
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b22147d4-9972-3e6c-b5f2-1ee97dfcc87f.roa
File: b22147d4-9972-3e6c-b5f2-1ee97dfcc87f.roa (raw, json)
Hash identifier: C4AsScFZeeaW9A7Wxx00Lgh3eGzd1BUMwCkdSsg2MiI=
Subject key identifier: 57:69:8C:29:80:BE:BB:9F:09:65:C0:9B:04:A2:4C:AF:61:E1:1C:8D
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F8D109CCFD3CF7442B080
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b22147d4-9972-3e6c-b5f2-1ee97dfcc87f.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.34.108.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 22 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:8d:10:9c:cf:d3:cf:74:42:b0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=4ce4ab5e-6e3b-4611-906f-5e29ea4118d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:07:33:fb:4c:41:a3:8f:d3:ec:27:3b:27:84:
c8:04:64:d9:0a:0b:64:92:d3:d0:74:87:99:97:26:
96:4d:33:9d:60:ad:b6:cf:f5:ea:b0:d0:b0:39:97:
d4:85:dc:71:49:d3:4d:58:0b:95:24:20:f3:a4:a8:
2b:8b:cc:f0:76:a7:b8:87:71:2f:6c:5d:a5:6b:8d:
8f:10:6b:82:1e:9f:de:1f:94:fe:69:d6:6a:82:ba:
6a:21:d3:54:49:d7:eb:99:d5:90:f6:ef:42:07:05:
56:fa:58:f6:12:10:84:3c:be:36:b4:21:e8:d3:40:
53:02:05:dd:fa:12:4a:e0:bf:a9:88:65:90:c1:88:
c9:fe:0c:84:31:ac:44:78:72:b6:cb:a4:11:5c:2c:
b1:83:49:0b:21:a8:32:79:2c:f1:bb:08:7b:25:41:
5b:6d:45:ee:a5:de:61:61:02:9b:80:0e:25:3f:f6:
70:c4:20:3d:bb:d4:f9:9e:fb:be:89:96:22:b9:95:
27:d8:ef:eb:d7:4e:74:e1:f8:e6:c9:17:65:02:33:
b3:49:d7:65:f8:35:51:a4:c5:f0:84:42:fc:31:d3:
fd:38:19:45:3a:4b:39:1e:67:e2:bc:5e:15:c9:d2:
cc:8c:90:f0:df:18:00:11:32:37:9b:82:5a:c9:d6:
94:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:69:8C:29:80:BE:BB:9F:09:65:C0:9B:04:A2:4C:AF:61:E1:1C:8D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b22147d4-9972-3e6c-b5f2-1ee97dfcc87f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.34.108.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:83:ee:24:62:49:f1:c3:38:db:ff:be:bf:1a:ee:c8:a1:94:
1d:5f:de:b4:7d:60:9d:9a:48:5e:b8:36:7f:4c:6a:aa:6b:33:
b3:c6:e0:17:61:be:00:d4:19:42:43:6a:c1:5c:ab:94:10:6e:
0a:b9:76:30:88:c4:aa:0a:52:d2:85:f2:d3:79:a5:4a:9b:5f:
fd:53:d2:e5:af:6b:db:c1:18:67:0b:64:7c:0e:8d:56:57:f9:
bd:ea:c2:2a:de:c6:29:4f:90:a7:7a:bc:5f:68:81:26:28:62:
e7:9e:1f:64:99:9a:89:11:f2:0f:dc:79:77:26:8c:d3:c5:dc:
5f:0d:6f:ed:1b:6c:b9:7f:e4:c9:7c:de:54:a0:9d:17:dc:fe:
39:99:a9:53:8f:9f:28:5f:b9:5b:95:a6:62:42:a0:69:9e:47:
3a:77:52:57:6f:1a:63:f1:b8:bb:54:26:65:b7:3b:3a:b2:ac:
0d:20:f4:79:52:33:b6:d1:e0:9b:67:65:d9:f1:64:4e:6c:29:
d2:30:98:3c:46:70:13:0f:cd:ea:94:62:51:05:5d:cb:5b:98:
17:b6:7c:c7:16:13:94:59:ba:ad:fe:eb:94:63:2c:04:de:7d:
ad:c3:62:3e:58:a4:fc:6f:1e:6b:3c:62:44:ea:eb:28:28:15:
79:2d:2b:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T40QnM/Tz3RCsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
NGNlNGFiNWUtNmUzYi00NjExLTkwNmYtNWUyOWVhNDExOGQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgQcz+0xBo4/T7Cc7J4TIBGTZCgtkktPQdIeZ
lyaWTTOdYK22z/XqsNCwOZfUhdxxSdNNWAuVJCDzpKgri8zwdqe4h3EvbF2la42P
EGuCHp/eH5T+adZqgrpqIdNUSdfrmdWQ9u9CBwVW+lj2EhCEPL42tCHo00BTAgXd
+hJK4L+piGWQwYjJ/gyEMaxEeHK2y6QRXCyxg0kLIagyeSzxuwh7JUFbbUXupd5h
YQKbgA4lP/ZwxCA9u9T5nvu+iZYiuZUn2O/r10504fjmyRdlAjOzSddl+DVRpMXw
hEL8MdP9OBlFOks5HmfivF4VydLMjJDw3xgAETI3m4JaydaUXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFdpjCmAvrufCWXAmwSiTK9h4RyNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjIyMTQ3ZDQtOTk3Mi0z
ZTZjLWI1ZjItMWVlOTdkZmNjODdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCJsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABCD7iRiSfHDONv/vr8a7sihlB1f3rR9YJ2aSF64Nn9MaqprM7PG4Bdh
vgDUGUJDasFcq5QQbgq5djCIxKoKUtKF8tN5pUqbX/1T0uWva9vBGGcLZHwOjVZX
+b3qwirexilPkKd6vF9ogSYoYueeH2SZmokR8g/ceXcmjNPF3F8Nb+0bbLl/5Ml8
3lSgnRfc/jmZqVOPnyhfuVuVpmJCoGmeRzp3UldvGmPxuLtUJmW3OzqyrA0g9HlS
M7bR4JtnZdnxZE5sKdIwmDxGcBMPzeqUYlEFXctbmBe2fMcWE5RZuq3+65RjLATe
fa3DYj5YpPxvHms8YkTq6ygoFXktK94=
-----END CERTIFICATE-----
Generated at Tue Oct 20 18:29:48 2026 by rpki-client