
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa
File: 4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa (raw, json)
Hash identifier: EvYzIcANKIjFsubLaJddEgB9YKjT5Ov4KccFCaOwXTM=
Subject key identifier: 4C:A1:CE:17:DE:60:13:4F:A9:16:FB:B1:67:86:D1:B6:C9:B2:CA:5B
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4E748C7D6831899D6E0580
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.59.20.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4e:74:8c:7d:68:31:89:9d:6e:05:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=94003233-e532-436d-b390-7a2536f36cd7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:55:3c:2b:fe:7b:43:3f:56:e1:61:33:eb:78:
3b:f9:44:3f:b7:9f:0f:16:dc:a0:34:91:08:d6:6f:
86:8b:55:e9:2a:2d:93:cc:4f:9f:d1:42:c3:a2:8d:
e8:1b:d8:ae:9c:f0:a0:5d:3c:28:95:ea:47:de:a8:
59:c0:4c:e4:55:1d:7a:4a:ce:aa:cf:fb:91:d3:d1:
5b:be:25:23:53:2f:5b:99:28:c8:ea:86:07:af:6e:
18:76:55:e6:d7:fb:7f:cf:e6:b7:2f:ed:5d:60:f0:
9c:76:e2:7a:1e:f0:e6:4d:94:32:5e:31:5a:64:ae:
e5:16:90:0d:3e:d3:49:34:0c:7a:94:92:19:d0:22:
ce:b3:d7:73:69:af:82:18:77:d8:3f:9b:24:9f:44:
fd:5d:bb:6d:8a:49:64:50:c3:4a:f9:97:5b:52:d7:
0b:5b:fb:8c:b2:0b:98:e2:31:28:18:e9:5e:10:14:
eb:03:2d:a4:51:b0:67:c1:9a:8b:0a:57:fc:91:ee:
44:e0:4e:2f:bd:18:b1:e3:41:c7:7e:37:a4:a4:f0:
27:3a:b6:81:d6:0a:e2:7b:5f:74:4f:e2:5b:86:5c:
ca:80:37:77:3f:6b:bb:3d:d7:21:f7:57:3c:36:2d:
97:e5:e5:e8:f1:eb:9e:d5:52:01:ec:cf:4d:d1:8d:
a4:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:A1:CE:17:DE:60:13:4F:A9:16:FB:B1:67:86:D1:B6:C9:B2:CA:5B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4cac2f2f-b57f-30e0-8ebb-8deae300ddaf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.59.20.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5c:75:ed:69:ea:6b:3c:ae:26:f4:e1:1a:b5:a2:f6:64:16:4d:
b9:46:a7:75:ee:b0:1b:63:db:f2:6a:a2:3a:fb:85:d1:10:c5:
43:63:a2:be:10:a2:c9:ca:17:c7:6b:2c:f9:e3:af:ff:50:15:
6b:70:9c:66:12:f6:f7:28:0d:50:63:83:a6:33:5f:f3:a2:dd:
98:d0:93:a3:ad:b3:ab:59:61:e9:22:b5:cf:95:f6:0e:65:c1:
64:23:c2:e0:d5:f8:39:45:fb:aa:10:88:f3:b6:e6:20:f9:1e:
59:b6:f5:91:dd:1e:ba:05:d6:f0:1b:25:d8:07:81:ef:66:d2:
52:4d:b1:22:cb:94:fe:b4:5c:54:c3:5b:62:5f:21:fd:cb:06:
97:7a:2c:70:39:67:6e:59:bc:c4:7a:b2:b2:93:ff:cc:d2:3d:
f9:9b:ac:9b:8c:a1:97:ee:49:71:0f:44:f7:85:dd:c3:a3:f8:
1d:5e:5b:d6:a8:d0:6d:eb:da:2a:62:6a:92:d1:53:40:7f:67:
70:0e:94:b3:93:1b:26:3b:c8:a8:de:d2:90:b5:82:6d:31:6a:
b4:41:35:38:92:c6:f5:4f:2a:c4:7e:02:1d:5b:35:7e:ce:8d:
ed:e3:9a:f1:6f:25:aa:26:ce:dc:34:bc:f0:e7:e2:d8:98:aa:
08:1d:53:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96TnSMfWgxiZ1uBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
OTQwMDMyMzMtZTUzMi00MzZkLWIzOTAtN2EyNTM2ZjM2Y2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjVU8K/57Qz9W4WEz63g7+UQ/t58PFtygNJEI
1m+Gi1XpKi2TzE+f0ULDoo3oG9iunPCgXTwolepH3qhZwEzkVR16Ss6qz/uR09Fb
viUjUy9bmSjI6oYHr24YdlXm1/t/z+a3L+1dYPCcduJ6HvDmTZQyXjFaZK7lFpAN
PtNJNAx6lJIZ0CLOs9dzaa+CGHfYP5skn0T9XbttiklkUMNK+ZdbUtcLW/uMsguY
4jEoGOleEBTrAy2kUbBnwZqLClf8ke5E4E4vvRix40HHfjekpPAnOraB1grie190
T+JbhlzKgDd3P2u7Pdch91c8Ni2X5eXo8eue1VIB7M9N0Y2kNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEyhzhfeYBNPqRb7sWeG0bbJsspbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNGNhYzJmMmYtYjU3Zi0z
MGUwLThlYmItOGRlYWUzMDBkZGFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRDsUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFx17WnqazyuJvThGrWi9mQWTblGp3XusBtj2/Jqojr7hdEQxUNjor4Q
osnKF8drLPnjr/9QFWtwnGYS9vcoDVBjg6YzX/Oi3ZjQk6Ots6tZYekitc+V9g5l
wWQjwuDV+DlF+6oQiPO25iD5Hlm29ZHdHroF1vAbJdgHge9m0lJNsSLLlP60XFTD
W2JfIf3LBpd6LHA5Z25ZvMR6srKT/8zSPfmbrJuMoZfuSXEPRPeF3cOj+B1eW9ao
0G3r2ipiapLRU0B/Z3AOlLOTGyY7yKje0pC1gm0xarRBNTiSxvVPKsR+Ah1bNX7O
je3jmvFvJaomztw0vPDn4tiYqggdU2k=
-----END CERTIFICATE-----
Generated at Sat Oct 24 13:44:52 2026 by rpki-client