
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4133bf93-c44a-3770-983c-eef6abfaca5b.roa
File: 4133bf93-c44a-3770-983c-eef6abfaca5b.roa (raw, json)
Hash identifier: JXZrpcSRUyLpDyUx9BtX2BGw6pyIbg+ye+hrNI9hE54=
Subject key identifier: 59:4B:8E:96:2C:E1:21:30:24:43:34:E5:61:9F:78:F2:3E:9D:E9:76
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78BC940EA0C10BF971A59C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4133bf93-c44a-3770-983c-eef6abfaca5b.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 22909
IP address blocks: 68.54.192.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8b:c9:40:ea:0c:10:bf:97:1a:59:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=4d15c069-47f4-4fde-a76a-bcaa16243a14
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:0c:c1:14:f0:12:51:32:5e:39:0a:77:5d:56:
8c:7d:81:6a:2d:b6:df:4d:5c:5d:85:52:05:38:7b:
63:12:89:31:ed:d9:82:19:81:8c:f6:3f:44:e1:f2:
16:f9:cc:23:17:87:0a:c4:93:15:2f:43:c7:17:35:
cf:00:09:0b:2b:1b:9c:97:0e:fc:3d:a0:10:4a:7a:
87:eb:70:b7:d0:f7:55:61:ec:39:77:2a:de:cb:15:
b0:fd:10:38:80:35:fd:08:b8:d3:e9:d2:8a:50:fc:
4f:60:b0:be:d1:93:86:75:c1:ff:ec:a7:44:72:19:
42:38:04:38:cb:f4:18:22:75:53:c3:7c:aa:4b:13:
70:e2:b0:dd:ed:2d:fc:99:fe:ad:8e:f0:47:8a:56:
b5:12:61:d6:d5:7c:7e:c2:a6:76:11:d9:07:6a:d3:
0b:49:7d:d3:e2:a3:bb:2a:0b:fd:a2:cf:0e:08:0a:
ea:07:6c:cd:36:42:fd:03:24:dd:d5:ad:48:85:b1:
7b:d3:fc:f1:6e:3c:1b:34:ea:ba:2f:9f:62:7f:e6:
1e:83:a8:04:98:74:7b:f9:23:8f:1b:78:9c:fa:02:
82:bf:be:a2:9e:90:de:dd:e0:bf:32:79:c9:00:0f:
17:52:52:71:96:33:b4:91:e4:13:48:28:59:84:6e:
b3:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:4B:8E:96:2C:E1:21:30:24:43:34:E5:61:9F:78:F2:3E:9D:E9:76
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4133bf93-c44a-3770-983c-eef6abfaca5b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.54.192.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:3e:53:7d:a2:ad:35:20:16:a0:5f:72:80:f8:23:23:37:78:
c0:07:01:be:4d:bb:d8:89:9d:b6:5a:c4:fb:96:0b:3b:30:c6:
0f:1d:1e:43:1f:e0:fd:95:29:34:c8:b5:14:b6:e7:80:c3:8d:
94:6c:5a:a1:dc:0f:ea:10:36:b5:03:de:1d:01:af:34:31:10:
af:c0:83:92:33:c0:59:34:35:46:ef:cb:eb:bd:39:7a:cc:d8:
63:bf:8b:12:76:d4:9e:e9:ba:24:cc:21:f6:b3:a1:c1:bc:59:
7e:41:dd:d4:51:6a:a8:62:17:73:c3:16:a8:84:5e:e0:a7:8d:
3b:4a:50:d3:0e:a9:7e:1c:c6:39:92:08:68:5c:e3:99:6d:95:
f5:dd:fc:54:0f:69:e5:2b:50:8f:38:78:b7:11:3d:6d:41:55:
23:75:8c:45:6d:b1:ec:5d:4c:45:a0:c3:2f:35:7a:07:b7:f6:
c7:4d:37:93:fa:92:68:75:98:8f:e3:03:56:5e:d5:46:d1:3d:
ae:90:45:6b:02:ee:91:f0:f6:c1:7d:64:1e:55:86:9c:09:03:
a3:ca:5b:cf:79:fe:2f:a3:d9:0b:b8:de:72:cc:9b:84:f0:bc:
b6:22:1d:eb:f0:de:24:ff:c1:1c:b6:42:e9:0b:93:c3:82:7a:
b4:98:7c:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni8lA6gwQv5caWcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NGQxNWMwNjktNDdmNC00ZmRlLWE3NmEtYmNhYTE2MjQzYTE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiAzBFPASUTJeOQp3XVaMfYFqLbbfTVxdhVIF
OHtjEokx7dmCGYGM9j9E4fIW+cwjF4cKxJMVL0PHFzXPAAkLKxuclw78PaAQSnqH
63C30PdVYew5dyreyxWw/RA4gDX9CLjT6dKKUPxPYLC+0ZOGdcH/7KdEchlCOAQ4
y/QYInVTw3yqSxNw4rDd7S38mf6tjvBHila1EmHW1Xx+wqZ2EdkHatMLSX3T4qO7
Kgv9os8OCArqB2zNNkL9AyTd1a1IhbF70/zxbjwbNOq6L59if+Yeg6gEmHR7+SOP
G3ic+gKCv76inpDe3eC/MnnJAA8XUlJxljO0keQTSChZhG6z0QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFlLjpYs4SEwJEM05WGfePI+nel2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDEzM2JmOTMtYzQ0YS0z
NzcwLTk4M2MtZWVmNmFiZmFjYTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQERDbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFI+U32irTUgFqBfcoD4IyM3eMAHAb5Nu9iJnbZaxPuWCzswxg8dHkMf
4P2VKTTItRS254DDjZRsWqHcD+oQNrUD3h0BrzQxEK/Ag5IzwFk0NUbvy+u9OXrM
2GO/ixJ21J7puiTMIfazocG8WX5B3dRRaqhiF3PDFqiEXuCnjTtKUNMOqX4cxjmS
CGhc45ltlfXd/FQPaeUrUI84eLcRPW1BVSN1jEVtsexdTEWgwy81ege39sdNN5P6
kmh1mI/jA1Ze1UbRPa6QRWsC7pHw9sF9ZB5VhpwJA6PKW895/i+j2Qu43nLMm4Tw
vLYiHevw3iT/wRy2QukLk8OCerSYfJg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 13:29:29 2026 by rpki-client