
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71551a3a-05cc-3dce-b130-17478f1a507c.roa
File: 71551a3a-05cc-3dce-b130-17478f1a507c.roa (raw, json)
Hash identifier: RrSXFl8JNMtSCtQwIeq4JQvpTfcnctfifBMNcUIp8Ho=
Subject key identifier: 21:80:51:57:82:E0:A9:53:F2:CA:FC:97:56:30:E9:85:5B:12:99:DE
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497F9CB1FC072C4BCE012A80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71551a3a-05cc-3dce-b130-17478f1a507c.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 68.52.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:9c:b1:fc:07:2c:4b:ce:01:2a:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=041fc721-b16f-47a0-9ee0-3a04898ab97a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:ba:33:50:93:83:5d:96:ff:bc:25:61:18:5a:
df:99:11:09:2b:a9:6c:03:ac:7a:63:4c:29:03:b2:
76:2c:46:7d:de:9a:12:0e:35:47:6b:c4:ee:2f:82:
9b:c6:e3:01:c8:50:92:b6:52:80:53:c8:d0:22:a7:
52:b8:01:67:b3:12:dd:e0:76:b0:72:b3:fb:85:7d:
91:1a:a0:45:4a:96:45:31:bf:4e:49:5f:3e:03:6b:
13:02:10:ea:44:bd:db:2d:2e:f9:d3:25:fe:da:32:
25:49:67:22:c5:77:80:e5:66:19:9f:75:ca:bc:91:
fe:a4:02:1b:2b:03:4d:f9:a1:c2:d3:2a:db:53:fc:
f8:2f:5a:d7:34:3d:80:65:88:e8:3c:c7:e4:0d:9e:
a8:0b:e5:fa:3e:3c:f2:c9:ac:44:ab:67:8c:61:1d:
31:75:9e:81:46:ef:b6:40:3f:55:b0:0b:f7:df:c3:
9b:12:4d:46:35:66:c5:be:93:b8:e5:47:6b:a5:81:
46:88:9e:fa:7b:30:30:99:8a:03:3f:e7:65:48:79:
f7:aa:3d:68:5e:9d:9a:9a:94:b0:c4:ec:ec:ef:b9:
c4:91:48:71:5d:cf:58:a4:a6:da:6e:ba:f2:dc:f9:
13:90:70:26:e4:56:8b:5d:e7:d6:89:e8:c1:7c:a8:
cc:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:80:51:57:82:E0:A9:53:F2:CA:FC:97:56:30:E9:85:5B:12:99:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/71551a3a-05cc-3dce-b130-17478f1a507c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.52.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:e2:6a:12:0b:3c:d0:b9:cb:87:72:68:9f:ae:a0:9b:01:c5:
b5:73:63:c3:a0:54:32:53:11:a6:02:be:59:72:c9:9d:d7:1b:
b8:a0:52:a8:83:7c:1e:34:50:36:1c:dc:17:8f:c5:2a:a3:84:
9b:26:1c:6a:32:ef:00:2c:53:6c:5b:45:88:e4:28:7b:df:ff:
ca:0f:74:cc:f0:e3:06:5d:db:9c:59:cc:47:85:5f:ad:01:01:
a7:22:51:fd:82:ef:2e:8b:19:49:eb:e2:63:31:1b:e2:58:8b:
17:92:40:7f:80:5c:b6:95:3f:e3:ea:c0:29:a3:96:3a:d9:88:
20:7b:65:18:e2:1a:bb:9c:52:54:46:f6:01:2a:6b:e8:c0:2e:
f7:53:fd:6d:c4:cf:82:b3:19:4c:dd:1e:58:1d:03:6e:3e:2e:
77:03:cd:33:ef:7c:a4:f8:34:13:96:68:e6:96:ae:c2:15:c3:
5f:47:30:b5:65:71:45:c9:af:31:73:42:30:24:32:df:a2:6c:
5c:7e:2f:bf:b1:93:a2:82:60:27:af:65:94:43:b4:41:bc:b1:
9c:9c:0a:6f:9c:75:74:f4:02:fe:7a:19:41:67:26:98:2f:c1:
0e:79:f6:da:ec:15:79:84:64:0a:c3:46:11:32:07:54:d4:c7:
38:70:5b:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 2 16:48:31 2026 by rpki-client