
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b25f92f1-62f9-354f-965e-a2754a33640c.roa
File: b25f92f1-62f9-354f-965e-a2754a33640c.roa (raw, json)
Hash identifier: n9byLI1eAijcVUCEM4GfnYqBaPFGxe+1CByOTaXeXdc=
Subject key identifier: CB:25:EF:A0:0D:06:E9:45:EF:AF:D1:BB:B3:1C:23:CE:E9:1D:07:20
Certificate issuer: /CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Certificate serial: 010D0C9F4328584F7FE2F905C556C198E2D20E80
Authority key identifier: 02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b25f92f1-62f9-354f-965e-a2754a33640c.roa
Signing time: Wed 14 Oct 2026 13:00:12 +0000
ROA not before: Wed 14 Oct 2026 13:00:12 +0000
ROA not after: Tue 12 Jan 2027 14:00:12 +0000
asID: 22616
IP address blocks: 2605:4300:e300::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 01 Nov 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:7f:e2:f9:05:c5:56:c1:98:e2:d2:0e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a7f1e81-1ae0-4964-be9f-2fcba5f82e48
Validity
Not Before: Oct 14 13:00:12 2026 GMT
Not After : Jan 12 14:00:12 2027 GMT
Subject: CN=86dd7ebe-6597-47a7-b2a4-5e68b7098f4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:3a:59:b7:65:f0:99:f6:36:31:01:e9:0f:4f:
00:b6:4c:9b:d3:bd:23:16:66:70:64:61:15:5f:de:
dc:d3:c3:c9:cd:a5:8f:19:fa:44:6e:a5:79:9b:81:
89:4b:cf:20:db:92:92:13:68:67:d8:fa:dc:e1:d0:
9d:31:8e:1c:93:c4:81:6f:5c:33:54:6b:b6:fe:db:
a4:ba:70:ff:28:2f:c1:cc:c8:82:ac:6c:7d:b3:81:
be:c0:07:e6:33:d2:54:83:c4:92:db:af:cc:b1:01:
f2:41:74:85:db:04:60:0f:f6:cd:dc:4c:f4:c4:ad:
a8:64:d2:be:3d:97:db:7a:b9:db:06:2c:bb:f6:96:
07:45:3f:ee:4d:ec:d0:0a:42:3c:d1:b6:6e:03:b9:
3f:ea:62:95:9b:f3:18:ce:0d:a8:5f:7c:57:78:95:
bb:3a:0f:58:58:55:d6:c7:90:a7:8a:29:fc:39:0f:
e1:e5:8a:e4:b3:17:b3:1c:c0:06:0f:42:48:b7:df:
2e:a7:24:2f:8e:2f:fa:43:5d:d0:a6:3e:b3:3f:6e:
1b:c9:90:c4:93:60:93:59:f8:b8:30:a5:3b:ab:1d:
ef:ce:21:53:c7:6e:60:4d:c3:09:b6:c5:dc:c4:31:
6f:39:28:f9:db:d4:b7:7f:b1:2c:09:c1:67:4e:43:
fc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:25:EF:A0:0D:06:E9:45:EF:AF:D1:BB:B3:1C:23:CE:E9:1D:07:20
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/b25f92f1-62f9-354f-965e-a2754a33640c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.crl
X509v3 Authority Key Identifier:
keyid:02:BE:1B:79:EF:25:10:30:B1:72:D4:0D:3A:52:C6:95:59:EB:5F:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0a7f1e81-1ae0-4964-be9f-2fcba5f82e48.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:4300:e300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:b1:f7:93:f9:35:3a:30:e7:3e:c9:6a:cd:18:09:b5:06:e8:
e5:58:73:41:2b:03:aa:c5:5d:dd:be:73:df:fe:65:3b:96:3b:
da:22:87:65:5b:58:98:41:24:18:1c:21:df:93:f4:cb:70:37:
75:d7:2c:9a:66:79:48:38:f1:5e:2d:df:98:04:7c:0b:e3:c1:
3f:b4:b8:10:be:83:7f:fe:3a:20:64:b5:4f:5f:b0:b2:c7:ab:
3e:35:bc:6c:78:a6:d3:7f:bd:2f:36:61:53:83:84:79:4f:87:
37:db:3e:4d:9e:bc:c2:fa:46:74:7b:bd:b5:84:a3:bb:1e:b0:
28:2d:68:95:f6:24:7f:23:f1:02:df:ff:28:3a:9e:be:13:5f:
4d:09:4c:24:6e:d6:3c:1c:4b:bb:7b:e9:7d:5a:2a:e1:89:5b:
64:ab:48:63:20:28:e2:60:65:b2:d4:ee:c4:4c:c3:e2:3b:dc:
39:39:7f:a1:9f:8d:63:ac:11:55:ab:0f:f8:8d:8f:23:07:6e:
9c:ab:e2:13:d7:92:66:3d:4d:3f:aa:e1:e7:76:55:62:5e:c4:
7d:df:00:f6:d2:c2:8d:b7:ea:0f:9b:ae:60:1f:da:8e:49:1e:
ff:63:dd:a0:b5:e5:8d:c6:56:ae:44:5f:de:f5:8c:ad:ad:ef:
7c:32:36:71
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9/4vkFxVbBmOLSDoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE3ZjFlODEtMWFlMC00OTY0LWJlOWYtMmZjYmE1Zjgy
ZTQ4MB4XDTI2MTAxNDEzMDAxMloXDTI3MDExMjE0MDAxMlowLzEtMCsGA1UEAxMk
ODZkZDdlYmUtNjU5Ny00N2E3LWIyYTQtNWU2OGI3MDk4ZjRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyDpZt2XwmfY2MQHpD08Atkyb070jFmZwZGEV
X97c08PJzaWPGfpEbqV5m4GJS88g25KSE2hn2Prc4dCdMY4ck8SBb1wzVGu2/tuk
unD/KC/BzMiCrGx9s4G+wAfmM9JUg8SS26/MsQHyQXSF2wRgD/bN3Ez0xK2oZNK+
PZfbernbBiy79pYHRT/uTezQCkI80bZuA7k/6mKVm/MYzg2oX3xXeJW7Og9YWFXW
x5Cniin8OQ/h5YrksxezHMAGD0JIt98upyQvji/6Q13Qpj6zP24byZDEk2CTWfi4
MKU7qx3vziFTx25gTcMJtsXcxDFvOSj529S3f7EsCcFnTkP8iwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMsl76ANBulF76/Ru7McI87pHQcgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdm
MWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNiYTVmODJlNDgvYjI1ZjkyZjEtNjJmOS0z
NTRmLTk2NWUtYTI3NTRhMzM2NDBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGE3ZjFlODEtMWFlMC00OTY0LWJl
OWYtMmZjYmE1ZjgyZTQ4LzBhN2YxZTgxLTFhZTAtNDk2NC1iZTlmLTJmY2JhNWY4
MmU0OC5jcmwwHwYDVR0jBBgwFoAUAr4bee8lEDCxctQNOlLGlVnrX6IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYTdmMWU4MS0xYWUwLTQ5NjQtYmU5Zi0yZmNi
YTVmODJlNDguY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgVDAOMw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAlbH3k/k1OjDnPslqzRgJtQbo5VhzQSsDqsVd3b5z3/5lO5Y72iKH
ZVtYmEEkGBwh35P0y3A3ddcsmmZ5SDjxXi3fmAR8C+PBP7S4EL6Df/46IGS1T1+w
sserPjW8bHim03+9LzZhU4OEeU+HN9s+TZ68wvpGdHu9tYSjux6wKC1olfYkfyPx
At//KDqevhNfTQlMJG7WPBxLu3vpfVoq4YlbZKtIYyAo4mBlstTuxEzD4jvcOTl/
oZ+NY6wRVasP+I2PIwdunKviE9eSZj1NP6rh53ZVYl7Efd8A9tLCjbfqD5uuYB/a
jkke/2PdoLXljcZWrkRf3vWMra3vfDI2cQ==
-----END CERTIFICATE-----
Generated at Fri Oct 30 19:26:46 2026 by rpki-client