
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/006c5ec7-2953-3849-aaa9-eeaf7c671eee.roa
File: 006c5ec7-2953-3849-aaa9-eeaf7c671eee.roa (raw, json)
Hash identifier: pUXfWuf4idKqHdvzD5iY+MhDlYKy7uvzT10csl+l2pA=
Subject key identifier: B7:6E:E4:4C:31:3A:90:3A:2F:BD:30:CE:B8:F4:70:0A:D7:CC:D6:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58191DD73CA0B9ADBFA5A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/006c5ec7-2953-3849-aaa9-eeaf7c671eee.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.45.54.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:19:1d:d7:3c:a0:b9:ad:bf:a5:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=ac9bbc9d-c54f-4bd2-99f0-3c68df0d04c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:69:1c:d8:05:27:9d:b6:25:70:93:f2:de:14:
85:2b:c6:d8:4e:8f:0f:b7:5a:62:82:18:1d:5e:cd:
e6:16:0a:8b:8b:a5:a7:76:37:75:f6:12:aa:4b:0d:
5f:74:9a:2d:c6:17:03:89:f3:d5:19:67:01:b7:48:
c5:ef:db:24:ba:2e:6e:a7:18:81:65:c8:d6:37:40:
1a:7a:1e:29:3a:da:70:f0:7d:fc:9b:b6:7e:72:54:
40:c3:cb:9f:e3:b3:74:8b:21:af:b4:d2:95:26:2f:
e1:fe:3a:c6:e6:dc:2f:68:b2:13:e3:5a:77:02:52:
7d:21:b7:7f:3c:50:4c:fe:6d:1a:81:44:73:84:6f:
bc:f3:29:da:04:33:85:f9:af:80:7e:1e:b0:e7:9f:
8f:93:55:cb:22:99:aa:77:53:7c:99:7c:41:4e:bc:
d4:44:fd:4f:e8:18:8c:b4:b7:dd:34:dd:cd:8c:06:
ad:bf:17:32:c8:3b:51:f3:33:50:54:12:c5:d0:c7:
73:d8:dd:09:b5:bc:5f:aa:64:2b:e6:ac:8b:0d:3c:
45:82:6a:a8:d0:c2:30:6a:34:4a:7e:e4:bc:e6:1f:
a8:14:d4:c2:86:ba:94:a5:f3:46:1a:d2:ec:8b:74:
fa:87:55:ea:2f:a8:60:fc:7e:fe:b9:06:2a:f0:ff:
1e:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:6E:E4:4C:31:3A:90:3A:2F:BD:30:CE:B8:F4:70:0A:D7:CC:D6:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/006c5ec7-2953-3849-aaa9-eeaf7c671eee.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.45.54.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:f3:ce:bb:62:d5:0b:ef:73:f1:41:ca:50:64:d7:2a:3c:55:
e5:ac:b5:49:39:aa:c6:b6:b5:d7:5f:a5:99:3f:38:b3:88:ad:
a1:f0:e8:5e:8c:6a:a2:a7:6e:8d:6a:ce:3e:5c:51:ad:aa:d0:
8d:ed:10:aa:2b:47:c5:5a:bb:bd:b6:4b:8f:06:a7:82:75:fd:
bf:e5:6d:48:96:5e:50:30:5c:22:c1:ff:76:62:bd:71:c5:b3:
af:5f:4f:96:d6:ef:79:21:96:34:86:47:52:13:78:25:35:7a:
1a:88:41:b1:1a:4b:ca:11:26:05:04:b7:5f:7e:c5:5b:7a:45:
49:0c:78:39:ce:08:ec:4a:61:4a:47:82:1d:36:f4:f8:59:97:
99:12:eb:dc:01:27:f5:67:da:52:36:11:56:cb:b7:9b:74:af:
c5:01:d7:31:69:af:5a:db:7e:7a:01:9c:e7:b0:cd:26:84:0e:
88:ae:2a:6b:47:a4:82:ab:51:e8:8c:5b:f3:8c:96:25:d2:f4:
df:41:50:81:20:1d:da:91:dd:e8:b3:9d:46:77:58:09:04:85:
b6:e7:ee:46:5b:0c:e6:dc:56:bb:40:78:64:76:45:ca:91:9b:
53:07:e7:84:bf:1a:06:a0:68:bc:d1:5c:ee:fb:82:73:cd:03:
24:84:36:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuWBkd1zygua2/paAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YWM5YmJjOWQtYzU0Zi00YmQyLTk5ZjAtM2M2OGRmMGQwNGM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmkc2AUnnbYlcJPy3hSFK8bYTo8Pt1pighgd
Xs3mFgqLi6Wndjd19hKqSw1fdJotxhcDifPVGWcBt0jF79skui5upxiBZcjWN0Aa
eh4pOtpw8H38m7Z+clRAw8uf47N0iyGvtNKVJi/h/jrG5twvaLIT41p3AlJ9Ibd/
PFBM/m0agURzhG+88ynaBDOF+a+Afh6w55+Pk1XLIpmqd1N8mXxBTrzURP1P6BiM
tLfdNN3NjAatvxcyyDtR8zNQVBLF0Mdz2N0JtbxfqmQr5qyLDTxFgmqo0MIwajRK
fuS85h+oFNTChrqUpfNGGtLsi3T6h1XqL6hg/H7+uQYq8P8e7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLdu5EwxOpA6L70wzrj0cArXzNZbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMDA2YzVlYzctMjk1My0z
ODQ5LWFhYTktZWVhZjdjNjcxZWVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRC02MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMPzzrti1Qvvc/FBylBk1yo8VeWstUk5qsa2tddfpZk/OLOIraHw6F6M
aqKnbo1qzj5cUa2q0I3tEKorR8Vau722S48Gp4J1/b/lbUiWXlAwXCLB/3ZivXHF
s69fT5bW73khljSGR1ITeCU1ehqIQbEaS8oRJgUEt19+xVt6RUkMeDnOCOxKYUpH
gh029PhZl5kS69wBJ/Vn2lI2EVbLt5t0r8UB1zFpr1rbfnoBnOewzSaEDoiuKmtH
pIKrUeiMW/OMliXS9N9BUIEgHdqR3eiznUZ3WAkEhbbn7kZbDObcVrtAeGR2RcqR
m1MH54S/GgagaLzRXO77gnPNAySENh0=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:39:16 2026 by rpki-client