
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa
File: db659dcb-53ca-380c-8090-293e02fbc7ce.roa (raw, json)
Hash identifier: Qw1k77eyb0iJFX01S65IsBiFm7ziqrj8RYuxA/O4Rw0=
Subject key identifier: 89:A5:4C:2E:46:2E:C0:E7:40:E8:E8:75:B8:AA:F7:5A:5D:AD:4D:3D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584EDC91E438444168AC850FD508
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa
Signing time: Mon 17 Aug 2026 01:00:12 +0000
ROA not before: Mon 17 Aug 2026 01:00:12 +0000
ROA not after: Sun 15 Nov 2026 02:00:12 +0000
asID: 30036
IP address blocks: 2604:2d81:1d00::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 23 Aug 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:dc:91:e4:38:44:41:68:ac:85:0f:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Aug 17 01:00:12 2026 GMT
Not After : Nov 15 02:00:12 2026 GMT
Subject: CN=21a2cf0b-a61e-4af4-a7cf-8f0b3855a1fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:19:d0:55:a3:81:2a:0a:a3:e0:1f:85:e6:c6:
da:33:59:f6:77:a3:04:5c:a1:81:07:65:96:ff:f6:
8d:aa:0d:fb:91:b9:f7:15:3f:dc:eb:93:54:05:50:
1b:3c:ba:28:da:ab:16:67:cd:c0:9c:15:94:da:dc:
6b:db:f0:9e:81:e1:b6:27:7b:fc:69:db:fe:35:b4:
c3:57:70:17:06:33:09:40:26:c8:74:82:1c:ea:11:
5f:08:29:1a:27:d5:99:28:cd:8c:c7:0e:5a:41:f2:
7e:95:31:6b:36:46:7f:18:80:cb:5d:a1:28:b8:d0:
7c:35:e1:f1:cd:23:dc:b1:c9:c2:84:5d:d6:e0:34:
91:4e:66:3e:4f:4a:03:76:38:2f:3e:40:84:39:fb:
62:b2:7f:20:a7:cf:f2:49:58:6e:cf:b8:12:41:45:
a8:14:49:3e:3c:9f:01:5a:7e:eb:3d:9a:96:51:fd:
6b:73:cd:ac:08:b6:79:61:75:19:ea:47:6e:b9:bb:
22:65:ba:9d:66:fa:6e:ff:3d:6e:b6:dd:7a:45:f5:
10:d2:35:b6:50:db:09:f4:a8:b6:02:42:88:3a:25:
c0:2e:4a:e8:42:09:12:7c:94:8e:97:e0:8f:4f:b6:
d6:0e:1d:9b:64:c8:4d:64:2a:d1:b1:e0:f4:05:1b:
0f:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:A5:4C:2E:46:2E:C0:E7:40:E8:E8:75:B8:AA:F7:5A:5D:AD:4D:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/db659dcb-53ca-380c-8090-293e02fbc7ce.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:1d00::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:7e:21:3d:75:3c:7a:11:d7:b4:0a:c8:8f:fd:ca:96:49:68:
11:76:75:c4:e0:0e:87:31:36:fe:36:0f:18:3e:f2:9d:a2:ae:
17:7b:f9:ec:d1:8b:85:e6:a4:7a:18:cd:97:73:f9:ca:30:84:
9e:71:fc:68:65:e2:45:d8:8a:5b:92:d6:63:32:b7:f7:3c:4b:
24:7f:5f:84:c8:48:c6:06:1d:08:9f:8b:00:fe:0e:a1:b2:fd:
d1:29:e9:63:1f:c7:f7:2f:03:67:dd:f8:07:9c:61:59:6b:e4:
6f:40:7c:59:72:dd:b6:76:0e:29:4d:1c:4e:e8:7a:19:a0:b1:
36:13:41:2e:34:4d:12:9a:d2:51:48:bc:da:48:eb:2b:4b:f7:
47:03:3c:4a:4a:21:72:da:bc:42:26:a7:88:7f:8e:7e:7c:e5:
eb:be:a0:e5:06:64:ca:79:15:ba:1a:64:92:be:db:63:d7:6a:
98:ac:5e:34:a1:a2:61:b2:28:4b:ad:e8:cc:b9:69:6d:44:34:
1d:24:5a:18:6f:d7:c2:48:75:23:36:a2:9b:b9:1c:6b:88:05:
15:cb:e4:f5:2c:45:99:12:c6:19:65:ef:8c:8a:bb:14:51:34:
c8:d6:db:a0:4b:37:1d:9b:20:f7:eb:bb:07:6f:f3:7b:b3:aa:
53:38:e1:b1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE7ckeQ4REForIUP1QgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDgxNzAxMDAxMloXDTI2MTExNTAyMDAxMlowLzEtMCsGA1UEAxMk
MjFhMmNmMGItYTYxZS00YWY0LWE3Y2YtOGYwYjM4NTVhMWZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhnQVaOBKgqj4B+F5sbaM1n2d6MEXKGBB2WW
//aNqg37kbn3FT/c65NUBVAbPLoo2qsWZ83AnBWU2txr2/CegeG2J3v8adv+NbTD
V3AXBjMJQCbIdIIc6hFfCCkaJ9WZKM2Mxw5aQfJ+lTFrNkZ/GIDLXaEouNB8NeHx
zSPcscnChF3W4DSRTmY+T0oDdjgvPkCEOftisn8gp8/ySVhuz7gSQUWoFEk+PJ8B
Wn7rPZqWUf1rc82sCLZ5YXUZ6kduubsiZbqdZvpu/z1utt16RfUQ0jW2UNsJ9Ki2
AkKIOiXALkroQgkSfJSOl+CPT7bWDh2bZMhNZCrRseD0BRsPowIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFImlTC5GLsDnQOjodbiq91pdrU09MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZGI2NTlkY2ItNTNjYS0z
ODBjLTgwOTAtMjkzZTAyZmJjN2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgR0A
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEl+IT11PHoR17QKyI/9ypZJaBF2dcTgDocxNv42Dxg+8p2irhd7
+ezRi4XmpHoYzZdz+cowhJ5x/Ghl4kXYiluS1mMyt/c8SyR/X4TISMYGHQifiwD+
DqGy/dEp6WMfx/cvA2fd+AecYVlr5G9AfFly3bZ2DilNHE7oehmgsTYTQS40TRKa
0lFIvNpI6ytL90cDPEpKIXLavEImp4h/jn585eu+oOUGZMp5FboaZJK+22PXapis
XjShomGyKEut6My5aW1ENB0kWhhv18JIdSM2opu5HGuIBRXL5PUsRZkSxhll74yK
uxRRNMjW26BLNx2bIPfruwdv83uzqlM44bE=
-----END CERTIFICATE-----
Generated at Fri Aug 21 01:43:27 2026 by rpki-client