
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a37f9874-b1c7-33c0-bae2-c8bfb0657249.roa
File: a37f9874-b1c7-33c0-bae2-c8bfb0657249.roa (raw, json)
Hash identifier: 2NTyhiJCQQXoIpzPxWBat6mLJjMAoJU2Aaq3mxljWgI=
Subject key identifier: 10:29:B6:E2:E8:16:5C:AF:3C:45:9C:63:33:FD:4C:95:CE:6A:94:E4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CFDE940F3DCF73A753A176DE0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a37f9874-b1c7-33c0-bae2-c8bfb0657249.roa
Signing time: Thu 26 Feb 2026 14:00:40 +0000
ROA not before: Thu 26 Feb 2026 14:00:40 +0000
ROA not after: Wed 27 May 2026 13:00:40 +0000
asID: 22909
IP address blocks: 68.63.164.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fd:e9:40:f3:dc:f7:3a:75:3a:17:6d:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Feb 26 14:00:40 2026 GMT
Not After : May 27 13:00:40 2026 GMT
Subject: CN=4a9eb088-7929-4402-adb1-115a2fd339a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5f:1e:62:93:5f:68:70:af:30:8a:71:46:26:
0a:72:ed:a3:16:60:20:6c:3b:3e:96:04:dc:83:4f:
8a:49:7c:ad:72:75:f0:51:5c:1c:29:8d:cb:28:62:
fc:7f:a3:46:19:a9:3c:6b:97:e4:39:d0:5c:83:0d:
ec:92:a2:1b:42:9b:0c:e1:2a:66:c3:4f:bc:b3:f4:
92:88:57:13:50:7d:cb:ca:e2:d6:61:2e:21:da:a0:
15:5e:43:ba:b0:aa:b7:b5:1c:5b:c2:1a:a1:50:27:
7b:20:38:1f:84:d5:e9:5d:b3:b5:99:29:6a:c1:a6:
d9:ed:62:62:43:90:29:3e:ec:cc:e1:df:4c:87:db:
2a:2b:cb:47:02:94:89:15:5f:82:1f:89:37:67:55:
d3:15:fe:da:49:22:9b:93:ee:ee:37:21:f4:ca:c6:
24:e3:f6:a2:c1:23:f5:37:ff:e9:58:0c:c5:7e:55:
9c:41:d3:47:80:81:0c:0a:22:4a:44:83:77:81:a7:
9d:43:ed:f7:d1:7a:4f:54:5a:5d:67:81:36:95:2c:
5d:30:51:de:6a:8e:62:10:32:f4:9b:f9:53:25:63:
ff:48:7f:bb:1f:04:4d:0f:8e:29:f2:99:24:9f:cb:
e0:7d:ec:e3:62:0d:90:a7:84:3f:4e:08:13:fc:8d:
a9:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:29:B6:E2:E8:16:5C:AF:3C:45:9C:63:33:FD:4C:95:CE:6A:94:E4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a37f9874-b1c7-33c0-bae2-c8bfb0657249.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.63.164.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:76:8a:5a:c9:96:a6:d4:cf:49:9d:cb:cf:4f:55:85:17:64:
e5:68:0f:f7:c1:fa:07:f0:b7:2d:f3:90:08:a0:1a:2f:d6:43:
df:95:49:88:69:f5:00:0e:07:1c:6a:6a:d4:48:dc:df:ec:31:
a6:d0:1c:fc:98:11:e2:4c:06:47:d7:ab:75:89:f0:0f:51:bd:
08:04:44:0c:8f:cb:f9:2c:e7:d3:af:93:64:52:a7:46:99:74:
6e:ac:fd:8e:98:f5:40:e3:e8:13:a4:10:35:0d:81:cb:fb:fa:
1b:f0:23:c6:11:0f:03:47:63:85:81:77:67:0a:36:43:75:69:
fc:f2:93:60:38:98:0d:94:8b:a7:c6:ac:d4:82:27:bc:a3:30:
8f:65:e8:25:30:63:5d:ca:e1:bd:38:7e:68:61:98:90:5c:fb:
e5:81:dc:b6:d4:ed:28:68:0b:8f:4b:9a:86:6a:e5:24:83:ad:
cd:29:bc:d5:fc:dc:27:c2:ad:3f:94:ae:10:b3:37:a2:be:c9:
79:a5:54:a6:75:d9:ee:3b:97:89:a9:c0:51:32:04:d1:c7:e7:
37:bf:72:bb:2b:70:f6:0e:58:e9:47:e7:f0:a5:c9:02:6a:6a:
12:34:8e:d9:6b:e5:67:a8:8f:c7:4f:80:95:f0:fc:ab:39:e5:
c2:a9:6e:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEz96UDz3Pc6dToXbeAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDIyNjE0MDA0MFoXDTI2MDUyNzEzMDA0MFowLzEtMCsGA1UEAxMk
NGE5ZWIwODgtNzkyOS00NDAyLWFkYjEtMTE1YTJmZDMzOWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp18eYpNfaHCvMIpxRiYKcu2jFmAgbDs+lgTc
g0+KSXytcnXwUVwcKY3LKGL8f6NGGak8a5fkOdBcgw3skqIbQpsM4Spmw0+8s/SS
iFcTUH3LyuLWYS4h2qAVXkO6sKq3tRxbwhqhUCd7IDgfhNXpXbO1mSlqwabZ7WJi
Q5ApPuzM4d9Mh9sqK8tHApSJFV+CH4k3Z1XTFf7aSSKbk+7uNyH0ysYk4/aiwSP1
N//pWAzFflWcQdNHgIEMCiJKRIN3gaedQ+330XpPVFpdZ4E2lSxdMFHeao5iEDL0
m/lTJWP/SH+7HwRND44p8pkkn8vgfezjYg2Qp4Q/TggT/I2pvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBAptuLoFlyvPEWcYzP9TJXOapTkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYTM3Zjk4NzQtYjFjNy0z
M2MwLWJhZTItYzhiZmIwNjU3MjQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD+kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABB2ilrJlqbUz0mdy89PVYUXZOVoD/fB+gfwty3zkAigGi/WQ9+VSYhp
9QAOBxxqatRI3N/sMabQHPyYEeJMBkfXq3WJ8A9RvQgERAyPy/ks59Ovk2RSp0aZ
dG6s/Y6Y9UDj6BOkEDUNgcv7+hvwI8YRDwNHY4WBd2cKNkN1afzyk2A4mA2Ui6fG
rNSCJ7yjMI9l6CUwY13K4b04fmhhmJBc++WB3LbU7ShoC49LmoZq5SSDrc0pvNX8
3CfCrT+UrhCzN6K+yXmlVKZ12e47l4mpwFEyBNHH5ze/crsrcPYOWOlH5/ClyQJq
ahI0jtlr5Weoj8dPgJXw/Ks55cKpbnQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 20:36:24 2026 by rpki-client