
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a837b4-b1d5-373e-8574-6ae98d78e616.roa
File: 53a837b4-b1d5-373e-8574-6ae98d78e616.roa (raw, json)
Hash identifier: yNW2o/J51GkL9x4KMFM9Rsl2D8l8IEH/CrqpsbVX5kA=
Subject key identifier: B6:28:7C:FA:66:3C:DE:67:97:F0:AB:41:35:9D:57:7C:26:52:05:AC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB154B0A3C5410214AFA00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a837b4-b1d5-373e-8574-6ae98d78e616.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.43.88.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:15:4b:0a:3c:54:10:21:4a:fa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=21db2ac5-cd83-4150-a01c-0a2f83abd2ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:7d:2b:9d:89:7b:a6:2b:b3:14:76:ea:c7:80:
47:20:7d:e5:9b:17:38:26:95:a9:37:6f:12:6b:64:
df:1d:0d:5d:be:64:1c:2c:ea:d3:94:cd:4e:0e:c0:
b6:4c:f3:f8:93:d4:f2:5e:30:ea:63:6b:b0:72:8d:
ee:9d:2c:c5:80:b4:6c:2b:75:09:38:5c:d5:b0:f7:
b1:6f:e6:7e:9f:c6:b5:8d:75:04:06:b5:da:9b:a3:
d6:37:cf:89:16:f3:fb:af:8b:ba:48:27:50:a0:08:
f7:58:af:db:4f:82:38:92:2e:c6:15:35:43:e1:27:
8f:8f:30:65:ae:70:9f:15:a7:6f:ff:d4:f6:cc:c9:
95:fc:41:7f:3e:b3:47:db:68:c7:dd:ab:28:e7:c4:
32:0d:dc:fc:07:84:26:55:d6:a0:d9:cb:b5:e3:a3:
36:e0:5e:0d:04:24:31:c4:b3:e1:da:71:d2:a8:b4:
da:f6:a1:06:3d:63:7b:66:e7:bd:c3:4b:30:b5:23:
d8:e8:87:d9:57:84:c7:ed:ea:22:f0:98:e2:fe:d2:
08:1f:49:78:de:17:63:e2:b7:b5:ce:c6:13:4f:1e:
52:e6:14:2f:3f:78:69:db:bc:09:7e:28:e6:93:b5:
5f:de:c7:21:60:46:f4:9a:52:85:65:19:d0:c3:cc:
94:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:28:7C:FA:66:3C:DE:67:97:F0:AB:41:35:9D:57:7C:26:52:05:AC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/53a837b4-b1d5-373e-8574-6ae98d78e616.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.43.88.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
d5:9b:4f:13:fb:ae:f1:87:28:c5:d9:32:d6:66:c5:4a:ff:47:
a4:45:6b:ad:83:0d:5c:9c:7a:ff:4b:e9:fc:16:01:68:f0:a6:
25:20:e3:7d:ac:55:10:72:97:6d:1b:ac:bd:2b:1e:7a:2f:ab:
68:6c:79:4b:db:9e:d4:5b:4e:ac:95:9e:7b:62:e8:96:52:e1:
85:5e:b9:47:56:d2:c5:c5:0f:bc:62:41:3d:f0:3e:2b:8d:3f:
33:a5:14:2a:ca:94:ac:74:b1:0b:d5:32:66:98:ee:a5:e6:73:
95:fd:3f:29:61:0f:e0:a3:66:8d:16:05:ae:c5:59:b1:f0:d1:
a8:a8:d4:20:45:c1:b1:96:de:70:51:0f:46:68:36:f7:9a:7f:
b9:23:ec:ef:5b:cc:9e:8d:a0:f0:8e:87:9f:28:1e:6d:12:63:
f1:dc:20:1d:c2:e9:83:11:19:38:18:a7:f1:73:c6:c9:08:82:
fc:45:3c:51:d7:1a:b7:75:c5:28:e8:1d:fb:57:c3:49:9d:40:
0d:b7:2a:e2:3a:3b:e4:56:a4:95:a3:5a:cc:cb:a8:cc:e5:81:
a7:31:2a:27:4c:76:7f:6d:d2:d6:c6:a0:0a:12:6c:a4:2c:08:
4d:38:08:72:c4:eb:77:a5:af:00:fe:05:e8:b8:35:20:3e:cd:
17:ef:63:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VuxVLCjxUECFK+gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MjFkYjJhYzUtY2Q4My00MTUwLWEwMWMtMGEyZjgzYWJkMmFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjH0rnYl7piuzFHbqx4BHIH3lmxc4JpWpN28S
a2TfHQ1dvmQcLOrTlM1ODsC2TPP4k9TyXjDqY2uwco3unSzFgLRsK3UJOFzVsPex
b+Z+n8a1jXUEBrXam6PWN8+JFvP7r4u6SCdQoAj3WK/bT4I4ki7GFTVD4SePjzBl
rnCfFadv/9T2zMmV/EF/PrNH22jH3aso58QyDdz8B4QmVdag2cu146M24F4NBCQx
xLPh2nHSqLTa9qEGPWN7Zue9w0swtSPY6IfZV4TH7eoi8Jji/tIIH0l43hdj4re1
zsYTTx5S5hQvP3hp27wJfijmk7Vf3schYEb0mlKFZRnQw8yUQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYofPpmPN5nl/CrQTWdV3wmUgWsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTNhODM3YjQtYjFkNS0z
NzNlLTg1NzQtNmFlOThkNzhlNjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCtYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANWbTxP7rvGHKMXZMtZmxUr/R6RFa62DDVycev9L6fwWAWjwpiUg432s
VRByl20brL0rHnovq2hseUvbntRbTqyVnnti6JZS4YVeuUdW0sXFD7xiQT3wPiuN
PzOlFCrKlKx0sQvVMmaY7qXmc5X9PylhD+CjZo0WBa7FWbHw0aio1CBFwbGW3nBR
D0ZoNveaf7kj7O9bzJ6NoPCOh58oHm0SY/HcIB3C6YMRGTgYp/FzxskIgvxFPFHX
Grd1xSjoHftXw0mdQA23KuI6O+RWpJWjWszLqMzlgacxKidMdn9t0tbGoAoSbKQs
CE04CHLE63elrwD+Bei4NSA+zRfvY9w=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:21:29 2026 by rpki-client