
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa
File: aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa (raw, json)
Hash identifier: f5WMWVAfDcZ9VcoRwlG6+w561zSSTyCvJyFNFmIIa98=
Subject key identifier: B7:B2:CA:AB:DB:48:D2:83:E1:64:35:9A:51:CE:98:C3:AD:70:BD:B5
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584ED862C34CF0691A668B9E6C00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa
Signing time: Sat 15 Aug 2026 13:00:11 +0000
ROA not before: Sat 15 Aug 2026 13:00:11 +0000
ROA not after: Fri 13 Nov 2026 14:00:11 +0000
asID: 33668
IP address blocks: 68.61.24.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:d8:62:c3:4c:f0:69:1a:66:8b:9e:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Aug 15 13:00:11 2026 GMT
Not After : Nov 13 14:00:11 2026 GMT
Subject: CN=0d340f84-8165-4b9c-af0f-4ff20f847e81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:75:48:6e:31:44:b2:41:8c:a5:4b:14:f0:e2:
bc:c2:3b:9f:87:e5:b6:6f:8d:16:64:d1:68:42:66:
9e:3f:3a:68:79:3b:00:74:b8:d4:c8:b9:2d:db:27:
62:c0:0e:25:c8:d0:63:4f:30:3f:64:02:e9:d6:92:
ab:e1:c9:3c:58:1c:a1:7e:a8:42:00:bf:e0:a8:5b:
48:e2:3d:54:ed:3d:0b:1c:5c:3e:d8:b9:45:d7:f5:
b3:a9:2b:f3:6c:53:51:83:65:1b:7f:d4:c1:fb:9f:
fe:6b:a7:8b:94:63:ab:ed:0f:d9:a5:c5:4b:b9:d9:
c5:1e:54:95:67:af:0e:43:30:f5:76:4c:f6:fb:70:
ad:7d:b6:64:af:c7:44:38:0c:fe:a9:a6:c3:46:75:
79:b5:45:fd:2a:af:ab:8b:18:d9:e5:d8:14:41:0f:
21:a0:e2:72:8b:27:8d:cd:a8:d1:d0:0d:4e:04:ae:
da:e9:2e:4a:85:a4:14:55:78:3f:82:7a:8f:02:fb:
c8:ed:44:39:cb:a5:a1:58:a8:a2:75:d7:b8:b4:33:
ee:e4:15:ef:86:90:98:d8:b7:c3:b7:b0:06:9f:e2:
e8:60:68:0b:3b:8d:7f:70:0a:c6:3a:8e:c6:2b:93:
61:07:ef:16:82:4f:41:c3:50:ed:d8:da:c4:e5:61:
f8:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:B2:CA:AB:DB:48:D2:83:E1:64:35:9A:51:CE:98:C3:AD:70:BD:B5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/aa01d3f1-0bca-3657-ae42-b40c799fe5bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.61.24.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:da:59:e0:aa:9e:63:7c:88:40:8d:df:a5:86:88:99:de:1f:
f2:c3:51:5f:ac:64:39:20:bb:d0:2c:c9:21:db:d9:06:53:a6:
37:b5:57:e1:4a:72:5e:10:63:72:24:cc:a1:d6:c1:fb:15:e2:
aa:65:e4:81:83:b2:9e:93:51:79:bb:31:c6:20:0e:6b:31:71:
bb:cb:8d:99:e6:0e:4a:1d:40:78:81:86:c4:51:73:cb:d1:7b:
68:ba:fc:92:55:44:9b:9b:0a:61:c5:6b:a4:74:52:52:84:ad:
3d:64:ad:24:6c:ce:83:aa:2a:c8:86:7c:f2:7c:2c:c0:06:1d:
a1:8d:61:3a:51:ae:21:f7:ca:7d:5f:22:41:b9:8d:4f:fe:a1:
6f:a4:cc:66:02:d5:97:ae:a3:a5:54:4e:c0:8f:02:69:34:54:
90:88:9b:5b:ac:4d:d2:e4:47:aa:81:fe:15:8e:52:4b:d9:79:
6d:c8:75:b2:54:7a:1f:af:06:44:7d:4a:31:c7:e4:2b:e5:16:
10:f5:4e:84:e1:7e:fc:6f:3b:d2:0d:86:67:a4:a9:8e:53:d5:
25:44:11:1a:4c:aa:99:19:67:20:8a:e8:7d:0b:94:16:96:b2:
8a:f3:bb:31:a7:53:73:b9:ca:a8:ca:16:dc:1a:b8:1e:23:d0:
04:ea:b9:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE7YYsNM8GkaZouebAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDgxNTEzMDAxMVoXDTI2MTExMzE0MDAxMVowLzEtMCsGA1UEAxMk
MGQzNDBmODQtODE2NS00YjljLWFmMGYtNGZmMjBmODQ3ZTgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiXVIbjFEskGMpUsU8OK8wjufh+W2b40WZNFo
QmaePzpoeTsAdLjUyLkt2ydiwA4lyNBjTzA/ZALp1pKr4ck8WByhfqhCAL/gqFtI
4j1U7T0LHFw+2LlF1/WzqSvzbFNRg2Ubf9TB+5/+a6eLlGOr7Q/ZpcVLudnFHlSV
Z68OQzD1dkz2+3CtfbZkr8dEOAz+qabDRnV5tUX9Kq+rixjZ5dgUQQ8hoOJyiyeN
zajR0A1OBK7a6S5KhaQUVXg/gnqPAvvI7UQ5y6WhWKiidde4tDPu5BXvhpCY2LfD
t7AGn+LoYGgLO41/cArGOo7GK5NhB+8Wgk9Bw1Dt2NrE5WH4QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLeyyqvbSNKD4WQ1mlHOmMOtcL21MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYWEwMWQzZjEtMGJjYS0z
NjU3LWFlNDItYjQwYzc5OWZlNWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRD0YMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfaWeCqnmN8iECN36WGiJneH/LDUV+sZDkgu9AsySHb2QZTpje1V+FK
cl4QY3IkzKHWwfsV4qpl5IGDsp6TUXm7McYgDmsxcbvLjZnmDkodQHiBhsRRc8vR
e2i6/JJVRJubCmHFa6R0UlKErT1krSRszoOqKsiGfPJ8LMAGHaGNYTpRriH3yn1f
IkG5jU/+oW+kzGYC1Zeuo6VUTsCPAmk0VJCIm1usTdLkR6qB/hWOUkvZeW3IdbJU
eh+vBkR9SjHH5CvlFhD1ToThfvxvO9INhmekqY5T1SVEERpMqpkZZyCK6H0LlBaW
sorzuzGnU3O5yqjKFtwauB4j0ATquTs=
-----END CERTIFICATE-----
Generated at Fri Sep 25 17:20:33 2026 by rpki-client