
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e71c24-aa49-39f5-9e05-177883a45bf5.roa
File: 11e71c24-aa49-39f5-9e05-177883a45bf5.roa (raw, json)
Hash identifier: QJYGfb1lFzqQ0y4PNl+uPxtESV2JFOiueYuzbPUbBqg=
Subject key identifier: 76:58:04:FA:1C:6A:EF:97:64:B8:92:5E:A1:96:06:C8:AE:EF:3C:32
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5BAF080643DA09B3CB6C90
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e71c24-aa49-39f5-9e05-177883a45bf5.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.54.212.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:af:08:06:43:da:09:b3:cb:6c:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=c673dd15-122c-4b51-9f51-6a8b3d6f675c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d5:ed:69:0c:ec:38:7a:6e:bd:53:72:d8:cf:
15:6c:db:fd:1f:8e:13:c6:28:32:02:cb:29:62:8e:
9d:db:5b:29:d4:0e:be:17:9e:96:85:fd:77:97:7e:
4d:2d:1b:df:1f:6f:44:0c:a8:fa:57:6b:61:7e:16:
4c:64:4c:ce:cc:e7:6f:c7:5e:c6:7e:21:c0:b9:c1:
23:1f:b2:b3:88:eb:55:71:4e:d5:f7:e6:1d:63:86:
ff:ac:70:5a:1e:5b:83:c7:ca:b1:5f:d0:1a:f2:71:
70:78:47:12:ca:b4:a4:0e:eb:88:11:d5:6f:3e:0e:
e1:0a:cc:7a:3a:c6:25:c0:60:77:65:ff:94:c5:6b:
8e:03:af:17:2f:67:c2:3d:a8:c7:86:97:87:0b:cc:
08:6d:fb:45:fa:27:57:02:7d:ce:31:b9:45:07:12:
2b:14:a2:be:d8:53:a8:e8:51:a5:1b:e0:d6:b3:f9:
3a:fa:01:f1:27:38:70:d3:61:61:22:4a:82:cd:87:
55:b7:ff:e7:7e:4f:09:a4:3d:bf:10:d5:16:72:31:
47:3c:fd:77:45:5e:65:9a:b1:d3:b7:d6:fa:08:6a:
d6:78:8a:83:7b:2c:44:e4:e8:0f:33:15:2b:54:04:
c3:bd:4c:87:48:d4:39:00:36:26:3e:18:02:c0:04:
dd:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:58:04:FA:1C:6A:EF:97:64:B8:92:5E:A1:96:06:C8:AE:EF:3C:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/11e71c24-aa49-39f5-9e05-177883a45bf5.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.212.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5f:18:38:27:7d:ea:59:5f:50:c8:b4:e8:3d:b8:7b:64:aa:80:
70:22:41:3c:8b:5a:8e:a8:cb:11:58:01:6d:92:94:c9:e3:2a:
98:07:86:6c:cc:4d:08:5a:db:fe:69:b8:6c:fb:58:4a:db:f6:
45:9e:5c:04:4a:d4:6b:51:0a:bc:9b:f3:d9:82:a3:eb:c4:4d:
ac:7d:93:36:df:29:b9:b1:8a:c8:88:9d:12:91:44:e5:a0:02:
29:02:df:fb:25:dd:1b:1c:30:46:d3:85:14:c9:72:6d:a8:73:
c7:35:38:da:02:c4:83:03:8d:dc:96:51:20:14:d1:9c:76:08:
f9:6c:86:a1:ca:32:a4:38:56:2f:4a:ad:0e:72:ea:58:21:c5:
63:65:57:e5:a4:54:45:24:f1:90:77:5a:2c:50:e2:7f:e4:e5:
ff:1c:2d:ac:d8:31:ad:96:ad:db:ab:ab:a2:12:8f:e4:6a:e1:
1a:05:1c:9c:93:23:95:5d:90:cc:c7:19:4a:12:84:03:f9:45:
fb:cf:d6:83:81:75:64:65:c1:a1:c8:83:cd:09:f9:1e:71:c1:
99:5d:4d:8a:3b:f7:e6:da:02:5b:06:15:6b:9c:18:f3:42:88:
63:9c:ec:93:7d:22:5f:b3:e6:84:99:76:f0:19:ec:ef:46:b0:
fd:f1:99:b3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW68IBkPaCbPLbJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YzY3M2RkMTUtMTIyYy00YjUxLTlmNTEtNmE4YjNkNmY2NzVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdXtaQzsOHpuvVNy2M8VbNv9H44TxigyAssp
Yo6d21sp1A6+F56Whf13l35NLRvfH29EDKj6V2thfhZMZEzOzOdvx17GfiHAucEj
H7KziOtVcU7V9+YdY4b/rHBaHluDx8qxX9Aa8nFweEcSyrSkDuuIEdVvPg7hCsx6
OsYlwGB3Zf+UxWuOA68XL2fCPajHhpeHC8wIbftF+idXAn3OMblFBxIrFKK+2FOo
6FGlG+DWs/k6+gHxJzhw02FhIkqCzYdVt//nfk8JpD2/ENUWcjFHPP13RV5lmrHT
t9b6CGrWeIqDeyxE5OgPMxUrVATDvUyHSNQ5ADYmPhgCwATdsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHZYBPocau+XZLiSXqGWBsiu7zwyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMTFlNzFjMjQtYWE0OS0z
OWY1LTllMDUtMTc3ODgzYTQ1YmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDbUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF8YOCd96llfUMi06D24e2SqgHAiQTyLWo6oyxFYAW2SlMnjKpgHhmzM
TQha2/5puGz7WErb9kWeXARK1GtRCryb89mCo+vETax9kzbfKbmxisiInRKRROWg
AikC3/sl3RscMEbThRTJcm2oc8c1ONoCxIMDjdyWUSAU0Zx2CPlshqHKMqQ4Vi9K
rQ5y6lghxWNlV+WkVEUk8ZB3WixQ4n/k5f8cLazYMa2Wrdurq6ISj+Rq4RoFHJyT
I5VdkMzHGUoShAP5RfvP1oOBdWRlwaHIg80J+R5xwZldTYo79+baAlsGFWucGPNC
iGOc7JN9Il+z5oSZdvAZ7O9GsP3xmbM=
-----END CERTIFICATE-----
Generated at Mon Mar 2 06:37:43 2026 by rpki-client