
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/540a2df3-0215-38a8-a937-7972678893ab.roa
File: 540a2df3-0215-38a8-a937-7972678893ab.roa (raw, json)
Hash identifier: Mx7MRN+43yBFNnNorVtMv4vM/TeDplDPIYH9EJ7hx3Y=
Subject key identifier: 68:D5:07:ED:F0:54:52:7C:BA:5B:C5:23:2C:2B:08:92:56:05:5F:8E
Certificate issuer: /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial: 010D0C9F4328584F51D2981CC81415BB832DAAC0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/540a2df3-0215-38a8-a937-7972678893ab.roa
Signing time: Mon 28 Sep 2026 01:00:12 +0000
ROA not before: Mon 28 Sep 2026 01:00:12 +0000
ROA not after: Sun 27 Dec 2026 02:00:12 +0000
asID: 81
IP address blocks: 192.101.22.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:51:d2:98:1c:c8:14:15:bb:83:2d:aa:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Validity
Not Before: Sep 28 01:00:12 2026 GMT
Not After : Dec 27 02:00:12 2026 GMT
Subject: CN=6ff04ff1-7f8c-448d-bd75-6edc22b650a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:e8:38:da:81:69:93:0b:2b:bb:c5:a3:9e:b6:
d9:c6:35:38:85:61:44:00:22:6a:ee:50:87:50:30:
08:e0:56:3c:28:44:f5:ca:71:04:12:a9:cc:84:2c:
94:93:ff:df:79:c8:02:9a:b8:25:5e:fc:85:1a:b3:
3a:2a:53:38:f3:e9:43:d2:47:13:02:47:35:40:7c:
83:1c:c1:5b:19:e4:8d:7f:d6:17:b4:39:73:f1:13:
2d:27:eb:62:2e:75:9f:52:ed:32:4c:f9:a9:0f:42:
5b:08:5e:84:83:db:73:83:52:42:d5:85:64:15:20:
89:97:5d:ac:fb:e3:3e:f5:2a:2a:a2:0f:52:ed:b6:
ba:fe:5b:49:2c:29:9d:dc:8a:fc:bb:f7:bb:fb:fb:
34:c0:12:df:af:34:62:15:07:7d:30:ec:9c:f5:b5:
37:c6:63:34:f5:a4:96:8c:a5:25:13:a2:a5:a7:4b:
a0:0e:b7:ce:ac:fb:7b:cf:ce:bc:f6:04:69:81:0c:
0e:3a:e6:4f:06:06:a2:0f:04:ce:01:78:72:eb:5b:
7a:76:11:41:74:02:18:77:76:27:d8:70:b9:1c:5f:
a4:30:22:e0:b4:70:01:a8:5e:02:db:bb:2c:ff:31:
f1:8e:00:11:6c:93:5b:58:71:53:57:4a:2b:1c:28:
c9:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D5:07:ED:F0:54:52:7C:BA:5B:C5:23:2C:2B:08:92:56:05:5F:8E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/540a2df3-0215-38a8-a937-7972678893ab.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
X509v3 Authority Key Identifier:
keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
sbgp-ipAddrBlock: critical
IPv4:
192.101.22.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
76:17:c6:8e:63:1d:c7:52:38:7d:17:c0:7c:59:4e:a8:c6:35:
d3:e4:16:67:29:dd:79:cb:f5:04:69:c1:0a:1d:60:fa:89:a9:
5e:80:d2:e6:42:39:a2:5a:09:d7:58:20:3f:30:b7:6a:67:71:
a6:73:d8:7c:25:65:aa:ba:ac:f7:f6:2e:69:1b:7e:18:40:b1:
5f:67:b7:9a:f7:49:45:e6:7c:09:36:6a:99:fa:8b:8a:ee:a5:
9d:df:c3:33:dd:bd:06:7f:2b:15:fa:10:60:88:6c:88:21:2e:
ab:fc:dd:df:a4:33:60:af:3a:09:35:e1:b9:97:c7:c7:07:30:
0d:49:c3:9f:2c:b0:f2:9e:2f:86:6f:48:e7:64:62:f0:11:93:
d0:6e:fa:d0:aa:07:a0:88:8e:97:dc:c0:90:99:73:94:34:04:
d6:ee:71:e2:34:07:ea:f1:30:d5:7b:b3:53:a7:0a:78:4b:9b:
75:3b:bb:62:fe:43:5a:df:6f:7f:64:01:ec:41:55:99:b6:f1:
ff:f8:fc:72:01:ce:58:0e:5e:1a:ce:38:d9:78:aa:e2:24:46:
8a:d6:cd:e3:9b:30:89:0b:35:62:c4:88:4a:d7:2d:fd:6b:eb:
3c:9e:64:6b:5f:2a:d8:03:ea:ca:e5:81:2d:30:df:64:42:b3:
5d:36:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 28 06:06:47 2026 by rpki-client