
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f4d88561-6aa1-3cfc-8444-84896c71d01a.roa
File: f4d88561-6aa1-3cfc-8444-84896c71d01a.roa (raw, json)
Hash identifier: KLsjKM/SFX8nhUT5GxNFA809RU2+SPRSQPwr7b+NuCs=
Subject key identifier: CA:D3:53:C6:AB:1A:20:A7:6E:1B:3F:35:2C:DB:23:FF:A3:BD:16:A1
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D237A4B0A092FCFBC1E3385C0
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f4d88561-6aa1-3cfc-8444-84896c71d01a.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 30036
IP address blocks: 2604:2d80:f400::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:4b:0a:09:2f:cf:bc:1e:33:85:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=6413a123-91f7-4038-ac84-12c07c376f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:90:2d:30:ba:cd:58:19:e7:5d:a2:24:c6:ab:
9b:21:37:6e:e9:4f:d9:8e:04:63:3a:74:7a:5e:0d:
3c:62:85:c3:ee:e4:3f:af:53:81:37:43:f2:76:de:
63:09:1e:93:3f:1f:cf:1f:93:41:4a:5e:86:73:cd:
d7:34:e1:e7:e1:79:45:a3:2f:68:9e:a4:a2:67:8b:
4a:c0:e5:f8:68:a2:44:ad:f7:95:ed:7c:89:ca:24:
85:9f:a1:98:4f:d1:06:5e:aa:dd:5f:46:43:53:39:
20:15:de:5b:78:c0:dc:de:03:56:de:3e:f6:0b:27:
69:ab:ce:ab:d2:75:25:08:0e:d8:3c:5c:bc:7e:55:
36:d9:68:08:ed:01:65:e8:62:d2:2e:8a:90:6e:35:
7b:8f:28:ee:aa:61:33:7f:e6:06:11:91:a9:5a:4d:
95:bf:2a:6a:70:78:5d:63:78:39:5b:80:51:f2:1c:
81:8c:8b:ab:28:0a:64:d7:2c:64:f8:ed:36:d9:ed:
d8:c0:dd:ee:fb:b4:58:29:ef:47:e3:a1:f1:a5:f2:
5e:41:10:a7:02:a6:34:79:ae:40:f6:6e:f6:94:86:
b5:64:b7:b2:66:f4:70:21:33:6f:95:06:25:6b:6c:
23:8b:74:2f:22:ff:0d:86:b9:00:1d:98:fd:85:87:
aa:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:53:C6:AB:1A:20:A7:6E:1B:3F:35:2C:DB:23:FF:A3:BD:16:A1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/f4d88561-6aa1-3cfc-8444-84896c71d01a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:f400::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
58:43:60:70:d5:a0:ab:51:d3:64:95:27:ca:33:48:74:7a:36:
1b:e8:e8:7c:03:0b:91:f0:55:d6:7f:78:1e:4f:8a:e7:c3:e9:
8c:37:da:e1:eb:6f:c9:a4:78:69:bb:e0:82:43:4a:c4:8e:b3:
8f:49:5a:d7:89:2f:4d:f3:53:30:7e:0a:ab:02:01:0a:c1:12:
5f:98:f1:61:71:b6:2f:f4:aa:f6:fd:3c:38:d0:51:b7:f0:07:
0a:2f:fb:a2:a2:07:b1:85:4f:71:c1:05:9d:b4:10:e6:6f:bc:
51:bc:6f:91:c0:63:52:ee:cc:66:09:c8:bb:1f:9d:db:aa:dd:
5f:09:76:29:18:20:e1:f4:b2:16:18:40:af:81:0b:74:84:c2:
4c:91:b7:cf:0c:e7:57:f3:c1:97:91:54:57:b6:df:b5:b8:21:
8c:d4:aa:83:e6:6c:c1:bd:82:f2:b5:7b:e1:95:eb:03:a4:74:
ad:7c:8b:76:14:18:59:e6:0b:d0:37:fb:1e:0b:e4:28:52:e2:
89:8a:92:f7:29:5c:1b:71:e7:48:2b:aa:76:28:7d:dd:56:ba:
d5:7c:1b:e4:cb:8f:ac:b8:c2:cf:42:29:c4:86:13:6e:db:0a:
d8:f1:5e:a2:6c:a2:64:0d:7a:60:9d:76:80:12:fb:fb:51:37:
31:47:d1:91
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0jeksKCS/PvB4zhcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjAxMDAzMloXDTI2MDYxMDAxMDAzMlowLzEtMCsGA1UEAxMk
NjQxM2ExMjMtOTFmNy00MDM4LWFjODQtMTJjMDdjMzc2ZjA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1pAtMLrNWBnnXaIkxqubITdu6U/ZjgRjOnR6
Xg08YoXD7uQ/r1OBN0Pydt5jCR6TPx/PH5NBSl6Gc83XNOHn4XlFoy9onqSiZ4tK
wOX4aKJErfeV7XyJyiSFn6GYT9EGXqrdX0ZDUzkgFd5beMDc3gNW3j72Cydpq86r
0nUlCA7YPFy8flU22WgI7QFl6GLSLoqQbjV7jyjuqmEzf+YGEZGpWk2VvypqcHhd
Y3g5W4BR8hyBjIurKApk1yxk+O022e3YwN3u+7RYKe9H46HxpfJeQRCnAqY0ea5A
9m72lIa1ZLeyZvRwITNvlQYla2wji3QvIv8NhrkAHZj9hYeqAQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFMrTU8arGiCnbhs/NSzbI/+jvRahMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvZjRkODg1NjEtNmFhMS0z
Y2ZjLTg0NDQtODQ4OTZjNzFkMDFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgPQA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFhDYHDVoKtR02SVJ8ozSHR6Nhvo6HwDC5HwVdZ/eB5PiufD6Yw3
2uHrb8mkeGm74IJDSsSOs49JWteJL03zUzB+CqsCAQrBEl+Y8WFxti/0qvb9PDjQ
UbfwBwov+6KiB7GFT3HBBZ20EOZvvFG8b5HAY1LuzGYJyLsfnduq3V8JdikYIOH0
shYYQK+BC3SEwkyRt88M51fzwZeRVFe237W4IYzUqoPmbMG9gvK1e+GV6wOkdK18
i3YUGFnmC9A3+x4L5ChS4omKkvcpXBtx50grqnYofd1WutV8G+TLj6y4ws9CKcSG
E27bCtjxXqJsomQNemCddoAS+/tRNzFH0ZE=
-----END CERTIFICATE-----
Generated at Thu Mar 12 03:44:33 2026 by rpki-client