
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa
File: 2ddcd419-f09d-3a08-94c4-01bab2f82911.roa (raw, json)
Hash identifier: GnX0RNGbipBWVJX3APTHrjBJqNLA8bye1/j2VDN6hkY=
Subject key identifier: E2:20:34:13:AB:5B:50:00:68:2E:F5:F8:5B:B2:3F:0C:7E:DB:64:42
Certificate issuer: /CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Certificate serial: 010D0C9F4328584F4973AC19BC357165B736CE80
Authority key identifier: 64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 5769
IP address blocks: 2607:fa4a::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:ac:19:bc:35:71:65:b7:36:ce:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65506c68-611f-46ed-9e78-36da39f8ee7d
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0574968c-1c21-4be7-ba2b-f5eebbca8ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:75:60:81:d3:ca:51:4d:6a:c7:98:b4:fc:ce:
db:95:93:fb:e2:f3:6a:ad:ff:54:84:98:39:c9:ab:
78:9d:72:c0:8c:ba:ae:8f:91:f9:37:f6:50:b2:62:
2a:2e:e8:ad:bb:e0:75:93:0f:f8:84:11:80:e5:f9:
a5:ec:74:a9:52:14:18:d2:31:da:66:4a:72:4d:a9:
de:6e:1e:4d:22:5c:f2:be:ee:82:21:6c:b2:43:c1:
b2:40:48:dc:f4:37:16:d5:5f:23:6f:11:2c:d4:4c:
c2:fa:5a:4b:6d:18:42:47:21:33:d7:f3:29:02:cb:
95:a0:a1:07:ac:9c:9a:e3:bc:0c:fe:80:b2:8f:6a:
d6:c8:a2:45:80:27:8d:7e:0c:f9:87:6b:e6:2f:77:
76:49:d2:73:38:2d:21:ef:58:d2:2e:d6:a9:09:51:
6b:84:21:bc:99:20:51:b4:58:7d:85:79:25:c0:b3:
3c:98:fb:43:8c:4b:7b:b5:77:53:2d:e3:51:cf:6e:
c7:0d:ac:7d:13:39:49:43:48:cc:17:67:cb:1d:cf:
ad:db:bd:7e:0c:37:d7:4e:d5:c2:79:9f:d7:35:ce:
23:97:11:69:16:10:0f:9c:73:39:67:0f:ab:e4:bb:
ba:3e:06:00:d4:55:2b:67:05:82:a9:89:35:2c:b8:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:20:34:13:AB:5B:50:00:68:2E:F5:F8:5B:B2:3F:0C:7E:DB:64:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/2ddcd419-f09d-3a08-94c4-01bab2f82911.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d/65506c68-611f-46ed-9e78-36da39f8ee7d.crl
X509v3 Authority Key Identifier:
keyid:64:46:5B:6E:8C:8A:7A:D9:B8:FA:63:A7:61:BA:2D:F0:F5:9C:36:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/65506c68-611f-46ed-9e78-36da39f8ee7d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fa4a::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:7c:55:b8:2f:64:4b:b2:33:08:26:8f:77:79:c2:12:53:7f:
9b:7e:68:b8:33:9d:f6:ff:c1:9d:3f:66:27:d0:b2:ef:80:f2:
61:0c:a2:9d:66:5b:28:1c:12:df:93:3d:b4:5f:49:ed:4b:a1:
6e:ae:8d:79:2f:dd:22:26:82:a5:bd:a5:39:94:41:23:95:92:
28:6a:7f:99:17:67:3e:5b:9c:fb:6a:64:3c:a2:6e:37:4e:9a:
0e:c1:2d:89:a7:3b:1a:6f:75:e3:bc:8c:56:bf:e7:25:0a:3b:
9e:84:74:14:91:59:a4:69:f2:25:87:8a:c7:fb:f7:67:ac:ac:
55:53:d7:21:df:99:98:c7:d7:a7:7c:3e:21:26:09:50:0d:c8:
92:d7:b9:32:c7:11:71:23:b9:61:13:85:76:82:6e:26:83:45:
1e:10:2b:d6:ed:29:4b:a7:d1:e3:e4:70:ae:bd:77:68:b6:a4:
fc:e8:34:2b:77:d4:25:ef:56:d2:e5:a5:4e:89:34:f9:dd:d7:
f9:3f:8f:51:ce:e4:9a:ed:01:98:cd:c9:5c:d7:8e:0b:8e:9d:
dd:cc:29:0f:bc:f9:b8:48:b3:43:e8:57:c1:8c:b4:c1:10:74:
6d:db:9d:75:67:23:25:1b:6d:24:16:ad:07:e3:3e:68:20:56:
37:91:8b:72
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9Jc6wZvDVxZbc2zoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU1MDZjNjgtNjExZi00NmVkLTllNzgtMzZkYTM5Zjhl
ZTdkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MDU3NDk2OGMtMWMyMS00YmU3LWJhMmItZjVlZWJiY2E4YWUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhnVggdPKUU1qx5i0/M7blZP74vNqrf9UhJg5
yat4nXLAjLquj5H5N/ZQsmIqLuitu+B1kw/4hBGA5fml7HSpUhQY0jHaZkpyTane
bh5NIlzyvu6CIWyyQ8GyQEjc9DcW1V8jbxEs1EzC+lpLbRhCRyEz1/MpAsuVoKEH
rJya47wM/oCyj2rWyKJFgCeNfgz5h2vmL3d2SdJzOC0h71jSLtapCVFrhCG8mSBR
tFh9hXklwLM8mPtDjEt7tXdTLeNRz27HDax9EzlJQ0jMF2fLHc+t271+DDfXTtXC
eZ/XNc4jlxFpFhAPnHM5Zw+r5Lu6PgYA1FUrZwWCqYk1LLik8QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOIgNBOrW1AAaC71+FuyPwx+22RCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTUw
NmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRhMzlmOGVlN2QvMmRkY2Q0MTktZjA5ZC0z
YTA4LTk0YzQtMDFiYWIyZjgyOTExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU1MDZjNjgtNjExZi00NmVkLTll
NzgtMzZkYTM5ZjhlZTdkLzY1NTA2YzY4LTYxMWYtNDZlZC05ZTc4LTM2ZGEzOWY4
ZWU3ZC5jcmwwHwYDVR0jBBgwFoAUZEZbboyKetm4+mOnYbot8PWcNjEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTUwNmM2OC02MTFmLTQ2ZWQtOWU3OC0zNmRh
MzlmOGVlN2QuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgf6SjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBEfFW4L2RLsjMIJo93ecISU3+bfmi4M532/8GdP2Yn0LLvgPJhDKKd
ZlsoHBLfkz20X0ntS6Furo15L90iJoKlvaU5lEEjlZIoan+ZF2c+W5z7amQ8om43
TpoOwS2Jpzsab3XjvIxWv+clCjuehHQUkVmkafIlh4rH+/dnrKxVU9ch35mYx9en
fD4hJglQDciS17kyxxFxI7lhE4V2gm4mg0UeECvW7SlLp9Hj5HCuvXdotqT86DQr
d9Ql71bS5aVOiTT53df5P49RzuSa7QGYzclc144Ljp3dzCkPvPm4SLND6FfBjLTB
EHRt2511ZyMlG20kFq0H4z5oIFY3kYty
-----END CERTIFICATE-----
Generated at Mon Sep 28 10:14:22 2026 by rpki-client