
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa
File: 9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa (raw, json)
Hash identifier: gaDoOIezO+93qLXGd8TvAP4NtVGuad16IVOHJxoNkm8=
Subject key identifier: 97:5C:43:3D:7C:CA:EB:FF:49:98:2C:78:74:71:67:3A:47:B5:AB:C8
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED863DA559941840CD2E0A680
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.40.176.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:63:da:55:99:41:84:0c:d2:e0:a6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=eba78f27-f127-49a7-baa6-689293c509c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:88:27:98:e9:f5:36:b8:3f:ce:cb:7b:6e:45:
9e:77:46:d5:1f:d5:47:ef:ce:c0:d6:af:a5:b7:c6:
41:4b:75:ac:95:b0:9e:ec:cf:8e:08:20:af:34:9e:
ab:25:68:58:57:9b:68:47:68:f6:cc:8f:12:e4:c7:
41:c9:d8:0e:06:47:e9:bf:07:43:6f:08:4b:d1:cd:
7d:b0:30:ef:63:be:63:fb:2a:9d:15:5b:c4:28:5b:
48:80:0d:10:fc:a1:17:5b:c8:1c:32:96:3d:63:2a:
ee:60:f2:e0:d3:44:f8:80:bc:7b:fb:c3:50:90:bd:
49:54:20:69:23:bb:ba:bd:2d:5c:99:42:25:c9:3f:
4b:8d:06:4a:93:20:61:ef:10:fd:9a:ac:8c:ba:65:
06:1d:45:26:d3:1f:63:74:f6:74:bb:5d:82:9a:d8:
2e:36:60:61:d4:43:cd:39:2e:dc:b2:61:d6:43:f0:
21:3a:a9:de:a3:2e:ce:6a:73:1d:e8:bd:7f:b6:2a:
82:31:2e:35:67:0f:11:fb:d8:dc:22:82:b8:82:33:
b4:0a:97:b2:95:49:3f:92:61:2e:3d:a2:4b:4a:c9:
a8:6d:35:0e:fc:e4:ca:1d:8a:ff:9b:af:44:0f:49:
dd:a5:5b:0e:9a:74:34:51:6b:2d:0b:f6:83:60:4d:
47:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:5C:43:3D:7C:CA:EB:FF:49:98:2C:78:74:71:67:3A:47:B5:AB:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/9cdab3e8-493a-3ca1-b9a8-f4f02aac98f1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.176.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9d:97:1e:09:18:c8:54:ad:99:10:a3:e5:f0:4d:57:9f:4b:5e:
28:85:22:39:28:2a:3d:6d:9e:c7:d4:c6:02:ee:66:7e:1b:75:
0b:9b:9e:b3:4a:ce:83:3d:52:4c:14:17:71:91:d3:c0:90:14:
09:a0:2f:3f:ed:cb:ca:54:91:ca:9c:75:c2:df:60:9f:21:17:
5a:3c:c4:54:8e:48:55:a8:63:ea:9a:f9:41:41:aa:91:92:7f:
c1:93:f0:4c:9d:3a:ce:23:60:23:1a:56:58:51:55:a1:87:e8:
f5:62:be:d4:5b:45:3d:47:2d:e2:9a:45:63:4c:b9:fa:c7:ee:
4e:90:7a:9f:96:cc:04:f5:8a:56:9f:2c:f8:af:1c:07:ce:6d:
68:be:6e:9c:fb:d8:c1:ba:52:49:34:8f:ba:df:91:44:d2:23:
10:84:3d:1b:ef:f5:b5:97:f2:3e:fd:17:86:c5:71:c0:f6:e0:
2f:66:03:3c:41:22:6b:6c:c8:89:c0:e2:90:b3:6c:fb:76:6b:
b5:da:dd:3c:bc:5d:13:c0:e2:ae:0f:0c:fa:2d:a8:ec:21:0c:
9f:c8:6c:9c:3f:5f:40:45:c7:b3:19:4f:fe:3c:ca:56:d2:c5:
4c:96:53:e9:49:d1:d0:5f:e5:94:de:28:35:d7:f5:8c:ae:22:
13:fb:c8:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YY9pVmUGEDNLgpoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
ZWJhNzhmMjctZjEyNy00OWE3LWJhYTYtNjg5MjkzYzUwOWM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ognmOn1Nrg/zst7bkWed0bVH9VH787A1q+l
t8ZBS3WslbCe7M+OCCCvNJ6rJWhYV5toR2j2zI8S5MdBydgOBkfpvwdDbwhL0c19
sDDvY75j+yqdFVvEKFtIgA0Q/KEXW8gcMpY9YyruYPLg00T4gLx7+8NQkL1JVCBp
I7u6vS1cmUIlyT9LjQZKkyBh7xD9mqyMumUGHUUm0x9jdPZ0u12CmtguNmBh1EPN
OS7csmHWQ/AhOqneoy7OanMd6L1/tiqCMS41Zw8R+9jcIoK4gjO0CpeylUk/kmEu
PaJLSsmobTUO/OTKHYr/m69ED0ndpVsOmnQ0UWstC/aDYE1HdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJdcQz18yuv/SZgseHRxZzpHtavIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOWNkYWIzZTgtNDkzYS0z
Y2ExLWI5YTgtZjRmMDJhYWM5OGYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ2XHgkYyFStmRCj5fBNV59LXiiFIjkoKj1tnsfUxgLuZn4bdQubnrNK
zoM9UkwUF3GR08CQFAmgLz/ty8pUkcqcdcLfYJ8hF1o8xFSOSFWoY+qa+UFBqpGS
f8GT8EydOs4jYCMaVlhRVaGH6PVivtRbRT1HLeKaRWNMufrH7k6Qep+WzAT1ilaf
LPivHAfObWi+bpz72MG6Ukk0j7rfkUTSIxCEPRvv9bWX8j79F4bFccD24C9mAzxB
ImtsyInA4pCzbPt2a7Xa3Ty8XRPA4q4PDPotqOwhDJ/IbJw/X0BFx7MZT/48ylbS
xUyWU+lJ0dBf5ZTeKDXX9YyuIhP7yA0=
-----END CERTIFICATE-----
Generated at Sun Sep 27 03:31:01 2026 by rpki-client