
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa
File: b681d5f7-8589-3579-b73d-94d9991c87f2.roa (raw, json)
Hash identifier: 1O1j+2Sa54b3QNalp7E4aJb9eoUye3XbE6LFnfUf8HU=
Subject key identifier: 2B:CF:98:84:19:28:4C:90:43:77:76:60:C2:A8:41:4D:0D:EE:CC:9B
Certificate issuer: /CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Certificate serial: 010D0C9F4328584E22744B94DF6CF1BF5071E600
Authority key identifier: 6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa
Signing time: Thu 11 Jun 2026 09:00:12 +0000
ROA not before: Thu 11 Jun 2026 09:00:12 +0000
ROA not after: Wed 09 Sep 2026 09:00:12 +0000
asID: 21433
IP address blocks: 170.252.108.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 14 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:22:74:4b:94:df:6c:f1:bf:50:71:e6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95a66ba6-9469-47f7-8328-e12b21a9be23
Validity
Not Before: Jun 11 09:00:12 2026 GMT
Not After : Sep 9 09:00:12 2026 GMT
Subject: CN=a5720b7e-9b4c-435c-9896-c3dbe952330d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:c6:20:33:6e:08:f6:81:4f:18:8c:1a:b5:e9:
0e:39:2d:ae:ed:26:b4:c2:b9:16:53:2e:e0:b4:5c:
12:66:64:b5:a7:34:74:5d:88:3b:f9:9c:13:17:47:
c8:72:bd:2d:65:48:56:0f:78:ed:66:10:2a:08:8f:
7e:a8:0d:89:e6:56:8c:f0:c5:8c:0c:58:49:1e:e6:
b8:dd:4b:86:76:3f:74:fc:c4:fd:18:5f:d5:ca:45:
75:22:05:33:9b:a1:b1:70:5e:15:d5:fb:bb:90:d0:
cb:18:6c:2a:65:14:90:00:76:fe:63:2f:f7:0d:74:
3b:9b:33:06:ff:25:40:ea:65:7f:bf:dd:af:e9:4f:
f6:dd:43:02:a5:77:80:5a:9a:26:32:b7:4b:d6:d7:
51:cc:fd:8f:83:86:80:7d:6b:b3:c1:09:cf:b5:79:
48:c7:5e:cf:31:c3:4f:89:ae:31:d3:3b:8a:cd:e8:
a7:fa:a8:0a:0d:7d:1f:8a:6b:a1:20:60:45:94:62:
e3:a6:2d:d1:33:22:5e:b7:ae:7e:fb:2a:2b:78:a4:
5d:2b:1b:db:cf:52:15:15:da:be:aa:c0:c9:1b:0b:
2c:84:b2:ef:39:9c:23:e9:f0:47:3c:51:01:e9:e4:
b9:88:c5:ee:af:f3:79:0a:ae:ef:45:48:d9:b9:89:
db:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:CF:98:84:19:28:4C:90:43:77:76:60:C2:A8:41:4D:0D:EE:CC:9B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/b681d5f7-8589-3579-b73d-94d9991c87f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23/95a66ba6-9469-47f7-8328-e12b21a9be23.crl
X509v3 Authority Key Identifier:
keyid:6D:5A:F6:4B:CC:1A:06:CD:04:16:DB:4D:4B:E4:E6:02:A4:08:6B:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/95a66ba6-9469-47f7-8328-e12b21a9be23.cer
sbgp-ipAddrBlock: critical
IPv4:
170.252.108.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
82:d0:1e:24:b3:89:f5:35:c0:9b:78:4f:67:b4:5a:bb:05:ea:
d2:fc:89:3b:a1:f0:7e:25:e8:58:15:bc:d2:fe:a1:97:a2:2b:
0e:9b:c4:7d:52:f7:03:c2:d3:01:59:09:ef:16:39:c0:cf:ca:
ee:b8:5b:6e:c6:f7:1d:a5:72:12:e8:73:b4:64:fa:c3:ad:57:
43:76:c1:06:04:27:73:bb:5e:2f:3c:64:31:4a:93:b9:39:c4:
b2:d7:af:07:f3:29:10:c9:c8:34:4d:73:74:be:e7:29:97:8c:
29:cf:6b:2e:e6:26:e8:37:e6:80:53:2e:6a:87:a5:fe:58:87:
3e:3b:8e:d3:9a:ed:40:3f:42:b8:12:da:66:16:9a:79:3f:88:
be:26:c1:a8:c9:22:43:24:1a:54:6a:cb:fe:69:53:88:eb:31:
0f:31:ec:e1:89:0b:30:78:86:a0:69:d3:0e:79:37:55:b8:fb:
47:c1:3f:fb:c9:1b:8e:b4:99:24:1c:e2:d5:3e:b3:3c:f0:e7:
d9:6f:2d:b7:c6:f8:97:99:d2:4d:b2:2c:bf:83:b3:5a:ac:7a:
e0:30:80:df:a5:96:63:cf:ce:88:80:b5:bc:82:c8:6e:2e:51:
86:fc:65:60:b1:fa:96:d1:2c:e8:c5:56:dc:dc:2e:2e:ce:ef:
ae:dd:93:27
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE4idEuU32zxv1Bx5gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTVhNjZiYTYtOTQ2OS00N2Y3LTgzMjgtZTEyYjIxYTli
ZTIzMB4XDTI2MDYxMTA5MDAxMloXDTI2MDkwOTA5MDAxMlowLzEtMCsGA1UEAxMk
YTU3MjBiN2UtOWI0Yy00MzVjLTk4OTYtYzNkYmU5NTIzMzBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMYgM24I9oFPGIwatekOOS2u7Sa0wrkWUy7g
tFwSZmS1pzR0XYg7+ZwTF0fIcr0tZUhWD3jtZhAqCI9+qA2J5laM8MWMDFhJHua4
3UuGdj90/MT9GF/VykV1IgUzm6GxcF4V1fu7kNDLGGwqZRSQAHb+Yy/3DXQ7mzMG
/yVA6mV/v92v6U/23UMCpXeAWpomMrdL1tdRzP2Pg4aAfWuzwQnPtXlIx17PMcNP
ia4x0zuKzein+qgKDX0fimuhIGBFlGLjpi3RMyJet65++yoreKRdKxvbz1IVFdq+
qsDJGwsshLLvOZwj6fBHPFEB6eS5iMXur/N5Cq7vRUjZuYnbqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvPmIQZKEyQQ3d2YMKoQU0N7sybMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2
NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJiMjFhOWJlMjMvYjY4MWQ1ZjctODU4OS0z
NTc5LWI3M2QtOTRkOTk5MWM4N2YyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTVhNjZiYTYtOTQ2OS00N2Y3LTgz
MjgtZTEyYjIxYTliZTIzLzk1YTY2YmE2LTk0NjktNDdmNy04MzI4LWUxMmIyMWE5
YmUyMy5jcmwwHwYDVR0jBBgwFoAUbVr2S8waBs0EFttNS+TmAqQIa4EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85NWE2NmJhNi05NDY5LTQ3ZjctODMyOC1lMTJi
MjFhOWJlMjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqvxsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAILQHiSzifU1wJt4T2e0WrsF6tL8iTuh8H4l6FgVvNL+oZeiKw6bxH1S
9wPC0wFZCe8WOcDPyu64W27G9x2lchLoc7Rk+sOtV0N2wQYEJ3O7Xi88ZDFKk7k5
xLLXrwfzKRDJyDRNc3S+5ymXjCnPay7mJug35oBTLmqHpf5Yhz47jtOa7UA/QrgS
2mYWmnk/iL4mwajJIkMkGlRqy/5pU4jrMQ8x7OGJCzB4hqBp0w55N1W4+0fBP/vJ
G460mSQc4tU+szzw59lvLbfG+JeZ0k2yLL+Ds1qseuAwgN+llmPPzoiAtbyCyG4u
UYb8ZWCx+pbRLOjFVtzcLi7O767dkyc=
-----END CERTIFICATE-----
Generated at Sat Jun 13 14:00:12 2026 by rpki-client