
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caa6707-d887-31aa-9555-6c07e276be6c.roa
File: 5caa6707-d887-31aa-9555-6c07e276be6c.roa (raw, json)
Hash identifier: Oa0CjD/UmolDc7o5pI87eUV8fHXhzdU6nG3j3f6DJHA=
Subject key identifier: C3:56:0E:CA:90:A3:A0:C2:1C:6B:77:A6:DB:1F:A2:E6:46:DF:66:53
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584EA78BC29297730756441CC5C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caa6707-d887-31aa-9555-6c07e276be6c.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 22909
IP address blocks: 68.53.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:8b:c2:92:97:73:07:56:44:1c:c5:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=82e5a426-0f88-48e7-976d-71f4d5212687
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:75:de:be:cc:1f:23:40:92:61:5d:81:89:6f:
fc:64:0b:b1:fe:d0:86:33:ad:5a:24:83:21:f4:18:
4a:92:3e:d0:a6:ff:d1:92:a4:19:63:8d:63:94:6c:
ad:fc:6a:91:e5:88:cf:48:53:55:47:6a:9f:ef:96:
38:98:a6:75:12:1a:c1:a6:86:a8:7c:a8:6f:5f:6e:
f2:4e:40:75:ae:75:9c:1b:6c:b3:ad:ea:b2:7b:59:
3b:5c:b3:66:22:83:50:56:03:99:0b:42:6f:0d:99:
3a:ab:f7:8a:e5:a0:41:ab:30:23:02:cf:c9:27:a9:
9c:ab:f8:3f:53:2a:cd:9a:b2:ab:74:ff:43:7c:95:
77:85:bb:48:19:19:cd:90:7e:76:64:25:11:f4:22:
f9:5f:2a:57:0b:0e:ba:8e:bb:d5:80:58:19:2a:20:
7a:3c:ea:bb:07:a6:f5:ba:83:c9:67:2d:90:82:68:
d6:af:b5:78:41:ca:6c:02:c0:6d:5f:1c:cc:3d:eb:
19:5e:a5:b9:1b:71:2c:9e:f2:fa:fa:32:5f:09:c6:
fc:fe:ea:1c:2d:f4:d8:2b:22:06:0e:43:17:ad:55:
72:d6:35:b6:bd:6f:0f:a2:db:f8:3c:87:7c:c5:38:
cb:e4:3a:40:55:58:4e:e0:61:a1:ff:9a:e4:74:ef:
23:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:56:0E:CA:90:A3:A0:C2:1C:6B:77:A6:DB:1F:A2:E6:46:DF:66:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5caa6707-d887-31aa-9555-6c07e276be6c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.53.121.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:bb:6b:32:4d:24:07:93:29:b0:6e:3f:a6:98:60:92:90:27:
90:55:91:01:6a:02:6b:6f:dc:c6:a2:52:9a:81:f7:59:e6:9f:
6e:ff:a8:42:d0:29:7f:6e:7a:83:b2:cb:b7:f5:a5:75:b5:2d:
b0:43:1a:ee:a6:d6:ee:01:59:0d:e2:ea:cf:40:40:82:ff:12:
06:f5:cb:7c:35:8b:32:97:42:97:45:37:6b:b5:78:78:64:79:
99:2c:91:8e:f4:97:cb:c0:d2:cf:08:59:b9:73:1f:15:1a:b7:
0a:68:d5:30:2f:0c:71:14:e1:bf:90:fb:85:ea:d9:7c:1d:d2:
19:83:fa:b1:1f:c3:f0:cf:36:1f:c2:b8:d7:77:48:c6:78:21:
a3:17:fe:29:04:00:4e:1a:6f:bc:90:97:4d:31:09:13:81:fa:
ec:41:28:75:0e:2a:8b:c9:67:27:09:bc:3d:d4:7e:1c:59:21:
4e:ed:dd:91:8d:42:ee:f2:df:e4:3a:99:ff:74:10:7e:8c:e8:
ae:c5:db:b2:71:a8:21:d4:91:91:7f:67:74:84:ac:1f:26:43:
dd:07:13:73:51:9e:e8:5c:71:71:fc:db:87:98:0c:3f:e4:be:
8b:2a:4a:80:5e:59:2f:b5:1e:5c:81:31:38:34:91:16:ee:4e:
8f:83:2c:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE6ni8KSl3MHVkQcxcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
ODJlNWE0MjYtMGY4OC00OGU3LTk3NmQtNzFmNGQ1MjEyNjg3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA43XevswfI0CSYV2BiW/8ZAux/tCGM61aJIMh
9BhKkj7Qpv/RkqQZY41jlGyt/GqR5YjPSFNVR2qf75Y4mKZ1EhrBpoaofKhvX27y
TkB1rnWcG2yzreqye1k7XLNmIoNQVgOZC0JvDZk6q/eK5aBBqzAjAs/JJ6mcq/g/
UyrNmrKrdP9DfJV3hbtIGRnNkH52ZCUR9CL5XypXCw66jrvVgFgZKiB6POq7B6b1
uoPJZy2QgmjWr7V4QcpsAsBtXxzMPesZXqW5G3EsnvL6+jJfCcb8/uocLfTYKyIG
DkMXrVVy1jW2vW8Potv4PId8xTjL5DpAVVhO4GGh/5rkdO8jBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMNWDsqQo6DCHGt3ptsfouZG32ZTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWNhYTY3MDctZDg4Ny0z
MWFhLTk1NTUtNmMwN2UyNzZiZTZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARDV5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFC7azJNJAeTKbBuP6aYYJKQJ5BVkQFqAmtv3MaiUpqB91nmn27/qELQ
KX9ueoOyy7f1pXW1LbBDGu6m1u4BWQ3i6s9AQIL/Egb1y3w1izKXQpdFN2u1eHhk
eZkskY70l8vA0s8IWblzHxUatwpo1TAvDHEU4b+Q+4Xq2Xwd0hmD+rEfw/DPNh/C
uNd3SMZ4IaMX/ikEAE4ab7yQl00xCROB+uxBKHUOKovJZycJvD3UfhxZIU7t3ZGN
Qu7y3+Q6mf90EH6M6K7F27JxqCHUkZF/Z3SErB8mQ90HE3NRnuhccXH824eYDD/k
vosqSoBeWS+1HlyBMTg0kRbuTo+DLIc=
-----END CERTIFICATE-----
Generated at Wed Jul 29 07:33:58 2026 by rpki-client