
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa
File: 0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa (raw, json)
Hash identifier: 84rMsi9rF5qqKLWeTYQb6/EOBrxFkFpmle7xm6qmKPA=
Subject key identifier: 02:50:A6:C7:20:70:19:AC:88:B1:60:C9:15:ED:AF:20:0A:DA:A8:3B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119E940A5F2D948658F3EF00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33659
IP address blocks: 68.83.0.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9e:94:0a:5f:2d:94:86:58:f3:ef:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=06bf95ee-1c54-4855-b51f-293e4f4850e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:5c:be:17:30:86:e3:18:fd:5f:2f:c3:f7:b4:
32:aa:5b:62:8c:eb:1d:87:fe:03:04:41:e5:ed:7a:
e6:c4:a9:94:02:9a:49:47:ab:d6:6c:50:74:bb:4f:
a2:22:a7:42:39:37:fe:ad:ae:75:14:1f:2b:5d:a6:
76:53:91:76:f9:1a:b9:02:1e:dd:61:91:09:4e:c7:
90:eb:b3:2d:03:88:79:59:0e:7b:ac:fd:c6:d0:6f:
37:df:8a:4f:51:6e:48:fd:ba:8b:cf:cd:31:6c:ac:
79:36:f8:09:4a:3e:51:73:9e:3a:01:a0:1e:2c:e7:
9f:de:e9:ec:cb:cb:a3:2d:97:58:74:ac:69:08:7e:
66:09:b6:b6:eb:ce:81:28:0a:ac:54:34:5b:85:a6:
d8:9b:f8:74:0f:46:2a:34:f7:f9:2f:9e:bc:9a:0e:
14:51:f9:71:02:7e:79:a7:63:91:1a:11:35:dd:e6:
3d:ce:a3:1f:3c:f2:c1:c1:3b:db:1b:de:ff:06:92:
fc:24:41:76:40:eb:3e:a6:85:0e:19:a4:cb:27:71:
e6:a1:35:74:c4:ac:e1:07:2d:1c:8f:02:b8:4b:eb:
e5:c5:91:2f:04:44:69:07:8c:bc:76:1b:1c:f9:70:
5f:b9:a5:39:bc:f9:f4:a5:a0:77:a5:36:4c:2c:41:
4a:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:50:A6:C7:20:70:19:AC:88:B1:60:C9:15:ED:AF:20:0A:DA:A8:3B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0c9aafc9-6516-3aa2-9c4c-e022c5b4493c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.83.0.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1b:93:17:e0:f8:19:4f:6b:b4:55:78:42:b4:02:26:ba:76:64:
57:c6:22:86:98:a9:6b:94:12:19:08:f8:ea:8f:fe:ea:ed:6d:
ad:a8:22:70:5f:8b:bd:3e:33:af:49:1d:fd:23:1b:29:4c:87:
08:d1:19:c0:84:c0:c5:66:a3:0e:71:11:01:cc:6c:95:8c:26:
09:70:91:fa:ff:6e:40:5f:08:52:90:d1:ac:23:b5:cd:82:2e:
74:2e:67:33:62:f0:3e:51:1c:33:2f:9c:7c:29:9f:30:2c:99:
27:72:1b:b0:b8:90:7b:0e:86:32:b5:1f:12:3f:74:c4:22:db:
42:12:1e:a8:6a:5c:cd:fb:ba:3c:7d:26:a4:23:05:93:3a:0b:
97:c0:79:e6:33:c4:71:84:f8:90:b1:ae:7f:72:b0:3a:76:53:
a0:21:85:d6:47:6a:1c:3b:ca:57:a3:43:d3:d4:79:40:29:0c:
11:4f:6d:16:37:aa:75:e6:3a:99:f3:73:a8:e1:79:1b:89:d6:
57:79:fd:a3:87:2e:ed:0e:23:06:9b:d7:c7:a9:2e:a6:1b:fb:
92:da:47:79:1e:f6:cf:b4:f9:24:64:2b:5d:a1:6f:69:c7:5b:
f6:a1:42:06:1f:2b:80:00:a8:65:e6:92:3c:47:36:d6:f6:b0:
cd:c2:31:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE8RnpQKXy2Uhljz7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDZiZjk1ZWUtMWM1NC00ODU1LWI1MWYtMjkzZTRmNDg1MGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkly+FzCG4xj9Xy/D97QyqltijOsdh/4DBEHl
7XrmxKmUAppJR6vWbFB0u0+iIqdCOTf+ra51FB8rXaZ2U5F2+Rq5Ah7dYZEJTseQ
67MtA4h5WQ57rP3G0G8334pPUW5I/bqLz80xbKx5NvgJSj5Rc546AaAeLOef3uns
y8ujLZdYdKxpCH5mCba2686BKAqsVDRbhabYm/h0D0YqNPf5L568mg4UUflxAn55
p2ORGhE13eY9zqMfPPLBwTvbG97/BpL8JEF2QOs+poUOGaTLJ3HmoTV0xKzhBy0c
jwK4S+vlxZEvBERpB4y8dhsc+XBfuaU5vPn0paB3pTZMLEFKaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJQpscgcBmsiLFgyRXtryAK2qg7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGM5YWFmYzktNjUxNi0z
YWEyLTljNGMtZTAyMmM1YjQ0OTNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRFMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABuTF+D4GU9rtFV4QrQCJrp2ZFfGIoaYqWuUEhkI+OqP/urtba2oInBf
i70+M69JHf0jGylMhwjRGcCEwMVmow5xEQHMbJWMJglwkfr/bkBfCFKQ0awjtc2C
LnQuZzNi8D5RHDMvnHwpnzAsmSdyG7C4kHsOhjK1HxI/dMQi20ISHqhqXM37ujx9
JqQjBZM6C5fAeeYzxHGE+JCxrn9ysDp2U6AhhdZHahw7ylejQ9PUeUApDBFPbRY3
qnXmOpnzc6jheRuJ1ld5/aOHLu0OIwab18epLqYb+5LaR3ke9s+0+SRkK12hb2nH
W/ahQgYfK4AAqGXmkjxHNtb2sM3CMZk=
-----END CERTIFICATE-----
Generated at Tue Sep 22 09:04:51 2026 by rpki-client