
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba683bc0-624b-3a45-b467-13f4c4d3594d.roa
File: ba683bc0-624b-3a45-b467-13f4c4d3594d.roa (raw, json)
Hash identifier: GTs1KjuaQWoIKrmGgPUSlGbBrE1L8ulv+Dfk9DNjQ8I=
Subject key identifier: 2E:8B:6D:C8:D6:77:40:BC:CE:46:AF:E4:DB:EB:84:2B:AC:C9:76:EA
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497FA841D44A4494EE159280
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba683bc0-624b-3a45-b467-13f4c4d3594d.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 68.53.18.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:a8:41:d4:4a:44:94:ee:15:92:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=dfec6b91-fefb-42c9-be7b-7796d2d4cc44
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:ae:70:46:3e:d6:09:e6:c7:8a:54:7f:66:34:
01:17:f3:d7:e8:9b:f2:c5:49:87:ee:93:0b:a8:06:
97:e9:15:44:d1:02:13:5d:60:e3:6d:60:7a:09:da:
b8:86:84:6e:c2:11:be:3b:69:1a:f5:0e:1d:e6:7a:
c3:85:be:49:65:b2:c2:71:13:0e:2a:28:c3:f1:05:
70:c7:0e:d9:cb:7a:59:16:d8:56:a5:73:5b:f9:ca:
05:d4:38:2a:67:5a:8b:ad:a2:71:7b:59:ec:8f:74:
b5:29:99:61:69:2d:7f:f7:10:15:c2:9d:94:de:f7:
4f:95:35:e0:6e:7b:fc:af:3d:a4:49:97:d8:99:f0:
7e:98:99:b4:b6:da:53:2a:1e:06:5c:7c:37:78:1f:
43:f1:d8:f1:c3:d7:1e:e2:6b:d2:cb:16:1a:67:30:
e7:03:82:69:b6:90:c0:2d:bd:8d:fb:24:28:04:dc:
fd:44:47:0e:79:34:a0:47:b2:57:e7:25:97:af:db:
01:ff:af:e6:e2:5e:9f:f5:df:7a:cc:66:b1:ed:84:
ef:e6:6e:9f:37:1f:50:8d:00:cb:e3:2b:a6:02:07:
9e:a4:e1:e2:e7:4d:a9:62:d7:12:6a:f7:48:97:46:
90:e2:96:ef:c3:0a:54:74:9c:a2:c0:f2:86:91:02:
c3:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:8B:6D:C8:D6:77:40:BC:CE:46:AF:E4:DB:EB:84:2B:AC:C9:76:EA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/ba683bc0-624b-3a45-b467-13f4c4d3594d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.18.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:54:35:cd:fc:ea:cf:a0:5c:ed:f4:af:e1:aa:54:56:5c:04:
33:c2:00:9b:9b:d4:d2:5d:ae:c3:be:17:42:f7:ba:a5:0b:dc:
ed:91:8f:61:de:33:80:87:b9:2b:a1:e2:a7:ef:42:b9:ea:b3:
53:a5:a7:40:6e:81:da:6a:3d:b9:a4:b5:52:09:4a:57:bf:86:
54:12:cd:ae:6b:0f:63:93:9b:e7:fa:38:43:54:7a:66:a7:0c:
42:8d:a0:25:52:23:1f:2d:8c:d4:74:8b:e0:26:45:b0:e1:9c:
aa:ed:bb:2f:62:31:79:b4:70:00:c5:5b:28:f3:09:8b:6f:39:
09:35:20:0f:75:99:4d:b1:c5:de:ff:c5:e2:6e:51:e2:af:f6:
b0:3b:fe:53:4d:32:c2:d2:8c:46:db:0e:d5:e5:c1:36:65:26:
06:0e:2a:fc:c3:be:0c:33:c0:5d:8f:e0:df:1a:64:31:dc:a4:
50:a4:69:91:6c:0d:d2:b6:89:b8:85:dc:ce:70:66:e1:20:6e:
34:fe:97:e7:3c:eb:c6:21:fc:0f:e7:09:08:90:6f:d8:60:81:
32:5a:81:6a:37:1b:5e:7e:bd:ed:e0:b1:e2:73:13:89:0f:16:
7d:c8:5e:11:09:a3:19:04:af:98:da:b1:0c:e3:9a:9c:f8:46:
2a:1a:c3:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 12:09:28 2026 by rpki-client