
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd57ff7f-7671-34be-a5cd-5c44eaf93267.roa
File: fd57ff7f-7671-34be-a5cd-5c44eaf93267.roa (raw, json)
Hash identifier: HuvMvRFvwKPxNyKkDBfqJZKA22cXqWjW64Ea8Wfi/tw=
Subject key identifier: D7:77:65:F0:CC:3A:FE:4D:5B:68:39:4D:B5:9D:39:EE:D5:8E:1D:70
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F7A4F9769DA86D6764B252B60
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd57ff7f-7671-34be-a5cd-5c44eaf93267.roa
Signing time: Mon 12 Oct 2026 13:00:12 +0000
ROA not before: Mon 12 Oct 2026 13:00:12 +0000
ROA not after: Sun 10 Jan 2027 14:00:12 +0000
asID: 33668
IP address blocks: 68.42.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 24 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7a:4f:97:69:da:86:d6:76:4b:25:2b:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Oct 12 13:00:12 2026 GMT
Not After : Jan 10 14:00:12 2027 GMT
Subject: CN=b9442bd4-264f-4dde-b959-54085e40796e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:92:67:be:d6:6c:ec:c0:06:61:44:45:eb:b6:
e5:99:e1:48:a1:f4:eb:b7:41:ed:8f:b3:27:6a:db:
a8:fa:e3:60:fe:9b:28:4d:75:d4:88:7d:45:f3:7a:
81:cb:0b:e4:d7:5d:38:4a:c5:1e:c7:f4:52:94:7f:
bb:19:37:fb:11:73:0e:a7:99:21:6d:c8:bd:cf:0c:
0b:c0:11:84:55:53:3e:96:99:6d:3e:8e:ca:3f:52:
d1:b5:8e:84:60:4d:04:6d:4f:4c:a4:e7:0b:79:c7:
e4:28:04:ea:48:3d:0a:08:09:91:36:c1:b7:e2:3f:
81:19:cb:2f:f7:ee:4b:99:05:af:c4:32:b2:f9:1b:
99:4a:90:92:cf:b3:cf:00:7d:25:1f:d3:48:d3:ab:
65:3b:92:aa:5f:fb:17:e7:4f:a6:10:cf:c0:0f:c5:
12:14:d6:56:87:2a:67:6d:42:69:b7:ba:98:4b:4f:
56:da:e4:e0:5a:9e:04:8a:c4:87:bd:31:e2:49:c3:
19:57:1c:7b:8b:12:5c:5f:70:b1:55:e1:9c:a7:ea:
f7:87:94:9f:15:7d:ee:07:79:0e:03:ec:5c:64:1f:
88:6e:36:fa:b7:c7:e2:9f:1d:2f:61:85:2e:31:ea:
be:02:45:9b:f7:de:39:fe:58:3e:2e:0f:33:7c:dd:
66:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:77:65:F0:CC:3A:FE:4D:5B:68:39:4D:B5:9D:39:EE:D5:8E:1D:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/fd57ff7f-7671-34be-a5cd-5c44eaf93267.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.42.106.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8f:7a:a7:60:37:16:0a:17:f5:72:0c:51:81:8a:1f:2b:e3:d7:
99:93:68:fe:63:64:fb:20:ba:a5:1b:0a:fb:98:d5:a0:a1:d5:
ef:80:df:1b:8c:1a:52:93:ba:a5:ec:23:55:9d:3b:de:36:ac:
11:4f:92:41:55:b0:83:fd:66:d8:c4:2a:81:2d:e1:d9:b6:cb:
c7:88:4a:12:7f:03:93:8b:1d:d8:bb:fa:82:7c:b5:13:30:c0:
4d:53:9b:8d:95:5a:dd:5e:ff:fc:16:c8:6c:6a:83:d9:6a:b9:
45:59:64:c3:03:fa:f5:5b:55:33:dc:1d:2b:ee:5d:7a:17:bb:
33:68:50:9e:e1:7f:3e:8e:50:03:f8:c5:4f:ce:f9:60:cf:e7:
94:03:72:a6:38:c7:b9:f4:9a:00:ab:81:73:a1:e4:05:30:5c:
84:69:aa:5f:71:bb:3b:15:31:d4:3d:ed:d1:e4:d6:de:c5:a0:
bc:41:7c:8f:36:0f:19:69:c9:26:fc:c1:57:7d:c3:66:b5:68:
de:34:fe:30:e4:89:03:30:1a:46:46:ba:7e:84:10:19:0d:b7:
b1:23:2e:6b:28:9a:50:fb:76:45:4a:66:64:1c:99:92:c7:c7:
cd:1a:d4:46:dd:d3:b7:3c:d9:0a:4f:60:84:46:33:da:0d:66:
20:b2:f2:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE96T5dp2obWdkslK2AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MTAxMjEzMDAxMloXDTI3MDExMDE0MDAxMlowLzEtMCsGA1UEAxMk
Yjk0NDJiZDQtMjY0Zi00ZGRlLWI5NTktNTQwODVlNDA3OTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx5JnvtZs7MAGYURF67blmeFIofTrt0Htj7Mn
atuo+uNg/psoTXXUiH1F83qBywvk1104SsUex/RSlH+7GTf7EXMOp5khbci9zwwL
wBGEVVM+lpltPo7KP1LRtY6EYE0EbU9MpOcLecfkKATqSD0KCAmRNsG34j+BGcsv
9+5LmQWvxDKy+RuZSpCSz7PPAH0lH9NI06tlO5KqX/sX50+mEM/AD8USFNZWhypn
bUJpt7qYS09W2uTgWp4EisSHvTHiScMZVxx7ixJcX3CxVeGcp+r3h5SfFX3uB3kO
A+xcZB+Ibjb6t8finx0vYYUuMeq+AkWb9945/lg+Lg8zfN1mEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNd3ZfDMOv5NW2g5TbWdOe7Vjh1wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZmQ1N2ZmN2YtNzY3MS0z
NGJlLWE1Y2QtNWM0NGVhZjkzMjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARCpqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI96p2A3FgoX9XIMUYGKHyvj15mTaP5jZPsguqUbCvuY1aCh1e+A3xuM
GlKTuqXsI1WdO942rBFPkkFVsIP9ZtjEKoEt4dm2y8eIShJ/A5OLHdi7+oJ8tRMw
wE1Tm42VWt1e//wWyGxqg9lquUVZZMMD+vVbVTPcHSvuXXoXuzNoUJ7hfz6OUAP4
xU/O+WDP55QDcqY4x7n0mgCrgXOh5AUwXIRpql9xuzsVMdQ97dHk1t7FoLxBfI82
DxlpySb8wVd9w2a1aN40/jDkiQMwGkZGun6EEBkNt7EjLmsomlD7dkVKZmQcmZLH
x80a1Ebd07c82QpPYIRGM9oNZiCy8pg=
-----END CERTIFICATE-----
Generated at Thu Oct 22 13:45:49 2026 by rpki-client