
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f44e33-0a01-3c1f-a39a-1fb08d982043.roa
File: d4f44e33-0a01-3c1f-a39a-1fb08d982043.roa (raw, json)
Hash identifier: R0dMGT7ZZvE5JTW+8BTYmNlvQ7yFxAE6hK1RFUU+w/0=
Subject key identifier: 69:D3:DE:68:A9:12:8B:F7:AE:CB:0D:97:CC:A1:35:19:1B:BC:79:6E
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE5B98C82E46D7236CA4AFC0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f44e33-0a01-3c1f-a39a-1fb08d982043.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33491
IP address blocks: 68.44.116.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:5b:98:c8:2e:46:d7:23:6c:a4:af:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=03cdb8d7-11ef-4986-8e19-cf869aeec28b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:60:8f:44:c1:a7:d9:ee:83:03:c2:41:c6:03:
a7:c9:62:51:af:f7:b2:8d:d6:ed:ce:fa:73:1f:1e:
1b:86:20:66:39:b4:60:14:6d:52:d0:9c:24:5b:8c:
ee:d7:4e:ee:4f:eb:be:24:fb:55:e9:e7:8a:e9:3b:
f3:0c:97:19:3a:c2:d2:e1:67:ec:03:07:d8:7c:49:
e6:8f:b2:13:80:c7:bc:2c:64:4d:76:f4:49:09:a4:
ec:16:ce:ec:71:fe:e1:75:6a:93:99:6e:91:f3:e7:
82:0f:8a:50:d1:d9:b3:b9:b2:15:55:06:d9:56:be:
dc:34:2c:b0:9c:a0:47:87:82:c1:53:c7:af:d7:87:
a5:d2:2a:5c:41:44:3d:83:47:d1:2c:b1:5a:1f:ef:
a2:e7:31:47:b8:1a:21:4b:7e:6e:bd:04:5d:c8:c1:
73:a8:07:1d:72:20:9a:b6:c4:90:1f:76:41:4c:8d:
5e:c8:a9:f4:8f:f2:39:1a:8a:5d:99:dd:7e:3b:c8:
3c:26:1e:78:51:ae:a4:62:7b:58:4c:99:11:98:a3:
0d:62:b3:87:67:f6:01:e6:f5:aa:6b:35:cf:6c:0a:
b1:8b:3a:f3:23:e6:3e:37:5a:23:cd:b1:69:1b:f1:
be:fb:16:03:6e:d8:e6:ed:b3:ad:ca:b2:e7:40:75:
61:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:D3:DE:68:A9:12:8B:F7:AE:CB:0D:97:CC:A1:35:19:1B:BC:79:6E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/d4f44e33-0a01-3c1f-a39a-1fb08d982043.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.44.116.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9c:5c:90:25:d5:3c:d1:d4:42:b9:6a:26:c4:e3:3b:e9:5d:36:
72:66:df:6e:bf:20:15:a5:cb:7d:cf:4f:60:a3:52:bd:22:be:
e9:96:35:41:31:35:55:0a:e9:db:bb:90:92:29:8a:2b:24:ee:
93:94:a2:ce:d9:86:24:04:9a:6a:0e:b6:8e:d7:2b:13:0c:62:
dc:84:ad:ae:e5:be:63:b1:c6:a5:d9:d3:27:1a:69:5c:bb:af:
d8:08:9a:63:43:f5:cb:42:d8:73:aa:31:e6:7d:cc:09:82:93:
8a:5e:a9:8d:95:51:b8:db:9c:bb:39:60:a2:da:7e:4b:b9:b7:
c6:82:ed:d3:71:4f:c5:d6:fa:c4:3e:98:72:8c:6a:9b:6d:d0:
c8:8f:40:28:78:ec:2f:90:86:af:40:90:dd:07:35:44:26:0a:
68:c8:6d:d5:66:ca:56:40:e2:fd:95:87:a4:1c:e1:ea:92:e6:
b6:a0:35:77:b2:09:32:87:d5:81:32:ec:0b:12:a8:3d:3e:58:
f1:56:41:4e:3e:aa:c2:ae:82:5a:f6:b6:45:ba:16:2d:60:6c:
df:6a:0a:bd:a7:52:a7:97:77:72:33:f1:72:2d:58:1c:6c:04:
62:37:3e:65:5f:e7:8f:ca:3a:ed:03:d9:e7:98:e7:5c:57:6e:
a2:f5:f5:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEyuW5jILkbXI2ykr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
MDNjZGI4ZDctMTFlZi00OTg2LThlMTktY2Y4NjlhZWVjMjhiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqmCPRMGn2e6DA8JBxgOnyWJRr/eyjdbtzvpz
Hx4bhiBmObRgFG1S0JwkW4zu107uT+u+JPtV6eeK6TvzDJcZOsLS4WfsAwfYfEnm
j7ITgMe8LGRNdvRJCaTsFs7scf7hdWqTmW6R8+eCD4pQ0dmzubIVVQbZVr7cNCyw
nKBHh4LBU8ev14el0ipcQUQ9g0fRLLFaH++i5zFHuBohS35uvQRdyMFzqAcdciCa
tsSQH3ZBTI1eyKn0j/I5Gopdmd1+O8g8Jh54Ua6kYntYTJkRmKMNYrOHZ/YB5vWq
azXPbAqxizrzI+Y+N1ojzbFpG/G++xYDbtjm7bOtyrLnQHVhqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGnT3mipEov3rssNl8yhNRkbvHluMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZDRmNDRlMzMtMGEwMS0z
YzFmLWEzOWEtMWZiMDhkOTgyMDQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCx0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJxckCXVPNHUQrlqJsTjO+ldNnJm326/IBWly33PT2CjUr0ivumWNUEx
NVUK6du7kJIpiisk7pOUos7ZhiQEmmoOto7XKxMMYtyEra7lvmOxxqXZ0ycaaVy7
r9gImmND9ctC2HOqMeZ9zAmCk4peqY2VUbjbnLs5YKLafku5t8aC7dNxT8XW+sQ+
mHKMaptt0MiPQCh47C+Qhq9AkN0HNUQmCmjIbdVmylZA4v2Vh6Qc4eqS5ragNXey
CTKH1YEy7AsSqD0+WPFWQU4+qsKuglr2tkW6Fi1gbN9qCr2nUqeXd3Iz8XItWBxs
BGI3PmVf54/KOu0D2eeY51xXbqL19d4=
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:44:35 2026 by rpki-client