
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa
File: 4660259a-08cc-3371-90cd-23e520954c2a.roa (raw, json)
Hash identifier: rLz7P+VEa/tyOJko9bjYNcJ9F5rLoz0Zd/PX86yQPZk=
Subject key identifier: 21:E2:61:90:4A:D8:F9:E2:42:E7:BE:D8:54:91:C7:E9:78:5E:22:D4
Certificate issuer: /CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Certificate serial: 010D0C9F4328584DAAE028EBBBED1F6A3FEB1920
Authority key identifier: EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 18460
IP address blocks: 2001:49d0:100:198::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 01 May 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:28:eb:bb:ed:1f:6a:3f:eb:19:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e191232b-cf07-4d3d-95e1-afcd1b928ab1
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=5c581347-f1a0-4390-9a47-a08908f07fd6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:31:66:35:f2:40:92:dd:e6:b0:c5:84:9a:d5:
6a:87:46:75:33:8a:a7:bc:ef:f4:48:bf:5b:d0:a2:
3e:5d:18:09:dd:4d:97:c1:0c:51:5b:e3:77:1f:57:
61:c3:48:5e:c5:70:7b:34:4d:f0:7f:a3:22:4d:91:
9e:36:2e:ef:e9:92:9d:e6:0b:99:04:ab:e6:9f:95:
88:e7:f5:39:ac:b0:be:68:80:c2:83:31:1b:7f:6e:
51:46:0b:75:2c:5b:9b:72:5e:f3:48:28:87:98:ae:
bb:96:92:0a:06:b3:29:e5:99:d5:fd:71:28:79:6e:
ae:fa:53:35:47:d2:f2:d1:11:0f:c6:0b:6b:b2:1f:
90:3a:30:aa:77:57:d0:fb:a5:24:35:c5:f4:d7:bf:
13:03:93:4f:c7:66:2b:5e:80:91:6a:2c:49:67:a2:
67:77:5e:82:cf:ab:30:4b:9e:54:75:f6:e7:5a:78:
ba:7a:e6:c0:95:1e:8d:3a:f6:56:5e:44:a1:a3:76:
ad:58:98:0b:d3:1b:23:63:60:34:c0:79:72:74:a9:
e2:6e:46:01:9a:d1:73:75:3d:94:c8:c9:05:28:7e:
f2:bf:f8:89:8d:e2:e9:5b:5b:05:da:cb:11:85:c3:
06:a4:5d:9f:52:1c:27:3f:41:14:71:e3:b9:d2:f2:
6f:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:E2:61:90:4A:D8:F9:E2:42:E7:BE:D8:54:91:C7:E9:78:5E:22:D4
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/4660259a-08cc-3371-90cd-23e520954c2a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1/e191232b-cf07-4d3d-95e1-afcd1b928ab1.crl
X509v3 Authority Key Identifier:
keyid:EC:94:41:2C:05:92:7D:C7:FB:4B:08:41:DA:31:BE:F3:EA:B6:BD:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e191232b-cf07-4d3d-95e1-afcd1b928ab1.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:49d0:100:198::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
87:4d:69:2d:64:23:82:e2:d3:82:83:f2:64:ce:5e:80:f5:01:
19:8b:c7:31:90:c5:9c:1a:bd:f8:8f:8f:a1:a0:47:f4:bd:db:
66:eb:19:46:33:a4:b6:30:70:f6:5d:10:d6:ef:39:10:b2:e5:
14:f2:11:7f:1f:17:c9:ce:e3:28:b6:fc:c0:d1:de:5b:9b:02:
92:a9:a1:a1:eb:c7:a3:87:aa:70:0c:3b:f5:39:fc:6f:2b:5c:
07:bb:98:a0:98:a5:cd:2b:7d:4e:fd:0e:5d:ad:30:f5:76:99:
d8:f5:fa:a2:0b:08:6f:74:1b:62:e3:25:c4:20:40:e7:9c:66:
f5:db:e6:25:23:2d:0b:c2:99:17:8c:cf:c2:b6:b0:59:4b:c3:
61:8c:db:a3:b6:35:a3:81:94:9d:c0:44:d2:28:86:29:f8:87:
60:31:05:07:4a:db:1f:95:12:1d:aa:bb:b4:c1:0d:07:cb:ae:
8b:9a:1b:62:4e:ea:10:55:91:f6:26:13:ba:8e:f8:8e:d7:5c:
ab:79:3d:f8:86:61:0d:81:2a:49:de:a3:b5:e6:89:c0:d0:cd:
aa:24:fe:ee:42:5d:16:ae:a2:2b:02:65:4b:cf:2d:71:d7:c4:
94:a0:ea:b4:4a:b6:9c:e3:7f:f4:b2:08:aa:3f:42:0d:c6:af:
de:24:8e:d7
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE2q4Cjru+0faj/rGSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTE5MTIzMmItY2YwNy00ZDNkLTk1ZTEtYWZjZDFiOTI4
YWIxMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
NWM1ODEzNDctZjFhMC00MzkwLTlhNDctYTA4OTA4ZjA3ZmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApDFmNfJAkt3msMWEmtVqh0Z1M4qnvO/0SL9b
0KI+XRgJ3U2XwQxRW+N3H1dhw0hexXB7NE3wf6MiTZGeNi7v6ZKd5guZBKvmn5WI
5/U5rLC+aIDCgzEbf25RRgt1LFubcl7zSCiHmK67lpIKBrMp5ZnV/XEoeW6u+lM1
R9Ly0REPxgtrsh+QOjCqd1fQ+6UkNcX0178TA5NPx2YrXoCRaixJZ6Jnd16Cz6sw
S55UdfbnWni6eubAlR6NOvZWXkSho3atWJgL0xsjY2A0wHlydKnibkYBmtFzdT2U
yMkFKH7yv/iJjeLpW1sF2ssRhcMGpF2fUhwnP0EUceO50vJviwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFCHiYZBK2PniQue+2FSRx+l4XiLUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkx
MjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNkMWI5MjhhYjEvNDY2MDI1OWEtMDhjYy0z
MzcxLTkwY2QtMjNlNTIwOTU0YzJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTE5MTIzMmItY2YwNy00ZDNkLTk1
ZTEtYWZjZDFiOTI4YWIxL2UxOTEyMzJiLWNmMDctNGQzZC05NWUxLWFmY2QxYjky
OGFiMS5jcmwwHwYDVR0jBBgwFoAU7JRBLAWSfcf7SwhB2jG+8+q2vTQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lMTkxMjMyYi1jZjA3LTRkM2QtOTVlMS1hZmNk
MWI5MjhhYjEuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAFJ0AEA
AZgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAh01pLWQjguLTgoPyZM5egPUBGYvHMZDFnBq9+I+PoaBH9L3b
ZusZRjOktjBw9l0Q1u85ELLlFPIRfx8Xyc7jKLb8wNHeW5sCkqmhoevHo4eqcAw7
9Tn8bytcB7uYoJilzSt9Tv0OXa0w9XaZ2PX6ogsIb3QbYuMlxCBA55xm9dvmJSMt
C8KZF4zPwrawWUvDYYzbo7Y1o4GUncBE0iiGKfiHYDEFB0rbH5USHaq7tMENB8uu
i5obYk7qEFWR9iYTuo74jtdcq3k9+IZhDYEqSd6jteaJwNDNqiT+7kJdFq6iKwJl
S88tcdfElKDqtEq2nON/9LIIqj9CDcav3iSO1w==
-----END CERTIFICATE-----
Generated at Wed Apr 29 17:53:06 2026 by rpki-client