
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b141a390-cc7b-3b2d-988b-7b181724d7b3.roa
File: b141a390-cc7b-3b2d-988b-7b181724d7b3.roa (raw, json)
Hash identifier: 3vbtA7nmXHqEXA/b4AdEd9M9VBCeQ7OX6E2WAqsuNyg=
Subject key identifier: 56:BA:DA:E4:E4:31:8E:C3:C5:72:86:27:B9:14:58:6B:19:C1:F7:9F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D55BB0E8193AF281DDF0724C0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b141a390-cc7b-3b2d-988b-7b181724d7b3.roa
Signing time: Mon 30 Mar 2026 01:00:23 +0000
ROA not before: Mon 30 Mar 2026 01:00:23 +0000
ROA not after: Sun 28 Jun 2026 01:00:23 +0000
asID: 33668
IP address blocks: 68.40.0.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:55:bb:0e:81:93:af:28:1d:df:07:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 30 01:00:23 2026 GMT
Not After : Jun 28 01:00:23 2026 GMT
Subject: CN=d9fa228d-54e5-449e-95aa-1ef9c3ff06c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:d4:0b:75:0c:2a:31:c6:8d:56:b5:c5:8c:fd:
38:f0:63:5d:a8:df:1d:c9:2a:5e:05:3f:21:cf:c4:
4a:82:cd:b1:0f:85:e1:ee:29:cf:9c:e2:d9:98:9e:
89:a9:7e:94:bf:fc:79:5a:9f:e5:5c:5c:ab:33:0a:
6e:d6:90:d3:a8:c7:32:c9:6d:ac:e7:2d:a0:33:4d:
7d:e9:54:6b:79:72:ac:81:ad:25:49:8e:e4:a5:83:
a0:f5:bf:cd:c9:27:46:0c:47:f3:a3:94:13:ac:d3:
dc:3d:17:93:69:1a:3c:b1:60:2b:f8:49:a3:a9:b7:
0b:71:d1:f3:87:b6:3b:d0:1e:4e:09:c4:87:4b:81:
6f:f5:16:7e:87:42:43:ec:3e:26:63:29:ca:f0:b8:
bd:e3:fa:54:2b:48:88:54:35:b5:81:15:14:32:62:
d1:dc:8c:86:13:b3:fe:53:ec:f0:ec:e8:96:68:9d:
ac:60:bd:c3:15:be:99:76:b6:2b:be:50:b4:25:8b:
42:28:98:f4:d7:74:5d:0f:e7:0a:7c:99:b2:93:90:
38:87:bf:f4:a5:bf:58:0e:32:20:fa:09:4b:91:a1:
f6:a1:a1:42:40:26:ce:ef:64:31:24:c9:31:6f:7d:
8c:c8:b0:09:3d:c3:6c:cf:cd:75:71:54:da:86:e0:
94:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:BA:DA:E4:E4:31:8E:C3:C5:72:86:27:B9:14:58:6B:19:C1:F7:9F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b141a390-cc7b-3b2d-988b-7b181724d7b3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.40.0.0/21
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:58:e6:3c:3b:6f:db:ef:78:a0:7c:b8:47:aa:a4:23:50:25:
7a:90:c1:13:59:8a:f4:b7:1d:5c:bc:59:3d:04:70:50:c9:b6:
4c:bc:b8:ec:ee:89:78:f7:78:32:db:77:0d:60:1a:08:9e:d3:
3b:73:08:28:16:af:64:16:91:cd:e3:cb:5d:e2:49:94:d0:ed:
fa:c7:3c:63:5e:bd:51:09:6f:65:60:53:5a:e0:50:9b:d3:46:
5c:72:e0:98:8f:37:06:d0:6c:59:e7:d3:fd:03:e2:7d:d4:f3:
7c:0b:d7:27:fd:80:15:e8:bc:74:ed:ab:a6:89:03:f1:7b:64:
9c:90:cd:cb:6c:f6:06:e7:c6:76:59:0e:13:df:af:f2:7c:f1:
8e:c9:2b:65:c1:98:fe:10:60:33:4e:79:28:f6:44:0c:75:46:
2d:33:36:22:7e:35:98:7e:a6:60:c9:22:7d:9f:bb:6d:ce:51:
d0:5c:27:b6:0d:de:d7:7b:94:2c:c1:0c:fe:cb:f6:7f:6f:c9:
ae:84:31:7b:7f:75:c4:93:6d:32:ca:16:49:e1:34:94:79:cc:
4f:29:20:b1:5b:3f:9a:91:47:df:5b:68:bb:4b:b1:27:da:56:
28:30:ea:fc:05:37:48:a6:19:23:32:16:27:ff:09:12:33:24:
0c:2a:0c:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE1Vuw6Bk68oHd8HJMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMzMDAxMDAyM1oXDTI2MDYyODAxMDAyM1owLzEtMCsGA1UEAxMk
ZDlmYTIyOGQtNTRlNS00NDllLTk1YWEtMWVmOWMzZmYwNmMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAitQLdQwqMcaNVrXFjP048GNdqN8dySpeBT8h
z8RKgs2xD4Xh7inPnOLZmJ6JqX6Uv/x5Wp/lXFyrMwpu1pDTqMcyyW2s5y2gM019
6VRreXKsga0lSY7kpYOg9b/NySdGDEfzo5QTrNPcPReTaRo8sWAr+EmjqbcLcdHz
h7Y70B5OCcSHS4Fv9RZ+h0JD7D4mYynK8Li94/pUK0iIVDW1gRUUMmLR3IyGE7P+
U+zw7OiWaJ2sYL3DFb6ZdrYrvlC0JYtCKJj013RdD+cKfJmyk5A4h7/0pb9YDjIg
+glLkaH2oaFCQCbO72QxJMkxb32MyLAJPcNsz811cVTahuCU9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFa62uTkMY7DxXKGJ7kUWGsZwfefMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjE0MWEzOTAtY2M3Yi0z
YjJkLTk4OGItN2IxODE3MjRkN2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDRCgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFY5jw7b9vveKB8uEeqpCNQJXqQwRNZivS3HVy8WT0EcFDJtky8uOzu
iXj3eDLbdw1gGgie0ztzCCgWr2QWkc3jy13iSZTQ7frHPGNevVEJb2VgU1rgUJvT
Rlxy4JiPNwbQbFnn0/0D4n3U83wL1yf9gBXovHTtq6aJA/F7ZJyQzcts9gbnxnZZ
DhPfr/J88Y7JK2XBmP4QYDNOeSj2RAx1Ri0zNiJ+NZh+pmDJIn2fu23OUdBcJ7YN
3td7lCzBDP7L9n9vya6EMXt/dcSTbTLKFknhNJR5zE8pILFbP5qRR99baLtLsSfa
Vigw6vwFN0imGSMyFif/CRIzJAwqDGg=
-----END CERTIFICATE-----
Generated at Fri Apr 17 10:39:36 2026 by rpki-client