88:
14:d0:da:9b:81:e2:3f:f5:30:fe:f7:ef:38:17:11:
4d:c7:2a:a5:47:0e:33:9f:20:f0:9c:4b:f9:8d:a7:
9e:9f:e2:8c:35:3b:22:16:2a:b1:e1:3a:80:9d:58:
72:9e:1d:cd:3c:db:9f:e0:6e:72:0e:14:83:eb:b8:
c6:5a:94:87:0c:b3:fa:ed:91:b5:38:46:a2:02:23:
10:d8:d0:97:d7:e8:bb:62:80:c2:e2:bd:37:91:bf:
22:c3:6d:15:e5:42:f9:d4:9f:13:35:3a:cc:c1:f9:
7e:06:df:c6:d0:87:53:7c:ae:b3:bd:38:bf:4c:06:
7e:5c:89:44:85:88:42:be:ce:b6:d9:a6:e5:65:7c:
f7:88:be:26:aa:a7:4f:37:0d:08:d0:7e:9c:e6:e3:
f8:32:72:2b:88:37:ba:b4:39:75:84:6c:fa:0e:ba:
20:2a:92:6c:1e:4d:fc:7b:12:6a:b3:c2:b4:20:8b:
fb:78:f5:29:86:88:4d:57:3a:10:bb:0e:7a:bd:b4:
6c:f1:54:70:ab:7d:65:44:f9:bb:24:76:9b:3c:97:
6c:11:ca:a6:3b:cd:f2:9a:fe:d7:44:b8:c6:64:ce:
a8:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:F6:4C:2C:58:D4:74:AE:44:DC:75:AB:96:6F:38:54:EA:E1:94:A7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/dfaa2688-c8ee-3021-915c-efda099beed5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
X509v3 Authority Key Identifier:
keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.1.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d7:7f:33:2a:83:1d:5f:cf:73:38:be:e9:b4:7f:b0:1d:50:fd:
20:c1:0d:d0:95:6b:18:21:54:cd:ea:51:86:34:0f:5f:7c:80:
be:39:ed:0a:bb:98:70:5c:d2:f8:c5:88:ea:54:98:99:b9:76:
02:63:a9:fb:8c:c1:c5:84:bc:32:b0:cf:3c:ce:a9:aa:59:e2:
1a:1a:2e:e4:ec:2e:19:d2:c9:6d:29:d5:bb:c7:53:51:d9:58:
64:e0:9b:7c:e0:44:5c:3e:33:ee:b0:bf:d0:54:24:a4:65:f3:
98:9f:2a:79:9b:65:a3:d8:1b:0e:bb:54:2f:84:87:51:f4:52:
2f:a6:3d:42:2c:2f:1e:fd:8a:13:b1:c6:1a:75:16:88:7e:e8:
28:21:79:03:30:e1:fc:19:37:50:b7:15:c5:25:f2:a8:32:58:
36:a7:e9:55:65:84:e8:ca:f4:55:44:91:e0:fa:3c:79:95:ab:
ef:8b:73:d4:c1:9d:c9:5d:1c:81:0f:62:0c:bb:69:0c:2f:22:
df:66:85:47:e7:a7:49:f1:af:9c:b7:52:4a:15:65:d7:bf:62:
ae:ed:c3:20:61:d3:bc:8a:7a:22:62:ff:39:6c:dd:d5:01:a9:
1e:56:2f:f7:4e:a3:b4:44:bd:fe:ed:27:60:eb:1a:2d:9d:9b:
32:b8:36:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 8 05:18:20 2026 by rpki-client