
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b855ae33-c431-3a06-8f0a-9e53a82761b1.roa
File: b855ae33-c431-3a06-8f0a-9e53a82761b1.roa (raw, json)
Hash identifier: F7Yzcm493EpgAhKG2H3np5K4xBKDlJKACeJon+uudM4=
Subject key identifier: 3F:D7:1B:00:6F:9D:D2:A5:1D:83:C0:AD:CA:40:DF:6F:86:DE:DA:F3
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F97F05580BD37649AB480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b855ae33-c431-3a06-8f0a-9e53a82761b1.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.42.170.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 26 Oct 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:97:f0:55:80:bd:37:64:9a:b4:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=885558dc-97f7-43d4-829a-c4c6dcc1f7d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:31:1e:09:d1:4f:e7:d0:48:71:9f:b9:1b:0d:
c7:35:cd:8c:b4:d5:29:43:c7:a3:fa:09:2d:51:07:
0c:12:6d:7f:85:d9:e9:ce:6a:15:2c:5e:fd:46:26:
46:4f:46:f9:08:67:07:3f:05:60:14:84:2f:ae:54:
11:14:68:9f:f0:97:03:79:2d:4d:75:34:f0:f3:9f:
4c:d4:b1:b1:41:ea:88:a5:83:83:e2:df:49:92:4b:
ff:6c:ec:8c:35:86:c7:f3:6e:0b:51:8a:7a:b9:f5:
33:44:eb:3d:d6:66:d5:c7:1c:c1:c4:a7:da:2f:9d:
77:14:fd:8b:99:fc:00:09:9e:e0:74:44:d1:bf:36:
a5:5a:be:70:4d:c1:d4:16:81:f8:f6:ff:1d:35:6d:
64:49:18:42:24:5e:1e:b1:3c:a5:18:bb:6e:97:41:
40:4b:99:72:ea:31:84:73:3a:d1:47:e8:8c:dc:9e:
19:2b:66:a2:6d:06:d6:82:4e:ea:45:b0:3a:e5:4a:
48:67:f5:74:18:2e:46:30:0b:1b:c2:59:65:8f:f3:
f6:e0:d6:4f:85:9d:92:98:42:7e:33:59:f2:af:ed:
a9:d7:9c:dd:bc:d0:50:a2:38:73:51:07:25:e7:81:
85:0e:e4:22:7f:08:62:ce:3f:94:16:e6:5b:b2:e7:
bb:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D7:1B:00:6F:9D:D2:A5:1D:83:C0:AD:CA:40:DF:6F:86:DE:DA:F3
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/b855ae33-c431-3a06-8f0a-9e53a82761b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.170.0/23
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:7a:1b:c1:bf:9e:49:90:02:93:a4:1e:27:5f:0a:02:a9:ee:
e1:13:9b:11:a5:3a:f2:a3:4b:2e:3d:26:ac:b7:18:b2:c1:86:
c5:5b:42:6e:11:d3:ca:db:09:1f:15:86:06:84:98:68:ac:7e:
66:e8:c3:47:33:4f:f9:61:3a:cb:1a:2c:e8:d1:00:19:d9:da:
cb:a9:b0:2c:e8:9f:2f:48:8e:47:01:7f:54:b4:03:a8:92:8f:
18:14:b8:45:52:56:48:bd:35:22:9a:11:09:f1:4d:c7:33:6b:
ae:16:8f:0a:34:cf:96:d4:8c:11:d9:31:e3:bb:d6:1d:c9:d4:
e4:fb:2b:5e:1c:54:95:42:4a:5a:6c:5b:77:c7:59:13:a6:23:
1e:ad:42:6d:92:2d:69:60:2e:df:ba:f7:5b:a6:81:e0:95:83:
08:56:e3:30:9a:1d:8e:b7:f5:9a:a5:eb:b5:ba:fc:2e:49:43:
fb:98:ef:df:fd:9e:e1:2e:e4:ce:9a:83:a9:02:01:1f:54:85:
80:43:ae:ea:61:f9:0a:12:e5:58:93:0e:31:95:d2:2f:05:28:
99:03:03:4a:61:20:24:ab:09:2d:cf:59:a0:5b:3c:c1:e8:34:
2d:ea:49:d4:fd:b4:d8:5a:dc:17:94:e0:ff:bb:59:a3:11:57:
e8:b8:50:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5fwVYC9N2SatIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
ODg1NTU4ZGMtOTdmNy00M2Q0LTgyOWEtYzRjNmRjYzFmN2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjEeCdFP59BIcZ+5Gw3HNc2MtNUpQ8ej+gkt
UQcMEm1/hdnpzmoVLF79RiZGT0b5CGcHPwVgFIQvrlQRFGif8JcDeS1NdTTw859M
1LGxQeqIpYOD4t9Jkkv/bOyMNYbH824LUYp6ufUzROs91mbVxxzBxKfaL513FP2L
mfwACZ7gdETRvzalWr5wTcHUFoH49v8dNW1kSRhCJF4esTylGLtul0FAS5ly6jGE
czrRR+iM3J4ZK2aibQbWgk7qRbA65UpIZ/V0GC5GMAsbwlllj/P24NZPhZ2SmEJ+
M1nyr+2p15zdvNBQojhzUQcl54GFDuQifwhizj+UFuZbsue7rwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/XGwBvndKlHYPArcpA32+G3trzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYjg1NWFlMzMtYzQzMS0z
YTA2LThmMGEtOWU1M2E4Mjc2MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRCqqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABh6G8G/nkmQApOkHidfCgKp7uETmxGlOvKjSy49Jqy3GLLBhsVbQm4R
08rbCR8VhgaEmGisfmbow0czT/lhOssaLOjRABnZ2supsCzony9IjkcBf1S0A6iS
jxgUuEVSVki9NSKaEQnxTccza64Wjwo0z5bUjBHZMeO71h3J1OT7K14cVJVCSlps
W3fHWROmIx6tQm2SLWlgLt+691umgeCVgwhW4zCaHY639Zql67W6/C5JQ/uY79/9
nuEu5M6ag6kCAR9UhYBDruph+QoS5ViTDjGV0i8FKJkDA0phICSrCS3PWaBbPMHo
NC3qSdT9tNha3BeU4P+7WaMRV+i4UBc=
-----END CERTIFICATE-----
Generated at Sun Oct 25 12:09:37 2026 by rpki-client