
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859c25d6-9e65-3419-a71f-cec2555a919c.roa
File: 859c25d6-9e65-3419-a71f-cec2555a919c.roa (raw, json)
Hash identifier: uMJbPLnxbSPoPU5+6uvDMa38GZW0WvUiyAIV+W57RHk=
Subject key identifier: 4A:B9:6E:8E:40:BD:34:FB:C9:E0:AA:4C:93:CD:22:2B:E4:67:4F:E2
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584DF4DB9C58B4116255D9A13E20
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859c25d6-9e65-3419-a71f-cec2555a919c.roa
Signing time: Tue 26 May 2026 01:00:24 +0000
ROA not before: Tue 26 May 2026 01:00:24 +0000
ROA not after: Mon 24 Aug 2026 01:00:24 +0000
asID: 33491
IP address blocks: 68.39.252.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f4:db:9c:58:b4:11:62:55:d9:a1:3e:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: May 26 01:00:24 2026 GMT
Not After : Aug 24 01:00:24 2026 GMT
Subject: CN=fad635d8-d2fa-46bd-81a5-8e0a5eeeca6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:5a:a1:bd:d0:d6:7a:fc:f6:de:35:32:2d:f5:
a2:9e:75:c7:d4:ee:d3:ec:02:da:d6:b4:a9:63:c7:
b1:37:3e:20:4d:57:db:7f:aa:ed:d9:77:76:a4:ba:
92:48:20:a4:24:45:f8:73:66:a7:0d:7a:c8:e6:f1:
27:f8:78:1b:86:3b:a5:1b:68:fb:e8:2f:1b:c6:1e:
24:a3:c0:c7:8a:b2:5e:bc:0f:25:06:54:d8:16:7a:
fb:7b:15:ec:00:8a:8d:35:15:f5:ab:4d:1e:31:54:
98:2d:8a:ab:45:2a:f4:49:e1:4a:3b:e8:02:d3:0d:
b7:a8:56:34:0e:2e:66:7c:b6:86:20:2a:87:f5:e9:
04:fb:d4:5b:90:72:3d:ab:8c:50:06:21:d0:33:20:
7b:ed:ca:f1:fc:14:2c:98:61:6c:1e:ed:6c:a3:5e:
90:10:bc:e4:f2:79:3c:0e:59:a7:e2:45:61:16:38:
8f:9c:5d:b4:d7:f6:04:27:b2:96:43:fc:ad:1b:18:
d7:02:d7:6b:97:45:79:ca:d8:be:4e:d0:ac:cb:9d:
5a:dd:3d:32:c8:91:2c:9e:39:f2:eb:14:18:cd:1c:
94:4e:78:ea:96:6d:fc:f1:34:f4:3c:2d:6c:41:f4:
00:94:1f:f0:ac:7b:eb:d9:66:70:e2:5d:14:5e:22:
8f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:B9:6E:8E:40:BD:34:FB:C9:E0:AA:4C:93:CD:22:2B:E4:67:4F:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/859c25d6-9e65-3419-a71f-cec2555a919c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.39.252.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:84:aa:41:18:25:58:71:57:f2:8f:67:71:6b:a6:79:d1:f8:
4e:27:0b:c8:14:6c:c7:58:15:c4:4c:3d:a0:55:bd:d5:be:d8:
7d:44:de:4b:bf:e9:86:69:f5:ad:1e:d8:a1:0d:45:61:05:44:
dd:86:f3:08:11:28:8e:55:54:fd:a0:90:bb:e2:5f:9f:14:f0:
a2:6e:bc:d8:ab:50:e3:4f:22:7c:2e:19:3c:68:8f:98:15:d8:
f0:c2:c3:e9:1f:c4:ec:d6:0d:4d:4a:01:44:ac:94:1f:c4:3b:
7d:9a:d1:0a:d2:ed:b3:c0:bd:36:81:b6:43:36:80:84:b0:fd:
8e:d0:7d:93:52:81:db:04:5a:2c:6f:48:35:0b:dc:f4:7d:c7:
4a:46:95:8b:e1:be:a9:a6:65:69:2a:46:b4:cf:26:54:63:25:
38:46:1a:fc:9b:5d:af:1e:9a:f4:3b:e3:c9:3d:56:1e:4b:fc:
5c:02:2c:0b:85:a5:e7:f0:66:0c:1c:11:6b:1e:55:ef:84:5d:
3a:f3:9c:80:48:b5:13:c9:32:c9:23:e0:b0:fb:ae:b9:79:b0:
0c:0f:5a:c4:3e:77:ab:e0:2a:df:ae:8f:af:df:e8:65:d3:8d:
a9:40:4d:46:9d:0a:b9:f0:f3:1f:88:ce:3a:86:0e:71:35:08:
4d:10:6f:16
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE3025xYtBFiVdmhPiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDUyNjAxMDAyNFoXDTI2MDgyNDAxMDAyNFowLzEtMCsGA1UEAxMk
ZmFkNjM1ZDgtZDJmYS00NmJkLTgxYTUtOGUwYTVlZWVjYTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi1qhvdDWevz23jUyLfWinnXH1O7T7ALa1rSp
Y8exNz4gTVfbf6rt2Xd2pLqSSCCkJEX4c2anDXrI5vEn+HgbhjulG2j76C8bxh4k
o8DHirJevA8lBlTYFnr7exXsAIqNNRX1q00eMVSYLYqrRSr0SeFKO+gC0w23qFY0
Di5mfLaGICqH9ekE+9RbkHI9q4xQBiHQMyB77crx/BQsmGFsHu1so16QELzk8nk8
Dlmn4kVhFjiPnF201/YEJ7KWQ/ytGxjXAtdrl0V5yti+TtCsy51a3T0yyJEsnjny
6xQYzRyUTnjqlm388TT0PC1sQfQAlB/wrHvr2WZw4l0UXiKP+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEq5bo5AvTT7yeCqTJPNIivkZ0/iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvODU5YzI1ZDYtOWU2NS0z
NDE5LWE3MWYtY2VjMjU1NWE5MTljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKEqkEYJVhxV/KPZ3FrpnnR+E4nC8gUbMdYFcRMPaBVvdW+2H1E3ku/
6YZp9a0e2KENRWEFRN2G8wgRKI5VVP2gkLviX58U8KJuvNirUONPInwuGTxoj5gV
2PDCw+kfxOzWDU1KAUSslB/EO32a0QrS7bPAvTaBtkM2gISw/Y7QfZNSgdsEWixv
SDUL3PR9x0pGlYvhvqmmZWkqRrTPJlRjJThGGvybXa8emvQ748k9Vh5L/FwCLAuF
pefwZgwcEWseVe+EXTrznIBItRPJMskj4LD7rrl5sAwPWsQ+d6vgKt+uj6/f6GXT
jalATUadCrnw8x+IzjqGDnE1CE0QbxY=
-----END CERTIFICATE-----
Generated at Sat Jun 13 19:35:07 2026 by rpki-client