
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa
File: bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa (raw, json)
Hash identifier: vYqualsRWQHTl7E3+i4700W1ikHOgQLk4mCKYWMeOhk=
Subject key identifier: C2:7B:B6:ED:3E:4A:D5:81:6F:F2:D9:BA:7F:86:0E:E6:6D:25:97:BA
Certificate issuer: /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial: 010D0C9F4328584DFD3B1BCFE3632526CE608900
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa
Signing time: Fri 29 May 2026 01:00:10 +0000
ROA not before: Fri 29 May 2026 01:00:10 +0000
ROA not after: Thu 27 Aug 2026 01:00:10 +0000
asID: 153383
IP address blocks: 69.33.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 15 Jun 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fd:3b:1b:cf:e3:63:25:26:ce:60:89:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
Validity
Not Before: May 29 01:00:10 2026 GMT
Not After : Aug 27 01:00:10 2026 GMT
Subject: CN=52699a12-4b8d-4383-b09a-79c8cae5a938
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:c1:06:f7:00:96:0c:08:00:aa:ba:38:ac:fa:
4f:20:2d:f6:82:ff:ef:78:77:27:a9:bc:4d:bc:6b:
25:8f:09:67:00:90:3e:ec:83:18:ea:62:c9:82:d1:
3f:9e:fc:c3:31:fb:99:54:a6:52:f9:f3:49:50:95:
db:3a:13:20:cf:09:83:48:b8:83:98:22:9c:bc:14:
e4:6b:69:02:01:40:07:bd:66:53:8e:b6:ba:c8:8f:
b7:17:eb:4d:95:13:0a:a8:d4:24:89:8c:6b:4c:09:
f5:73:04:f4:b1:36:79:c5:04:cb:4e:3e:c6:7c:11:
15:78:db:7a:75:ae:15:2d:fa:84:94:b3:84:7f:ae:
46:c1:35:a2:ad:ad:8c:65:97:7d:aa:e5:d5:a6:38:
60:c0:11:7c:1d:20:a5:ab:b5:9a:d9:fe:11:8b:be:
af:88:dc:dd:c5:75:60:ee:40:f6:c3:79:90:91:08:
96:a9:bb:32:5f:8f:a4:a9:3b:20:c3:10:ae:8b:2b:
f4:8b:e8:de:9f:df:11:eb:79:a4:73:34:3d:74:4c:
a6:e2:da:87:79:1d:d4:11:20:9d:2d:b0:91:7f:33:
2a:a7:81:15:2a:d4:d5:0e:bc:47:1c:40:f5:1a:02:
a1:58:3f:63:13:fb:d8:a0:7d:23:ed:cc:6a:8a:a6:
dd:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:7B:B6:ED:3E:4A:D5:81:6F:F2:D9:BA:7F:86:0E:E6:6D:25:97:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/bba9411a-2230-3b21-9d16-d2a0bd16a2a7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
X509v3 Authority Key Identifier:
keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
sbgp-ipAddrBlock: critical
IPv4:
69.33.68.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:74:81:ae:fd:c4:4d:c8:c7:08:52:4b:94:9f:a0:b8:5b:1a:
bb:15:22:42:42:d5:b1:c9:d3:f0:9f:3f:ec:18:6a:66:c7:74:
a6:01:e9:09:fb:18:d0:25:bc:2d:ab:8a:b3:86:a3:ba:38:a0:
82:ff:11:50:5d:d6:eb:3c:6e:bb:12:5e:0d:99:64:92:40:40:
b7:d7:cf:f5:0c:dd:ac:23:df:b7:8c:2b:ed:53:61:6c:7d:10:
01:c1:f9:1d:a7:d1:d2:12:f5:e5:c1:f9:86:52:1a:76:27:39:
2c:5c:63:98:25:3a:ec:ed:3a:5c:33:41:60:3e:f3:9d:e2:bf:
64:cc:59:54:8d:49:99:90:96:ad:9a:b8:4b:42:e0:8f:41:39:
3f:a5:1e:25:a0:21:c8:af:ed:46:9a:4c:20:4b:d7:bf:6c:c4:
71:f9:23:2b:b8:0b:51:b1:0d:d2:be:6c:d9:43:0b:46:6b:7a:
f9:b6:b7:24:4b:9a:99:3b:db:45:fd:ea:f0:62:0d:ec:dd:6a:
ab:15:f1:39:c4:f9:ac:ae:cd:4a:12:83:f9:65:89:95:b3:24:
ab:8d:d8:26:b2:65:7f:20:02:07:29:8e:d9:8a:60:2d:eb:8d:
7c:34:41:3d:d2:b7:75:df:36:49:e1:d0:37:20:89:9d:9c:b0:
5e:4f:c7:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE39OxvP42MlJs5giQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI2MDUyOTAxMDAxMFoXDTI2MDgyNzAxMDAxMFowLzEtMCsGA1UEAxMk
NTI2OTlhMTItNGI4ZC00MzgzLWIwOWEtNzljOGNhZTVhOTM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnsEG9wCWDAgAqro4rPpPIC32gv/veHcnqbxN
vGsljwlnAJA+7IMY6mLJgtE/nvzDMfuZVKZS+fNJUJXbOhMgzwmDSLiDmCKcvBTk
a2kCAUAHvWZTjra6yI+3F+tNlRMKqNQkiYxrTAn1cwT0sTZ5xQTLTj7GfBEVeNt6
da4VLfqElLOEf65GwTWira2MZZd9quXVpjhgwBF8HSClq7Wa2f4Ri76viNzdxXVg
7kD2w3mQkQiWqbsyX4+kqTsgwxCuiyv0i+jen98R63mkczQ9dEym4tqHeR3UESCd
LbCRfzMqp4EVKtTVDrxHHED1GgKhWD9jE/vYoH0j7cxqiqbdpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ7tu0+StWBb/LZun+GDuZtJZe6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYmJhOTQxMWEtMjIzMC0z
YjIxLTlkMTYtZDJhMGJkMTZhMmE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRSFEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADd0ga79xE3IxwhSS5SfoLhbGrsVIkJC1bHJ0/CfP+wYambHdKYB6Qn7
GNAlvC2rirOGo7o4oIL/EVBd1us8brsSXg2ZZJJAQLfXz/UM3awj37eMK+1TYWx9
EAHB+R2n0dIS9eXB+YZSGnYnOSxcY5glOuztOlwzQWA+853iv2TMWVSNSZmQlq2a
uEtC4I9BOT+lHiWgIciv7UaaTCBL179sxHH5Iyu4C1GxDdK+bNlDC0Zrevm2tyRL
mpk720X96vBiDezdaqsV8TnE+ayuzUoSg/lliZWzJKuN2CayZX8gAgcpjtmKYC3r
jXw0QT3St3XfNknh0DcgiZ2csF5PxyQ=
-----END CERTIFICATE-----
Generated at Sat Jun 13 22:14:10 2026 by rpki-client