
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/520e3494-9b48-36f1-aa74-83e0618bba4f.roa
File: 520e3494-9b48-36f1-aa74-83e0618bba4f.roa (raw, json)
Hash identifier: OxxV90oXv5ml6mIgWz7f9NmVEKKhCOYENqzDOpOcwhs=
Subject key identifier: 10:81:4E:EA:66:3E:8E:ED:21:75:87:5C:A3:81:E9:5C:B7:5D:40:5F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F4979BA7C8065153155724E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/520e3494-9b48-36f1-aa74-83e0618bba4f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 33287
IP address blocks: 68.85.62.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:79:ba:7c:80:65:15:31:55:72:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ebe6ee72-5894-4d7e-a32d-e874772438d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:14:3c:6b:b2:74:b4:f4:79:de:41:35:ac:9c:
cd:e1:6d:29:63:b3:c0:90:09:a7:97:3c:60:d9:28:
cc:d9:25:72:cf:c8:b7:97:9f:c2:ac:6b:ea:f4:2c:
92:2d:e7:b0:2c:e4:23:8c:4a:7f:f6:8e:22:08:fc:
d2:ac:aa:87:41:3a:d7:69:19:fc:0b:2c:17:84:87:
6f:39:f6:ef:42:2c:f0:63:5b:81:5f:b2:63:95:1e:
24:35:15:3b:18:09:15:d9:a3:15:64:d8:04:cd:85:
fb:c6:82:ef:b9:c5:14:ce:03:cd:f5:06:c7:d1:8a:
9e:b4:ac:98:eb:58:90:e1:dd:ff:00:d3:d9:fe:30:
c1:88:dc:01:5a:1c:3e:e8:6f:3c:d1:98:dc:83:ef:
e1:93:f7:b6:35:99:ea:c3:d8:03:5d:85:93:bc:41:
1e:d0:d0:a5:55:90:12:34:71:58:80:62:79:4a:9a:
44:79:37:88:e8:12:2f:26:98:cb:cc:1d:e2:1b:0b:
1d:fc:b4:25:7a:58:e9:7e:40:8b:88:fe:2a:57:cc:
79:0f:a1:6a:f7:4c:9e:b6:40:13:18:ac:36:97:f9:
48:9b:9c:d9:5e:2d:a9:6c:de:86:88:df:ef:28:1e:
56:15:33:b6:78:76:6f:58:18:95:29:59:3a:35:79:
6d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:81:4E:EA:66:3E:8E:ED:21:75:87:5C:A3:81:E9:5C:B7:5D:40:5F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/520e3494-9b48-36f1-aa74-83e0618bba4f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.62.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3e:5f:39:9c:f9:c3:58:23:93:d9:27:7c:50:8f:79:83:39:d4:
73:f5:33:c7:ae:d4:b7:62:97:aa:67:67:11:a2:46:b7:3f:72:
af:96:8a:26:18:a8:0d:a1:82:ce:52:41:64:e2:d3:e8:94:57:
e6:72:75:6e:76:a2:89:19:92:e2:c1:ce:0b:2a:f8:b6:48:ac:
72:7d:d0:70:99:5f:c2:f3:9f:17:1b:b9:3c:1d:82:dc:9c:1b:
35:74:dc:af:e4:b4:0c:0b:3b:78:02:01:e1:df:22:05:67:09:
dc:56:70:a5:72:cb:cd:3a:3f:19:2a:0e:43:75:4d:b0:bc:96:
4e:47:40:98:6b:e5:1d:8f:74:71:a5:aa:b3:75:aa:64:b4:43:
69:db:22:2b:c6:e3:6e:ae:8b:fb:77:a8:81:a1:99:0d:96:6c:
82:16:5d:ee:19:23:6e:3d:b2:0d:e2:c6:6f:9e:d2:0e:28:0e:
ed:9d:78:81:28:00:a6:7a:5f:76:fe:e1:92:83:ee:32:2e:67:
41:9d:38:89:c7:07:ee:e9:8e:49:88:10:2b:3b:b6:de:c2:1d:
8d:2d:67:49:5e:9e:17:a6:b2:72:4b:90:cf:57:19:70:60:c1:
75:53:7f:9b:56:e2:88:bc:59:38:25:ee:83:1b:99:19:14:81:
08:83:ed:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 02:57:10 2026 by rpki-client