
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c58579-0dd6-358a-b62f-6b861c66f131.roa
File: 21c58579-0dd6-358a-b62f-6b861c66f131.roa (raw, json)
Hash identifier: 3VXv1uIQ9iEhcOuj5QPB4HpDXtufyQpOT8TGcbhjUOo=
Subject key identifier: 62:56:FF:DE:CE:8F:2B:34:BD:71:3B:38:1D:A6:82:78:FA:02:E9:A4
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F497F949B295DD972A879CD00
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c58579-0dd6-358a-b62f-6b861c66f131.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 22909
IP address blocks: 68.32.228.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 30 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:7f:94:9b:29:5d:d9:72:a8:79:cd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=3a75e153-0f73-4756-a52a-e196d541b217
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:70:c3:87:0b:a9:c6:94:80:78:33:9e:17:
7f:ea:b0:1b:7c:0c:e6:c6:98:db:75:4f:b6:7a:7b:
e6:2c:be:7b:00:6d:75:2a:ab:b1:b8:14:7f:03:e4:
3a:0c:0a:0e:86:4e:00:57:1e:1d:99:53:54:ac:ea:
7e:ca:d3:88:c5:fc:81:9d:59:1f:21:10:07:78:7a:
f5:9a:49:03:53:0e:61:14:21:6c:d2:6e:fd:39:df:
04:b9:19:a6:08:db:97:56:44:9e:99:ed:ba:49:35:
32:f8:23:96:d1:b2:c1:0b:9b:7f:3b:4f:e0:87:30:
d2:1b:d3:a6:24:c6:30:e0:ac:7e:7b:89:5e:2b:7e:
c2:3f:b8:a7:6a:76:a5:10:81:b0:02:b5:72:48:1f:
a5:a8:ea:27:8f:ab:af:fd:84:76:c1:c5:7d:f7:a5:
20:ab:c3:5a:b9:b0:dc:d4:62:a2:f2:71:4a:5d:11:
44:47:85:4e:1b:c2:06:ac:75:32:c0:ea:98:e3:27:
eb:4a:14:85:dc:a2:d0:81:1d:20:0e:48:a8:bb:68:
23:11:ba:aa:d3:0d:e4:15:99:46:95:d2:53:b9:56:
6b:12:eb:92:3b:13:34:1f:ca:99:65:0b:a8:df:e8:
fb:5f:f3:cb:74:4c:d3:4f:c6:6b:42:e7:14:21:de:
74:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:56:FF:DE:CE:8F:2B:34:BD:71:3B:38:1D:A6:82:78:FA:02:E9:A4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21c58579-0dd6-358a-b62f-6b861c66f131.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv4:
68.32.228.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:07:b2:2e:68:91:6a:ff:75:46:78:1b:a9:ff:bc:10:f9:01:
ee:00:1c:97:8b:57:ac:dd:6d:18:c1:76:2d:19:fb:cf:06:38:
03:f4:e5:8c:3b:0e:a8:e1:55:9f:6f:24:1f:3d:85:e8:61:d7:
46:02:0f:04:e0:23:b6:77:a7:14:a3:a9:bb:ca:51:f8:d0:93:
0e:6a:83:7c:9e:b8:67:27:ce:87:c9:0a:47:fe:4c:c4:a7:ad:
c7:80:3e:82:61:e7:56:b0:fb:f7:22:ae:3b:98:34:76:a3:16:
f4:0a:62:af:b9:07:26:e7:25:1b:bf:25:92:31:07:02:32:92:
b2:18:6e:bd:cf:bb:bc:0b:e6:ae:9a:7d:47:c2:92:f0:82:f4:
d9:5a:70:c8:24:2c:fe:fd:6f:0e:f9:81:b6:b7:2b:4f:4b:58:
a3:71:5e:a4:d1:58:96:9f:e9:96:44:d3:78:28:f0:a5:be:b0:
ec:cc:8a:52:30:07:34:6e:34:9d:32:95:38:68:97:1c:60:3b:
12:d7:54:e0:4c:a5:f2:0d:07:ff:98:35:07:18:16:73:b1:f0:
5e:6a:bf:09:70:ca:ac:dc:dd:a2:92:2a:ec:f1:75:de:8d:a7:
c4:71:4c:a1:a4:e9:92:58:11:a2:36:91:87:9d:a1:46:d4:cb:
ff:2d:3a:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE9Jf5SbKV3Zcqh5zQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2E3NWUxNTMtMGY3My00NzU2LWE1MmEtZTE5NmQ1NDFiMjE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02Rww4cLqcaUgHgznhd/6rAbfAzmxpjbdU+2
envmLL57AG11KquxuBR/A+Q6DAoOhk4AVx4dmVNUrOp+ytOIxfyBnVkfIRAHeHr1
mkkDUw5hFCFs0m79Od8EuRmmCNuXVkSeme26STUy+COW0bLBC5t/O0/ghzDSG9Om
JMYw4Kx+e4leK37CP7inanalEIGwArVySB+lqOonj6uv/YR2wcV996Ugq8NaubDc
1GKi8nFKXRFER4VOG8IGrHUywOqY4yfrShSF3KLQgR0gDkiou2gjEbqq0w3kFZlG
ldJTuVZrEuuSOxM0H8qZZQuo3+j7X/PLdEzTT8ZrQucUId50EwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGJW/97Ojys0vXE7OB2mgnj6AumkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFjNTg1NzktMGRkNi0z
NThhLWI2MmYtNmI4NjFjNjZmMTMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCRCDkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADMHsi5okWr/dUZ4G6n/vBD5Ae4AHJeLV6zdbRjBdi0Z+88GOAP05Yw7
DqjhVZ9vJB89hehh10YCDwTgI7Z3pxSjqbvKUfjQkw5qg3yeuGcnzofJCkf+TMSn
rceAPoJh51aw+/cirjuYNHajFvQKYq+5BybnJRu/JZIxBwIykrIYbr3Pu7wL5q6a
fUfCkvCC9NlacMgkLP79bw75gba3K09LWKNxXqTRWJaf6ZZE03go8KW+sOzMilIw
BzRuNJ0ylTholxxgOxLXVOBMpfINB/+YNQcYFnOx8F5qvwlwyqzc3aKSKuzxdd6N
p8RxTKGk6ZJYEaI2kYedoUbUy/8tOsQ=
-----END CERTIFICATE-----
Generated at Tue Sep 29 00:59:22 2026 by rpki-client