
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3f9876-4396-31a2-8ee8-a7845f9a218b.roa
File: 5a3f9876-4396-31a2-8ee8-a7845f9a218b.roa (raw, json)
Hash identifier: AoBu8Y5TE7Arg6IcAiY5A/Xu9mI27OP75Rlg/DOMxlA=
Subject key identifier: 0D:63:41:73:1E:33:33:61:91:28:1A:C7:D3:98:AC:7C:C0:64:F4:EC
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F119DA42A3D56A11FF81E46A0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3f9876-4396-31a2-8ee8-a7845f9a218b.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 33491
IP address blocks: 2603:300f:1500::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 08 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9d:a4:2a:3d:56:a1:1f:f8:1e:46:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=3ae7c9f5-8739-4e54-b28a-d6234dd5e1f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:ba:59:3b:09:17:2f:e7:5f:64:22:1d:60:2a:
3b:f3:10:ad:bb:b5:75:a6:cc:81:16:88:58:08:18:
e4:23:4d:7d:26:0c:7b:43:8d:4f:50:01:72:9e:87:
30:27:56:d8:8f:dd:a7:f9:c6:1b:85:ef:b9:71:cb:
1d:14:55:cd:c3:44:6b:29:52:c2:4a:53:82:32:a6:
ae:7a:a8:a2:65:32:b0:c5:ee:c1:b7:d0:e4:02:49:
d4:d8:4f:59:a7:66:24:7d:17:d6:e5:17:65:ce:31:
f8:40:19:fb:04:36:ce:04:5e:bc:b9:db:85:20:40:
fb:23:36:3b:b6:c6:88:73:c4:50:0a:19:9d:de:10:
4f:31:df:f2:bf:86:fb:56:c0:49:46:79:d6:4d:5f:
2c:df:13:a0:2c:43:69:c9:61:50:2d:39:83:8d:4e:
33:79:8e:08:23:24:d8:90:ce:6a:ae:03:a8:00:92:
46:4f:60:9d:19:f2:e5:05:8e:ef:96:85:30:89:3b:
55:0e:d2:84:be:4a:23:cd:77:26:43:b8:2f:03:7b:
03:39:bb:da:99:5d:22:dd:96:74:58:3b:48:de:86:
53:a1:4c:34:89:56:89:d1:8b:1e:14:13:3a:f8:58:
2d:1b:60:bd:54:f3:65:0a:f1:88:fe:6f:3f:7c:5d:
11:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:63:41:73:1E:33:33:61:91:28:1A:C7:D3:98:AC:7C:C0:64:F4:EC
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5a3f9876-4396-31a2-8ee8-a7845f9a218b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:300f:1500::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
73:1e:fb:4b:c8:91:93:bc:41:a7:b1:77:f0:fb:02:81:3f:b1:
3f:2a:be:fe:0b:cc:e0:57:6c:df:f9:21:d7:f3:be:a4:bd:6f:
a0:04:1e:cb:5e:5b:47:19:97:8e:82:f5:d8:33:3d:7e:14:5e:
26:48:f9:6c:de:71:83:ff:4e:29:7e:31:d8:35:f9:4f:ea:43:
d0:32:f1:d0:24:44:f5:15:a7:d3:f3:5c:d5:0f:0a:9a:97:23:
07:c5:5e:d5:8a:71:84:c7:f1:18:76:11:0b:0b:d9:b9:a7:73:
08:85:52:dc:d0:51:25:60:e4:10:30:9e:25:5c:4d:50:71:27:
ea:7d:bc:82:9e:1e:b8:e5:db:8a:17:c2:ce:b3:c9:76:11:b5:
da:a2:a1:a7:dc:50:89:84:a2:fe:a8:0c:f5:e0:83:9a:84:3b:
7d:56:0c:ea:ce:14:9f:95:75:24:e4:0a:66:dc:a7:c2:32:d0:
05:22:72:dc:9e:25:1c:23:27:c6:27:28:b6:0c:c6:37:0c:e3:
5d:91:19:43:31:85:5f:63:a6:31:04:63:9f:07:1d:00:ce:73:
ec:73:ac:e7:81:fe:98:60:dd:6e:3f:bc:c6:2b:0f:5b:4e:0e:
23:12:c3:9d:06:d2:b1:30:45:af:eb:9c:23:97:f6:01:67:6b:
23:79:8a:dc
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnaQqPVahH/geRqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
M2FlN2M5ZjUtODczOS00ZTU0LWIyOGEtZDYyMzRkZDVlMWY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorpZOwkXL+dfZCIdYCo78xCtu7V1psyBFohY
CBjkI019Jgx7Q41PUAFynocwJ1bYj92n+cYbhe+5ccsdFFXNw0RrKVLCSlOCMqau
eqiiZTKwxe7Bt9DkAknU2E9Zp2YkfRfW5RdlzjH4QBn7BDbOBF68uduFIED7IzY7
tsaIc8RQChmd3hBPMd/yv4b7VsBJRnnWTV8s3xOgLENpyWFQLTmDjU4zeY4IIyTY
kM5qrgOoAJJGT2CdGfLlBY7vloUwiTtVDtKEvkojzXcmQ7gvA3sDObvamV0i3ZZ0
WDtI3oZToUw0iVaJ0YseFBM6+FgtG2C9VPNlCvGI/m8/fF0RwwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA1jQXMeMzNhkSgax9OYrHzAZPTsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWEzZjk4NzYtNDM5Ni0z
MWEyLThlZTgtYTc4NDVmOWEyMThiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwDxUw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAcx77S8iRk7xBp7F38PsCgT+xPyq+/gvM4Fds3/kh1/O+pL1voAQe
y15bRxmXjoL12DM9fhReJkj5bN5xg/9OKX4x2DX5T+pD0DLx0CRE9RWn0/Nc1Q8K
mpcjB8Ve1YpxhMfxGHYRCwvZuadzCIVS3NBRJWDkEDCeJVxNUHEn6n28gp4euOXb
ihfCzrPJdhG12qKhp9xQiYSi/qgM9eCDmoQ7fVYM6s4Un5V1JOQKZtynwjLQBSJy
3J4lHCMnxicotgzGNwzjXZEZQzGFX2OmMQRjnwcdAM5z7HOs54H+mGDdbj+8xisP
W04OIxLDnQbSsTBFr+ucI5f2AWdrI3mK3A==
-----END CERTIFICATE-----
Generated at Sat Sep 5 16:57:36 2026 by rpki-client