
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4533cabb-4c46-3dd7-9036-e2d097c31b99.roa
File: 4533cabb-4c46-3dd7-9036-e2d097c31b99.roa (raw, json)
Hash identifier: iAL7yVVat5Enfe1pEjbN0gdXiTnQ2f9dg/u//q02+Ng=
Subject key identifier: 78:F8:8E:29:05:F0:24:87:DC:78:89:34:6A:2C:D1:98:F5:FD:B8:78
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DDE86B2C2E3BC57405AFF2C20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4533cabb-4c46-3dd7-9036-e2d097c31b99.roa
Signing time: Mon 18 May 2026 01:00:24 +0000
ROA not before: Mon 18 May 2026 01:00:24 +0000
ROA not after: Sun 16 Aug 2026 01:00:24 +0000
asID: 33657
IP address blocks: 68.85.170.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:de:86:b2:c2:e3:bc:57:40:5a:ff:2c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 18 01:00:24 2026 GMT
Not After : Aug 16 01:00:24 2026 GMT
Subject: CN=37edc66e-c671-4a76-b042-7b953c764aa9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:3a:a4:01:04:4c:e1:b7:02:18:64:cd:60:de:
bc:58:d9:c5:6e:e3:4d:78:a0:c3:76:d3:92:93:55:
30:19:93:0a:e2:08:08:55:a8:22:fe:96:ce:ba:9d:
a5:a1:ae:eb:a8:21:2c:81:49:5f:56:41:87:2d:41:
20:3f:3f:1e:1a:ed:f3:47:82:c2:e1:a4:ba:8b:8b:
c4:0e:c8:96:36:70:57:11:92:19:a5:4a:84:84:00:
3b:87:42:d3:53:c6:d3:60:96:0f:3b:ac:73:33:53:
e9:c3:df:c4:1f:4c:ca:12:ac:92:30:23:64:4a:ae:
c1:8b:61:26:8c:d4:ca:df:48:6b:0c:07:ed:fd:8f:
aa:1e:43:c7:4a:53:1d:bc:2c:99:72:c6:d6:cc:8b:
f4:3e:f2:89:cb:a8:ea:e3:f0:d6:f5:67:e5:de:8f:
66:36:ca:36:46:91:57:90:c8:5f:a0:e9:04:44:34:
67:ac:6c:e1:cf:58:73:10:ae:7a:35:ee:2d:89:24:
0b:35:bf:d5:08:2f:81:0e:fe:9a:fc:a7:20:61:97:
cc:c2:8b:fd:13:fb:59:a4:ab:ab:55:c8:2f:d0:4f:
d7:15:c7:81:25:29:d5:e9:17:28:3b:6d:e6:25:b4:
e8:a6:81:14:16:9f:a5:bd:fc:25:d7:cb:db:d9:d5:
1c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:F8:8E:29:05:F0:24:87:DC:78:89:34:6A:2C:D1:98:F5:FD:B8:78
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4533cabb-4c46-3dd7-9036-e2d097c31b99.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.85.170.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:1a:3b:3c:f8:c6:93:68:e3:71:bf:5d:41:d6:4f:9d:b9:79:
a7:22:8f:db:22:a4:0a:55:24:24:0d:f1:78:40:f2:c3:e1:d5:
0c:b5:20:74:01:50:78:0e:59:10:3e:ca:f9:3e:3a:16:69:be:
fa:20:46:bf:d7:30:49:2a:12:0c:0a:ce:c7:09:f3:55:2f:42:
3a:49:a2:2e:66:1f:48:8c:6a:cb:51:13:a6:1f:2b:ca:c2:13:
d2:6b:d7:5b:2a:0b:06:08:d3:f0:e5:b3:b0:91:60:4e:92:c4:
a5:08:a9:ea:22:bd:91:47:50:8e:0b:f7:90:59:ca:39:be:dd:
64:05:b4:23:ed:f3:7c:77:67:75:fe:0a:2a:b9:d7:7c:49:4d:
6e:ce:45:2f:04:93:7b:f9:06:e6:ac:df:2a:b2:6a:08:7a:76:
a2:d5:ac:38:a4:20:80:76:71:67:a0:43:e9:fc:5d:b4:4e:cd:
d4:04:78:2b:71:85:24:52:6d:bb:49:12:74:9a:19:6d:c9:01:
72:e4:8d:59:fe:fe:c5:ff:1d:85:ec:8b:6c:c9:59:eb:37:5a:
40:3f:de:09:b7:c3:db:d3:19:83:b8:24:ba:48:d2:23:d1:9e:
bd:40:9a:fb:5e:f0:3c:30:be:a2:32:08:ca:97:1c:d9:e7:b4:
aa:da:7a:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3ehrLC47xXQFr/LCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUxODAxMDAyNFoXDTI2MDgxNjAxMDAyNFowLzEtMCsGA1UEAxMk
MzdlZGM2NmUtYzY3MS00YTc2LWIwNDItN2I5NTNjNzY0YWE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjTqkAQRM4bcCGGTNYN68WNnFbuNNeKDDdtOS
k1UwGZMK4ggIVagi/pbOup2loa7rqCEsgUlfVkGHLUEgPz8eGu3zR4LC4aS6i4vE
DsiWNnBXEZIZpUqEhAA7h0LTU8bTYJYPO6xzM1Ppw9/EH0zKEqySMCNkSq7Bi2Em
jNTK30hrDAft/Y+qHkPHSlMdvCyZcsbWzIv0PvKJy6jq4/DW9Wfl3o9mNso2RpFX
kMhfoOkERDRnrGzhz1hzEK56Ne4tiSQLNb/VCC+BDv6a/KcgYZfMwov9E/tZpKur
Vcgv0E/XFceBJSnV6RcoO23mJbTopoEUFp+lvfwl18vb2dUcyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHj4jikF8CSH3HiJNGos0Zj1/bh4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNDUzM2NhYmItNGM0Ni0z
ZGQ3LTkwMzYtZTJkMDk3YzMxYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARFWqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFEaOzz4xpNo43G/XUHWT525eacij9sipApVJCQN8XhA8sPh1Qy1IHQB
UHgOWRA+yvk+OhZpvvogRr/XMEkqEgwKzscJ81UvQjpJoi5mH0iMastRE6YfK8rC
E9Jr11sqCwYI0/Dls7CRYE6SxKUIqeoivZFHUI4L95BZyjm+3WQFtCPt83x3Z3X+
Ciq513xJTW7ORS8Ek3v5Buas3yqyagh6dqLVrDikIIB2cWegQ+n8XbROzdQEeCtx
hSRSbbtJEnSaGW3JAXLkjVn+/sX/HYXsi2zJWes3WkA/3gm3w9vTGYO4JLpI0iPR
nr1Amvte8DwwvqIyCMqXHNnntKraenk=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:31:46 2026 by rpki-client