
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05678b9c-e71e-3f30-93ad-8acc7288de8f.roa
File: 05678b9c-e71e-3f30-93ad-8acc7288de8f.roa (raw, json)
Hash identifier: Dlro/luxOpTVMeePZYbFSUIkcjNOoTLVXQBU+MECKXs=
Subject key identifier: 1B:8D:3E:AE:95:8F:1D:B9:2E:BA:E6:65:3B:24:D3:4D:37:4D:04:68
Certificate issuer: /CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Certificate serial: 010D0C9F4328584F4112DE42A2ED6D98F3514398
Authority key identifier: C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05678b9c-e71e-3f30-93ad-8acc7288de8f.roa
Signing time: Tue 22 Sep 2026 01:00:12 +0000
ROA not before: Tue 22 Sep 2026 01:00:12 +0000
ROA not after: Mon 21 Dec 2026 02:00:12 +0000
asID: 22773
IP address blocks: 68.231.42.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 02:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:41:12:de:42:a2:ed:6d:98:f3:51:43:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=90dcf2c0-6606-4bd9-b445-77b183ef2ff4
Validity
Not Before: Sep 22 01:00:12 2026 GMT
Not After : Dec 21 02:00:12 2026 GMT
Subject: CN=6888a639-254c-4337-9218-54656e2bfc20
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:90:ab:d1:29:ce:9e:7e:d5:73:13:8f:ca:e8:
5d:fa:f6:b9:50:91:6f:a4:1c:d7:6c:4a:d2:b2:a0:
53:5a:ff:2f:63:0e:05:e7:8f:4a:de:e1:04:a0:72:
ec:9b:4a:77:12:e5:63:24:a6:69:97:00:e7:d3:48:
20:0f:ee:42:6d:97:f0:f0:74:90:f1:03:0b:09:6a:
4b:bb:82:6c:22:f3:34:2d:40:bb:d3:5e:f8:f3:4a:
77:34:f3:7a:a0:7a:06:c4:51:0b:14:e8:fd:60:90:
e4:04:b1:76:a5:26:91:33:52:38:63:c8:0a:f2:9e:
1d:1a:33:14:33:1b:43:59:34:8e:f3:66:de:fe:9f:
e7:d8:6b:08:93:98:c0:98:9b:74:26:74:fd:60:22:
46:0e:66:00:a1:f5:3e:46:21:76:21:4a:6e:bc:86:
16:4e:78:f4:d4:65:2d:55:44:61:b0:3c:32:a5:21:
d1:f6:61:09:e9:37:f2:0a:9e:81:1a:be:f4:b2:e5:
b0:7f:ec:03:86:24:1a:61:d3:b9:20:3e:a3:cf:81:
21:72:e5:cd:41:82:7f:6d:9d:47:ab:35:23:e2:d6:
13:f1:5d:1a:7b:d9:41:60:bc:87:b2:4f:57:f5:45:
1b:41:f1:5d:b0:f8:93:ba:dc:07:a7:c6:0c:e4:3b:
e6:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:8D:3E:AE:95:8F:1D:B9:2E:BA:E6:65:3B:24:D3:4D:37:4D:04:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/05678b9c-e71e-3f30-93ad-8acc7288de8f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.crl
X509v3 Authority Key Identifier:
keyid:C7:2E:99:01:92:75:44:C7:EF:03:5D:39:BC:BE:17:F0:79:D5:C1:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/90dcf2c0-6606-4bd9-b445-77b183ef2ff4.cer
sbgp-ipAddrBlock: critical
IPv4:
68.231.42.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:50:d6:6d:3e:ec:69:f7:80:1d:3e:07:56:57:7b:89:50:df:
51:dc:27:55:fc:33:ca:d4:88:59:9c:82:1a:9e:c1:43:05:de:
db:19:7d:43:f2:5a:58:4e:22:c6:d7:a2:9b:d1:b6:bd:16:d0:
d7:96:55:e2:1d:dc:c5:4c:79:5d:61:fa:63:be:d0:ea:7f:83:
98:a2:f0:84:d6:1c:ee:10:ca:7c:9c:76:6b:3e:41:51:fb:0e:
76:29:4c:fb:6b:47:4d:55:b5:75:bb:72:13:d7:53:b6:94:28:
3d:38:30:25:f2:77:7c:b7:7f:78:52:45:64:be:db:24:7d:a2:
0c:9b:89:df:51:cb:4a:11:62:88:4b:26:28:43:ad:b0:d6:91:
11:80:62:69:3f:91:78:ce:84:c1:81:0e:47:ed:3f:b8:45:c2:
fa:7f:2b:a8:74:c5:d2:a4:89:3d:7e:42:0a:30:ea:a8:6e:1f:
28:55:ec:15:e2:d9:30:eb:93:e0:aa:3f:c2:bf:b1:86:71:b4:
7c:71:08:e7:00:91:0d:2c:98:06:90:c1:26:7a:a2:24:d2:43:
70:eb:16:e8:9d:36:7c:c5:41:85:b5:48:80:f2:4f:01:21:dd:
50:d1:9f:ba:42:b0:4e:25:3a:fe:f1:30:f9:1f:37:12:d6:81:
87:11:86:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 22:18:33 2026 by rpki-client