
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/4f959a7f-cd7e-3dc6-bc19-71c5caee9582.roa
File: 4f959a7f-cd7e-3dc6-bc19-71c5caee9582.roa (raw, json)
Hash identifier: fak5UomlMSMxYVohvPdZij0E/Yg0sKA5+k/vDAYit/M=
Subject key identifier: 54:DB:CF:EC:EA:18:77:A6:C3:CE:60:22:D8:03:00:A8:5F:87:02:F5
Certificate issuer: /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial: 010D0C9F4328584D83CAAFD36E375E93E2FBC7A0
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/4f959a7f-cd7e-3dc6-bc19-71c5caee9582.roa
Signing time: Wed 15 Apr 2026 13:00:30 +0000
ROA not before: Wed 15 Apr 2026 13:00:30 +0000
ROA not after: Tue 14 Jul 2026 13:00:30 +0000
asID: 1640
IP address blocks: 68.64.112.0/20 maxlen: 25
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:83:ca:af:d3:6e:37:5e:93:e2:fb:c7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
Validity
Not Before: Apr 15 13:00:30 2026 GMT
Not After : Jul 14 13:00:30 2026 GMT
Subject: CN=51a16b8d-a1df-403a-a7bd-eb4a9285c3da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:dd:21:2b:c8:e7:a8:e0:5d:a3:a2:47:25:bf:
a6:d3:af:ad:81:ae:4a:9c:9e:64:28:d1:8e:ec:64:
71:84:a5:77:ea:96:93:f1:01:a8:26:73:78:8d:c0:
cb:79:b4:5c:36:66:80:2a:d2:d3:0a:41:3a:3d:28:
e9:eb:98:2f:a9:29:eb:55:0d:42:c3:07:7c:e3:56:
29:65:a9:17:04:b5:cb:5d:db:26:94:47:d0:80:fa:
9f:cd:ca:3f:7b:e5:07:e0:67:72:19:e2:38:b4:63:
19:01:f4:93:57:5c:7f:c9:ea:c5:26:70:10:ef:54:
1c:89:14:97:eb:38:b5:85:f0:32:d2:13:64:aa:67:
87:61:cb:50:2b:6b:6f:e1:34:31:5a:6c:a7:21:e3:
3a:1a:86:6a:c1:0a:d2:fb:f8:e4:79:30:05:bd:95:
0c:23:a7:75:59:5f:3d:62:72:3f:6a:9b:e3:cc:af:
e9:87:76:65:9f:b9:98:43:60:b3:e7:3f:cc:97:d8:
d8:3d:18:a4:ea:15:52:1f:92:ba:9a:97:18:4a:07:
0f:6c:44:12:94:98:f2:af:f8:03:5d:07:5c:69:45:
7c:5d:66:2c:6f:72:f3:6e:5f:3c:e6:d7:3e:eb:90:
e3:19:da:b4:38:76:2a:48:20:45:9d:36:c4:23:66:
c3:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:DB:CF:EC:EA:18:77:A6:C3:CE:60:22:D8:03:00:A8:5F:87:02:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/4f959a7f-cd7e-3dc6-bc19-71c5caee9582.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
X509v3 Authority Key Identifier:
keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
sbgp-ipAddrBlock: critical
IPv4:
68.64.112.0/20
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
69:3d:d3:b7:be:12:5b:05:82:40:cd:4e:b7:a9:08:7b:18:f0:
7f:51:5a:8e:26:64:30:b0:f5:93:bf:6f:34:9e:1c:bf:81:30:
15:b3:21:a7:55:52:22:92:a5:ec:3f:31:b0:5c:bb:a3:93:d8:
1d:17:8b:3e:24:47:7d:2d:86:82:3e:a4:16:96:b8:cc:ba:da:
53:09:14:6b:e6:1d:8f:40:3c:55:39:1c:1d:95:87:ba:01:94:
2c:ef:ab:6c:80:8f:70:83:53:c3:72:31:5c:c8:fa:56:9d:03:
9d:a7:f3:cc:3a:ee:cb:01:00:2f:35:0f:92:2c:50:4f:c4:bc:
5f:03:6c:88:da:f4:98:4b:a8:36:11:1c:f0:7c:e8:f5:6f:20:
b9:84:73:85:86:42:a9:7c:4a:6b:3c:57:04:04:11:71:06:2e:
59:3e:ec:7b:c8:b2:a7:ac:05:ab:b7:9b:a0:b3:f5:83:d9:be:
79:67:4a:e0:89:7c:cd:95:31:36:fd:30:93:c8:10:fd:1e:57:
96:56:d3:a7:f7:f2:a3:d9:fc:82:be:2a:01:3f:27:29:7d:f4:
af:5a:b6:1d:63:e9:23:1b:be:36:95:e5:c4:9e:e6:f0:99:46:
9c:f3:00:03:35:d9:fc:76:f9:31:88:be:22:cd:cc:14:cb:ef:
b8:a4:c7:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2Dyq/Tbjdek+L7x6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3
YjUzMB4XDTI2MDQxNTEzMDAzMFoXDTI2MDcxNDEzMDAzMFowLzEtMCsGA1UEAxMk
NTFhMTZiOGQtYTFkZi00MDNhLWE3YmQtZWI0YTkyODVjM2RhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu90hK8jnqOBdo6JHJb+m06+tga5KnJ5kKNGO
7GRxhKV36paT8QGoJnN4jcDLebRcNmaAKtLTCkE6PSjp65gvqSnrVQ1Cwwd841Yp
ZakXBLXLXdsmlEfQgPqfzco/e+UH4GdyGeI4tGMZAfSTV1x/yerFJnAQ71QciRSX
6zi1hfAy0hNkqmeHYctQK2tv4TQxWmynIeM6GoZqwQrS+/jkeTAFvZUMI6d1WV89
YnI/apvjzK/ph3Zln7mYQ2Cz5z/Ml9jYPRik6hVSH5K6mpcYSgcPbEQSlJjyr/gD
XQdcaUV8XWYsb3Lzbl885tc+65DjGdq0OHYqSCBFnTbEI2bDDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFTbz+zqGHemw85gItgDAKhfhwL1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4
ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvNGY5NTlhN2YtY2Q3ZS0z
ZGM2LWJjMTktNzFjNWNhZWU5NTgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3
ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj
N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4
OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEREBwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGk907e+ElsFgkDNTrepCHsY8H9RWo4mZDCw9ZO/bzSeHL+BMBWzIadV
UiKSpew/MbBcu6OT2B0Xiz4kR30thoI+pBaWuMy62lMJFGvmHY9APFU5HB2Vh7oB
lCzvq2yAj3CDU8NyMVzI+ladA52n88w67ssBAC81D5IsUE/EvF8DbIja9JhLqDYR
HPB86PVvILmEc4WGQql8Sms8VwQEEXEGLlk+7HvIsqesBau3m6Cz9YPZvnlnSuCJ
fM2VMTb9MJPIEP0eV5ZW06f38qPZ/IK+KgE/Jyl99K9ath1j6SMbvjaV5cSe5vCZ
RpzzAAM12fx2+TGIviLNzBTL77ikx30=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:28:52 2026 by rpki-client