
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5720a21a-97ba-3d4b-9c21-ba598aaf5908.roa
File: 5720a21a-97ba-3d4b-9c21-ba598aaf5908.roa (raw, json)
Hash identifier: qR1Ghl+xLQ3+gWwHPHXtFJ/Me4ttPbQUpZIQ1YRFrZY=
Subject key identifier: 9E:5C:18:37:BA:8D:F3:C5:1D:2E:68:6A:4C:9B:CF:54:BA:B5:2B:82
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BC3E881DC0F6DE31A22EC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5720a21a-97ba-3d4b-9c21-ba598aaf5908.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.37.166.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bc:3e:88:1d:c0:f6:de:31:a2:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=3102251b-c7fe-410a-aca0-8236d5b1d2a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a5:8c:20:88:b9:a4:c5:71:9f:63:3e:d3:0f:
28:3b:7e:04:8c:ef:c1:b6:30:51:b8:a4:24:cd:0e:
5c:b6:2e:66:bb:44:c4:a1:c8:07:da:07:33:68:b9:
e5:03:03:0f:32:94:c0:43:47:1d:48:0e:43:65:30:
25:68:55:a4:0d:2f:32:03:bd:93:1d:d2:f2:af:81:
9d:a4:09:56:6b:bc:cc:d7:7f:d1:57:8c:74:91:d7:
2f:78:42:78:d3:72:37:35:84:6d:20:99:46:0e:99:
95:38:b1:29:ec:2e:cf:69:6a:dd:45:3a:3b:bd:8d:
9b:19:66:97:30:f5:6b:1c:24:cd:db:8b:8b:f1:a9:
e7:ff:78:12:48:6e:1e:8c:d7:ab:8a:c9:4f:54:38:
15:20:fe:b2:20:41:83:21:f6:97:0d:67:42:f3:62:
27:b2:1a:be:4e:ec:85:ba:56:09:fc:fb:86:93:1c:
b0:cc:43:d1:23:65:4d:8b:e2:94:0d:c2:40:3e:51:
80:ea:3d:13:77:81:e6:ec:0c:40:58:34:23:59:77:
11:12:0c:da:cb:45:29:de:8a:ce:a9:a5:57:e3:16:
1f:be:b4:d8:79:e4:16:ab:fa:bf:3e:fe:3f:ce:c4:
49:4b:c1:df:19:3b:e7:34:fa:d9:0f:62:06:02:d6:
7a:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:5C:18:37:BA:8D:F3:C5:1D:2E:68:6A:4C:9B:CF:54:BA:B5:2B:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5720a21a-97ba-3d4b-9c21-ba598aaf5908.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.37.166.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:24:79:6f:f2:50:71:b4:ab:1a:c0:bc:11:1f:d2:41:60:77:
e7:b7:18:94:b9:ce:90:d2:71:ee:12:a9:97:61:b9:fe:31:7d:
52:19:52:73:69:3b:26:70:4f:c7:91:4a:d5:df:f5:ea:92:54:
4b:ff:ca:40:3c:d8:bf:48:23:8f:a6:eb:b5:41:c5:6d:73:ee:
93:f2:8f:64:42:59:e1:b6:d7:b1:64:08:0d:bc:1e:38:59:e4:
e0:51:4e:72:03:40:51:98:8e:00:e9:a9:c3:a2:57:1a:4b:4d:
5b:22:cf:9d:b3:fa:3a:e1:02:e5:ac:8b:26:4a:f0:f2:6d:c7:
20:ef:ac:97:ff:13:d6:3c:94:76:5e:70:e8:e7:31:61:12:94:
e7:2c:b8:ba:e0:dd:2e:2f:b6:03:50:e8:c3:a9:19:fd:f2:65:
73:72:ed:cb:e4:da:12:13:64:de:df:b9:e5:8d:7c:11:07:fa:
18:19:9f:f0:c7:c2:52:ab:97:17:61:9a:37:3d:96:9d:86:62:
2d:f1:e0:75:79:e6:8a:f8:e9:d6:d0:21:50:a5:57:00:04:22:
05:80:26:ee:57:ba:46:db:3f:95:bf:8d:e1:17:87:5d:8a:0f:
ec:9c:ce:2d:04:2a:9c:4d:96:8f:21:0f:5d:dd:a2:11:03:99:
ae:13:b6:45
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1VvD6IHcD23jGiLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
MzEwMjI1MWItYzdmZS00MTBhLWFjYTAtODIzNmQ1YjFkMmE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKWMIIi5pMVxn2M+0w8oO34EjO/BtjBRuKQk
zQ5cti5mu0TEocgH2gczaLnlAwMPMpTAQ0cdSA5DZTAlaFWkDS8yA72THdLyr4Gd
pAlWa7zM13/RV4x0kdcveEJ403I3NYRtIJlGDpmVOLEp7C7PaWrdRTo7vY2bGWaX
MPVrHCTN24uL8ann/3gSSG4ejNerislPVDgVIP6yIEGDIfaXDWdC82Inshq+TuyF
ulYJ/PuGkxywzEPRI2VNi+KUDcJAPlGA6j0Td4Hm7AxAWDQjWXcREgzay0Up3orO
qaVX4xYfvrTYeeQWq/q/Pv4/zsRJS8HfGTvnNPrZD2IGAtZ6RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ5cGDe6jfPFHS5oakybz1S6tSuCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNTcyMGEyMWEtOTdiYS0z
ZDRiLTljMjEtYmE1OThhYWY1OTA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCWmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIEkeW/yUHG0qxrAvBEf0kFgd+e3GJS5zpDSce4SqZdhuf4xfVIZUnNp
OyZwT8eRStXf9eqSVEv/ykA82L9II4+m67VBxW1z7pPyj2RCWeG217FkCA28HjhZ
5OBRTnIDQFGYjgDpqcOiVxpLTVsiz52z+jrhAuWsiyZK8PJtxyDvrJf/E9Y8lHZe
cOjnMWESlOcsuLrg3S4vtgNQ6MOpGf3yZXNy7cvk2hITZN7fueWNfBEH+hgZn/DH
wlKrlxdhmjc9lp2GYi3x4HV55or46dbQIVClVwAEIgWAJu5XukbbP5W/jeEXh12K
D+yczi0EKpxNlo8hD13dohEDma4TtkU=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:24:02 2026 by rpki-client