
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/c862d0d8-22ea-354a-a9d4-832f5692fe93.roa
File: c862d0d8-22ea-354a-a9d4-832f5692fe93.roa (raw, json)
Hash identifier: HnnWjM4pe0TOmQDeR58jHoF2wwYnufP3q9Wb8ZLrc0s=
Subject key identifier: 91:27:9E:3C:5B:0B:36:22:67:A0:38:82:0A:4D:63:A1:F4:05:D4:5A
Certificate issuer: /CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575
Certificate serial: 010D0C9F4328584F4987F154DED4841CEF9F0C00
Authority key identifier: DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/c862d0d8-22ea-354a-a9d4-832f5692fe93.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 398284
IP address blocks: 168.158.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 23:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:87:f1:54:de:d4:84:1c:ef:9f:0c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c7b6e18-00da-4da1-9f2c-19421fa6a575
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=62382a84-4bd5-48ae-b6f0-ce3657b5b2d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:7f:57:5a:fa:90:d4:b1:b4:e6:68:4a:12:9f:
58:f8:28:e2:68:de:32:17:11:f8:5c:17:56:72:bc:
85:d9:fd:90:65:c7:7f:47:64:d7:dc:39:f4:f6:81:
e4:d8:ea:44:49:c3:70:af:47:8f:e3:5c:78:4e:bf:
1b:e4:06:87:7e:ce:a4:d9:1b:cb:1c:f8:3d:69:db:
4c:1c:65:dc:07:31:14:21:94:4c:37:b1:e0:d7:ec:
f9:52:81:57:a5:e3:83:a6:d3:d3:42:49:f2:fe:fa:
20:26:6b:07:2f:b1:a7:b5:ab:5f:f5:c3:dc:9a:59:
48:ed:80:61:62:12:cc:a7:cc:4a:f3:ff:ce:91:f8:
18:c7:48:75:16:3b:89:bb:75:a9:e2:71:fa:66:a3:
b9:12:3a:0e:f4:93:f3:8c:8d:4f:89:ce:ab:2a:05:
a9:52:e5:51:04:4e:d9:37:6c:ee:6f:63:67:8c:0c:
cf:09:ee:86:63:40:53:18:13:b1:e1:bc:27:c7:27:
d9:59:67:29:c4:40:d3:8d:95:31:43:52:d1:d9:ae:
9a:dd:b1:94:17:59:c2:6f:3a:ab:2f:c2:33:0e:d3:
1e:ec:27:75:43:93:83:76:09:40:b4:19:9e:fc:3b:
c5:90:36:fa:49:58:84:79:a3:18:08:ae:db:b7:ea:
1d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:27:9E:3C:5B:0B:36:22:67:A0:38:82:0A:4D:63:A1:F4:05:D4:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/c862d0d8-22ea-354a-a9d4-832f5692fe93.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575/3c7b6e18-00da-4da1-9f2c-19421fa6a575.crl
X509v3 Authority Key Identifier:
keyid:DF:7B:54:60:4D:B4:E0:CA:A8:46:C2:52:D4:AB:B5:22:2B:8F:29:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3c7b6e18-00da-4da1-9f2c-19421fa6a575.cer
sbgp-ipAddrBlock: critical
IPv4:
168.158.224.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:94:3e:af:aa:31:9d:98:cc:6d:ec:68:09:62:bf:9d:d0:7c:
f7:ab:84:59:87:5c:bd:2f:1b:86:92:f7:32:71:94:ea:48:17:
cd:ef:02:46:8c:06:77:32:a0:1b:d0:ca:8a:47:fd:73:b8:46:
e1:8a:1d:2e:ff:11:c9:ff:0d:49:bc:af:82:9a:e6:89:23:8f:
b2:58:fc:0a:a9:f1:9c:a8:85:07:5b:93:59:56:e8:66:54:df:
5d:92:b8:4d:3e:ab:c1:3f:0c:d3:5d:90:1c:1b:99:62:a0:e2:
bc:bd:fc:94:3d:af:76:e4:0d:eb:36:90:32:75:4e:1d:16:2b:
52:b1:2c:4b:3e:90:7f:f3:9a:31:45:d5:75:c5:fb:a7:ca:69:
96:e3:4a:71:70:e7:28:11:cd:91:6c:37:ac:b8:2d:a8:b5:de:
51:7a:0a:a9:2c:bb:af:6c:7d:0e:95:78:15:8e:9d:8d:5d:5e:
88:44:60:54:84:8c:39:0a:1e:66:e1:ae:97:c5:20:e1:5e:ab:
ba:ed:0e:f3:e3:42:81:99:38:c7:84:cf:c0:9c:1a:47:cf:a1:
dd:12:81:0a:bf:5e:3d:f2:6e:e7:ee:a7:56:26:f9:a7:2b:b9:
30:4f:89:28:c4:6b:7a:d4:46:a0:d3:75:97:d6:9e:bb:da:c7:
c2:db:fc:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 21:02:24 2026 by rpki-client