
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
File: 4abebfc4-4b83-3d10-9999-aafd39dd7329.roa (raw, json)
Hash identifier: HTzFjEqiwf7NQ3W5ysjGG+5UAcuP3jNedrC6360rS6A=
Subject key identifier: 3F:3E:48:05:AC:C2:60:4C:39:53:F6:A9:10:9E:DF:50:1C:59:03:6C
Certificate issuer: /CN=9c2a7225-dfea-460d-aa69-804ae5740036
Certificate serial: 010D0C9F4328584D1301019A96FBF560342D04C0
Authority key identifier: 95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 30221
IP address blocks: 68.68.192.0/20 maxlen: 24
68.68.208.0/21 maxlen: 24
68.68.216.0/24 maxlen: 24
68.68.218.0/24 maxlen: 24
68.68.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:13:01:01:9a:96:fb:f5:60:34:2d:04:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c2a7225-dfea-460d-aa69-804ae5740036
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=6d575359-9dd3-4608-ad25-985074c2536f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:90:2b:5a:1a:c2:fe:22:e2:8a:34:fd:29:5f:
15:73:69:71:a2:a0:71:19:68:20:e7:f7:7f:ee:83:
46:1f:db:57:c5:38:5f:b5:71:68:9d:53:0c:cc:68:
15:7b:0e:17:c8:b0:d0:0f:40:b1:d1:cc:cf:71:97:
47:57:60:a2:e3:44:d2:f0:78:20:fc:65:98:7b:c3:
f5:e0:8c:14:43:0c:24:3b:8f:fc:f6:87:db:f6:5e:
9a:b9:f5:3b:7f:e2:cc:93:db:0c:69:48:07:a2:a4:
73:68:2b:08:c0:08:3b:1e:f3:8e:62:eb:fb:a0:d1:
63:e1:6e:52:fe:ec:37:ec:75:0a:0c:7d:e9:fc:79:
d7:f0:77:2e:f7:4c:33:8c:2f:d0:fc:0a:6c:30:6e:
31:d0:7c:05:c6:d9:0e:fc:8b:07:6c:35:c5:04:43:
a8:05:ee:97:12:90:71:3e:3e:9b:11:3d:24:a4:9b:
ba:26:f2:17:43:59:0b:66:ed:f3:09:a9:3e:dd:ac:
a0:36:95:61:52:42:cf:bf:7e:fc:4a:89:0f:74:44:
3f:11:97:f4:c9:11:fc:fd:0b:e4:75:18:ab:d7:cd:
44:06:a4:59:a4:dd:26:fc:ae:37:94:f9:32:c9:90:
1a:ba:71:73:8e:eb:53:5c:d3:20:5f:4e:e4:f4:87:
de:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3E:48:05:AC:C2:60:4C:39:53:F6:A9:10:9E:DF:50:1C:59:03:6C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/4abebfc4-4b83-3d10-9999-aafd39dd7329.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036/9c2a7225-dfea-460d-aa69-804ae5740036.crl
X509v3 Authority Key Identifier:
keyid:95:8A:FE:C6:C8:33:09:58:81:3E:90:E8:EF:9E:C9:2C:3A:DB:77:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/9c2a7225-dfea-460d-aa69-804ae5740036.cer
sbgp-ipAddrBlock: critical
IPv4:
68.68.192.0-68.68.216.255
68.68.218.0/24
68.68.220.0/24
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:43:c4:fe:ca:25:5f:fc:d1:be:08:fd:a5:a9:94:36:26:0f:
2d:54:ac:90:b2:ea:b1:b9:ba:ae:a3:75:36:df:25:8c:ca:b8:
f1:fd:c8:01:2f:24:df:42:bb:11:0b:95:4c:0c:d4:4f:22:00:
a3:77:27:2e:5b:39:db:ca:39:30:27:d3:ed:e2:54:5a:c1:12:
5c:d2:4a:bb:28:99:5c:79:69:08:fc:3e:d8:1d:5c:9c:59:5f:
98:c2:d0:38:b9:e5:b7:85:e1:17:f4:dc:75:ab:01:0e:93:45:
05:02:0c:80:ad:1b:45:aa:52:41:5e:cf:a7:6a:15:99:b4:54:
dd:13:24:44:58:c4:c4:07:51:b7:73:9f:74:2f:64:d9:70:87:
5d:58:45:43:c7:83:99:32:3f:e1:bb:72:27:4b:a8:34:1b:d7:
6f:1f:36:95:89:66:cb:a1:0b:f4:8a:37:c7:2f:c0:46:0e:50:
be:c6:08:69:23:29:c6:a4:11:dc:57:19:91:99:9e:24:25:ba:
eb:9c:be:c0:03:d1:95:8e:fb:a6:e8:58:60:be:5b:61:14:a5:
97:2e:97:b1:60:e7:95:34:d1:20:d6:db:7a:02:7e:43:66:f3:
da:1d:0d:a0:e8:8e:c0:06:1b:dc:1c:b1:8e:08:0d:96:71:70:
4a:5d:c3:7a
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWE0TAQGalvv1YDQtBMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMyYTcyMjUtZGZlYS00NjBkLWFhNjktODA0YWU1NzQw
MDM2MB4XDTI2MDIyODAyMDAzMloXDTI2MDUyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NmQ1NzUzNTktOWRkMy00NjA4LWFkMjUtOTg1MDc0YzI1MzZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA75ArWhrC/iLiijT9KV8Vc2lxoqBxGWgg5/d/
7oNGH9tXxThftXFonVMMzGgVew4XyLDQD0Cx0czPcZdHV2Ci40TS8Hgg/GWYe8P1
4IwUQwwkO4/89ofb9l6aufU7f+LMk9sMaUgHoqRzaCsIwAg7HvOOYuv7oNFj4W5S
/uw37HUKDH3p/HnX8Hcu90wzjC/Q/ApsMG4x0HwFxtkO/IsHbDXFBEOoBe6XEpBx
Pj6bET0kpJu6JvIXQ1kLZu3zCak+3aygNpVhUkLPv378SokPdEQ/EZf0yRH8/Qvk
dRir181EBqRZpN0m/K43lPkyyZAaunFzjutTXNMgX07k9IfejwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFD8+SAWswmBMOVP2qRCe31AcWQNsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS85YzJh
NzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRhZTU3NDAwMzYvNGFiZWJmYzQtNGI4My0z
ZDEwLTk5OTktYWFmZDM5ZGQ3MzI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOWMyYTcyMjUtZGZlYS00NjBkLWFh
NjktODA0YWU1NzQwMDM2LzljMmE3MjI1LWRmZWEtNDYwZC1hYTY5LTgwNGFlNTc0
MDAzNi5jcmwwHwYDVR0jBBgwFoAUlYr+xsgzCViBPpDo757JLDrbd8MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS85YzJhNzIyNS1kZmVhLTQ2MGQtYWE2OS04MDRh
ZTU3NDAwMzYuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAZERMAD
BABERNgDBABERNoDBABERNwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAI0PE/solX/zRvgj9pamUNiYPLVSs
kLLqsbm6rqN1Nt8ljMq48f3IAS8k30K7EQuVTAzUTyIAo3cnLls528o5MCfT7eJU
WsESXNJKuyiZXHlpCPw+2B1cnFlfmMLQOLnlt4XhF/TcdasBDpNFBQIMgK0bRapS
QV7Pp2oVmbRU3RMkRFjExAdRt3OfdC9k2XCHXVhFQ8eDmTI/4btyJ0uoNBvXbx82
lYlmy6EL9Io3xy/ARg5QvsYIaSMpxqQR3FcZkZmeJCW665y+wAPRlY77puhYYL5b
YRSlly6XsWDnlTTRINbbegJ+Q2bz2h0NoOiOwAYb3ByxjggNlnFwSl3Deg==
-----END CERTIFICATE-----
Generated at Sun Mar 22 09:58:26 2026 by rpki-client