
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa
File: 428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa (raw, json)
Hash identifier: KC2NYm4qAERvvtjydq5oiHiLaUfYbnXdn056S9VojFM=
Subject key identifier: 9A:46:33:59:31:8E:15:FC:71:B3:AD:D8:55:3A:BE:7D:F0:27:AF:57
Certificate issuer: /CN=68da87f2-77b1-4965-8477-aac285a6686d
Certificate serial: 010D0C9F4328584F4973E612D5411ACF0EF25CA0
Authority key identifier: 07:2F:90:16:22:7C:01:82:FD:C6:7D:1B:FC:AD:C6:85:4E:C3:F8:E3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 400812
IP address blocks: 2602:fadb::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:e6:12:d5:41:1a:cf:0e:f2:5c:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68da87f2-77b1-4965-8477-aac285a6686d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=897366c0-c07f-4967-8aa3-b45de0dec4cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9b:c6:47:fa:f5:c0:03:37:2d:e5:f1:61:72:
ac:fc:1d:6a:26:32:f3:00:98:0c:ca:22:97:ff:b5:
02:cb:81:46:7e:4a:26:e5:0d:e6:e3:33:c4:8d:ff:
cd:4d:88:da:b7:7a:0a:85:16:41:f6:fc:9f:d6:1d:
59:d3:7c:17:4d:b1:ae:d7:be:d9:05:7e:fb:c5:0e:
11:32:93:27:9d:0b:23:92:fc:64:72:20:74:44:ec:
6f:f5:d6:7f:e5:9f:02:17:c0:86:e8:5b:3f:8e:aa:
f1:5f:7a:46:85:73:85:5f:9d:7f:9c:ca:f5:d4:71:
8b:02:fa:82:1c:2a:4a:7d:a6:4b:bd:c9:3b:cf:d6:
2c:79:51:fa:91:b2:c3:eb:aa:56:10:b0:f7:ee:06:
60:6b:93:35:62:c1:d6:56:e4:ea:16:f1:76:99:10:
9c:d1:94:c2:ed:bd:98:00:19:bc:24:43:31:35:3d:
6e:16:1c:a6:0a:f8:32:54:d8:1e:fc:1b:f7:e0:40:
a3:31:c8:9a:75:24:f7:52:0e:45:2c:60:7a:c8:9a:
55:2d:c8:f5:67:08:24:01:74:fc:40:27:80:81:8a:
60:ac:78:24:9b:76:67:08:69:6f:70:02:42:a8:a6:
42:8d:0f:4b:e9:9f:10:ca:64:4d:c0:55:4d:cc:00:
ae:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:46:33:59:31:8E:15:FC:71:B3:AD:D8:55:3A:BE:7D:F0:27:AF:57
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/428c46a9-c7ff-352c-b7a9-747ed2bd11a9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d/68da87f2-77b1-4965-8477-aac285a6686d.crl
X509v3 Authority Key Identifier:
keyid:07:2F:90:16:22:7C:01:82:FD:C6:7D:1B:FC:AD:C6:85:4E:C3:F8:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/68da87f2-77b1-4965-8477-aac285a6686d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fadb::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:4c:b9:f7:91:e9:09:4c:c7:1f:98:af:18:31:87:c6:33:44:
47:77:38:c2:72:8d:7f:5e:55:34:c1:25:ac:bf:a0:fd:d5:13:
89:bd:f3:75:c3:6e:8f:7d:0c:2e:c4:50:f7:26:84:26:b4:39:
aa:03:8d:87:f4:9d:55:c3:73:01:32:89:5d:60:14:7a:c9:df:
d3:90:4c:47:40:dc:67:52:39:44:9a:01:ba:f5:c1:c2:29:e0:
e4:20:a0:b7:c9:f0:09:e6:c1:13:59:0f:cb:8a:62:d0:1a:b4:
6f:25:5e:fe:ab:9b:00:d6:ce:f0:33:4c:c7:db:a9:87:5b:5b:
e1:52:c5:ae:6d:82:71:43:54:98:ad:05:e9:28:c0:a9:b0:db:
94:04:52:0b:f2:cc:f4:82:5f:e4:62:e0:01:ee:f0:b4:a4:22:
3f:e5:4c:c8:4b:75:bb:73:11:4e:2b:c6:cc:26:67:bb:e7:9e:
8c:1c:61:7d:ac:c9:87:a0:82:ae:57:08:e7:50:0e:8a:cd:d1:
3c:bf:cb:6a:1e:1f:87:0d:b5:71:e6:89:33:a0:80:ad:c1:20:
fd:0a:a0:a9:e5:8d:7a:b2:b6:1f:7a:6f:69:d6:d4:b7:d7:29:
b1:d2:22:ce:a3:00:3c:02:6d:fd:2e:04:5c:52:d9:fc:d5:a1:
10:39:a9:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 21:19:53 2026 by rpki-client