
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/68e60398-0e92-3551-aa82-a7c3d267ff55.roa
File: 68e60398-0e92-3551-aa82-a7c3d267ff55.roa (raw, json)
Hash identifier: sIT6mST3qO7tEyVlej9k8ACcpE4/TT+3wxwX+0VY0uA=
Subject key identifier: ED:61:7F:43:10:1F:CA:04:29:B4:7A:29:37:02:3C:9B:DA:E2:EE:B6
Certificate issuer: /CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Certificate serial: 010D0C9F4328584D9FB574C7DCB4E53F217CABF8
Authority key identifier: EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/68e60398-0e92-3551-aa82-a7c3d267ff55.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 52129
IP address blocks: 66.159.244.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:74:c7:dc:b4:e5:3f:21:7c:ab:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6e9c5894-f794-4209-a00d-cf232363d7c6
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=951b5848-cbf3-4792-b76b-ce87a85f6018
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c8:e9:57:c4:72:79:05:6e:37:5f:bf:25:c4:
ec:48:3b:ef:16:15:b0:0a:85:af:4a:26:be:82:fa:
79:a8:8b:5d:72:d6:03:c0:4f:48:07:9c:3c:d1:d2:
de:c0:32:22:ca:b1:37:9d:11:ca:6c:d2:3d:2d:f1:
11:00:8a:cb:8a:d4:6d:eb:fe:49:43:ba:98:57:63:
77:79:bf:6c:70:d8:aa:d9:57:d1:9e:a6:56:fd:32:
ba:c4:0a:66:e9:db:d2:0f:c0:49:af:48:24:b9:fd:
24:18:d3:4c:04:35:8d:9c:3c:b8:4a:cc:a6:9e:8f:
06:38:39:c7:d7:36:96:71:05:30:11:40:2c:2e:c7:
5c:a3:42:63:52:ca:b0:79:e0:fd:3a:6d:b9:fa:9b:
10:7c:f8:86:2f:a4:25:09:ca:07:69:89:dd:83:df:
6c:32:b4:cf:67:88:ca:28:ef:c4:e9:80:9e:6e:68:
2a:b2:02:9f:21:dc:26:06:f8:94:df:33:80:67:e9:
67:ba:a5:55:45:52:c2:2a:f1:54:55:c0:4c:91:81:
32:f9:de:90:e6:e4:5c:a6:64:76:1b:25:d4:49:17:
1e:c9:1b:a3:88:87:b4:dc:c8:34:cd:f6:e4:32:f2:
c7:be:6a:a1:97:c0:3a:21:c1:9f:06:99:57:b2:06:
5c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:61:7F:43:10:1F:CA:04:29:B4:7A:29:37:02:3C:9B:DA:E2:EE:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/68e60398-0e92-3551-aa82-a7c3d267ff55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6/6e9c5894-f794-4209-a00d-cf232363d7c6.crl
X509v3 Authority Key Identifier:
keyid:EB:6D:3E:D4:C8:21:B9:96:11:9E:0C:09:FF:5D:B7:88:80:52:94:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6e9c5894-f794-4209-a00d-cf232363d7c6.cer
sbgp-ipAddrBlock: critical
IPv4:
66.159.244.0/22
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:e3:bc:0a:b9:75:e2:d5:fb:ab:42:11:b9:b6:0e:6d:9d:85:
b9:42:25:5a:3e:d3:2a:85:ac:91:2d:0a:97:b4:4c:57:3c:91:
ac:b6:92:b0:23:86:95:21:65:99:59:53:b5:53:e4:5c:a0:b4:
76:fa:d6:19:c3:e8:6d:35:4c:39:47:92:94:92:2a:9d:a0:e2:
bc:75:cb:ca:e4:92:49:d2:77:b3:19:9d:80:55:49:ad:29:14:
d8:03:0e:96:27:1d:3a:79:c4:12:de:fd:34:fd:5a:2f:ff:12:
de:24:47:40:72:ce:7b:8e:ec:ee:3d:62:d6:c7:54:48:d0:30:
9b:b9:9d:c2:bf:df:36:b6:e0:1d:06:04:bc:49:b4:12:47:59:
5f:dd:94:0b:91:9f:75:4b:b6:b0:e7:81:47:6a:82:ce:27:48:
7a:a5:2a:cd:db:90:7e:1e:66:83:d8:e3:40:35:2a:88:17:b8:
f9:ff:38:22:29:0f:f7:ed:8b:46:8b:26:e3:fb:6e:da:8b:0b:
09:21:7b:6e:dc:ff:5e:d2:f0:c6:33:71:6d:d8:99:f4:aa:93:
dc:b0:45:ba:d1:f9:8e:74:a7:b1:7b:4f:8f:64:5e:01:c9:54:
0c:c4:0f:7c:ce:c8:96:75:16:ef:e6:61:cf:e1:3e:a1:04:20:
f5:c0:f0:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWE2ftXTH3LTlPyF8q/gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmU5YzU4OTQtZjc5NC00MjA5LWEwMGQtY2YyMzIzNjNk
N2M2MB4XDTI2MDQyNTEzMDAzMFoXDTI2MDcyNDEzMDAzMFowLzEtMCsGA1UEAxMk
OTUxYjU4NDgtY2JmMy00NzkyLWI3NmItY2U4N2E4NWY2MDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsjpV8RyeQVuN1+/JcTsSDvvFhWwCoWvSia+
gvp5qItdctYDwE9IB5w80dLewDIiyrE3nRHKbNI9LfERAIrLitRt6/5JQ7qYV2N3
eb9scNiq2VfRnqZW/TK6xApm6dvSD8BJr0gkuf0kGNNMBDWNnDy4Ssymno8GODnH
1zaWcQUwEUAsLsdco0JjUsqweeD9Om25+psQfPiGL6QlCcoHaYndg99sMrTPZ4jK
KO/E6YCebmgqsgKfIdwmBviU3zOAZ+lnuqVVRVLCKvFUVcBMkYEy+d6Q5uRcpmR2
GyXUSRceyRujiIe03Mg0zfbkMvLHvmqhl8A6IcGfBplXsgZcUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1hf0MQH8oEKbR6KTcCPJva4u62MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTlj
NTg5NC1mNzk0LTQyMDktYTAwZC1jZjIzMjM2M2Q3YzYvNjhlNjAzOTgtMGU5Mi0z
NTUxLWFhODItYTdjM2QyNjdmZjU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNmU5YzU4OTQtZjc5NC00MjA5LWEw
MGQtY2YyMzIzNjNkN2M2LzZlOWM1ODk0LWY3OTQtNDIwOS1hMDBkLWNmMjMyMzYz
ZDdjNi5jcmwwHwYDVR0jBBgwFoAU620+1MghuZYRngwJ/123iIBSlIUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82ZTljNTg5NC1mNzk0LTQyMDktYTAwZC1jZjIz
MjM2M2Q3YzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQp/0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIHjvAq5deLV+6tCEbm2Dm2dhblCJVo+0yqFrJEtCpe0TFc8kay2krAj
hpUhZZlZU7VT5FygtHb61hnD6G01TDlHkpSSKp2g4rx1y8rkkknSd7MZnYBVSa0p
FNgDDpYnHTp5xBLe/TT9Wi//Et4kR0ByznuO7O49YtbHVEjQMJu5ncK/3za24B0G
BLxJtBJHWV/dlAuRn3VLtrDngUdqgs4nSHqlKs3bkH4eZoPY40A1KogXuPn/OCIp
D/fti0aLJuP7btqLCwkhe27c/17S8MYzcW3YmfSqk9ywRbrR+Y50p7F7T49kXgHJ
VAzED3zOyJZ1Fu/mYc/hPqEEIPXA8Dk=
-----END CERTIFICATE-----
Generated at Wed May 13 18:24:03 2026 by rpki-client