
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
File: d1ec7d81-82ad-3029-abd2-5405897dacbf.roa (raw, json)
Hash identifier: ND0Da7QPwKjLrFDo/9MB/XnYVwRKh517idL2/KNDw64=
Subject key identifier: DC:2E:35:77:D3:68:69:87:71:6B:05:56:48:E0:83:1A:FA:C1:B1:2B
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584F0ED2356F4D756480A400D580
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
Signing time: Fri 04 Sep 2026 01:00:12 +0000
ROA not before: Fri 04 Sep 2026 01:00:12 +0000
ROA not after: Thu 03 Dec 2026 02:00:12 +0000
asID: 62651
IP address blocks: 2604:c980:800::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 20 Sep 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:0e:d2:35:6f:4d:75:64:80:a4:00:d5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Sep 4 01:00:12 2026 GMT
Not After : Dec 3 02:00:12 2026 GMT
Subject: CN=51c5030c-225b-4236-9a2d-232bbc0325d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:8a:c0:87:d3:c8:4b:92:f4:4a:5d:ab:9a:54:
95:49:02:9f:99:f6:37:14:49:d0:8c:71:e4:30:07:
fa:23:33:39:af:22:2b:2b:c4:1e:eb:46:8d:ea:db:
70:13:2a:5d:a2:69:49:f3:c9:c3:40:cf:7a:9a:75:
6e:6b:9c:e6:d8:ea:ae:20:f8:ce:2f:a9:91:f7:0a:
74:c0:4e:52:bc:5e:bd:3f:a2:01:11:83:c9:11:f4:
67:a5:55:ac:2c:a4:33:98:ab:3e:fa:f5:5d:2a:b9:
19:cc:14:be:b2:aa:0b:cb:3a:84:a3:83:86:c0:74:
2b:fe:76:00:63:ba:33:9a:a8:53:64:c7:33:1b:4f:
2c:f4:37:af:0f:a3:5c:f9:51:8a:c1:b1:a6:6b:c4:
2b:1e:7d:a5:4f:53:c7:9f:6b:23:70:24:8e:73:67:
9c:16:3e:02:f0:84:34:6d:3b:9d:8b:34:ea:0b:c4:
a6:b6:3f:f5:b6:92:00:29:02:b7:fb:ec:c7:d0:95:
a7:bd:1f:d8:9c:0d:3b:45:06:98:4c:ed:a7:a7:52:
e4:21:f9:c2:22:0b:c7:2b:58:4e:68:e0:96:7a:32:
0e:59:38:5c:aa:ff:4f:6e:f2:3e:79:f7:76:1f:1f:
67:9d:e0:d8:a4:ae:d7:fe:63:05:82:44:1f:c9:eb:
48:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:2E:35:77:D3:68:69:87:71:6B:05:56:48:E0:83:1A:FA:C1:B1:2B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/d1ec7d81-82ad-3029-abd2-5405897dacbf.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c980:800::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:7f:63:d3:58:bf:e5:7b:e5:02:a9:a6:86:dd:09:37:f7:a0:
ab:15:4f:c7:56:09:9f:d6:23:e0:b2:cb:d6:3a:5b:2a:69:ea:
d8:b1:26:54:f6:be:8a:d7:b1:49:b3:7e:80:c7:ea:6c:c5:09:
20:40:9d:c6:5f:e6:a2:3b:64:99:bd:27:96:10:e6:81:bc:9d:
a6:1d:45:83:4e:eb:19:42:0b:99:7f:63:d9:94:fa:9b:1e:68:
91:f5:97:a2:d9:a1:dd:b7:0f:f9:30:a8:e3:44:47:46:71:2e:
46:35:e2:5f:c7:19:72:ab:21:82:0d:ac:c6:62:f8:27:bc:1c:
52:0c:89:7b:6b:cb:f1:95:e0:c1:da:5e:29:84:84:b7:d8:5d:
7e:68:54:6b:23:76:fe:b3:c3:59:ba:18:8f:0f:12:8b:a9:13:
75:8a:d1:ad:3e:2d:6a:68:81:7c:15:24:7f:9e:19:6e:b3:07:
a2:dc:83:5e:d7:44:9e:61:1f:ae:63:20:b6:37:00:a8:76:3b:
ad:2e:3d:91:95:3c:d2:51:65:ef:66:f8:b1:09:ba:fe:35:73:
b6:a0:32:06:64:5c:6b:d7:f5:b6:16:36:d1:bb:0d:94:15:62:
fe:1f:42:de:e5:06:ee:e2:b8:a0:3e:ed:10:08:63:7a:db:db:
fc:20:7d:1b
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8O0jVvTXVkgKQA1YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDkwNDAxMDAxMloXDTI2MTIwMzAyMDAxMlowLzEtMCsGA1UEAxMk
NTFjNTAzMGMtMjI1Yi00MjM2LTlhMmQtMjMyYmJjMDMyNWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkIrAh9PIS5L0Sl2rmlSVSQKfmfY3FEnQjHHk
MAf6IzM5ryIrK8Qe60aN6ttwEypdomlJ88nDQM96mnVua5zm2OquIPjOL6mR9wp0
wE5SvF69P6IBEYPJEfRnpVWsLKQzmKs++vVdKrkZzBS+sqoLyzqEo4OGwHQr/nYA
Y7ozmqhTZMczG08s9DevD6Nc+VGKwbGma8QrHn2lT1PHn2sjcCSOc2ecFj4C8IQ0
bTudizTqC8Smtj/1tpIAKQK3++zH0JWnvR/YnA07RQaYTO2np1LkIfnCIgvHK1hO
aOCWejIOWThcqv9PbvI+efd2Hx9nneDYpK7X/mMFgkQfyetIywIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFNwuNXfTaGmHcWsFVkjggxr6wbErMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvZDFlYzdkODEtODJhZC0z
MDI5LWFiZDItNTQwNTg5N2RhY2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTJgAgw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAGH9j01i/5XvlAqmmht0JN/egqxVPx1YJn9Yj4LLL1jpbKmnq2LEm
VPa+itexSbN+gMfqbMUJIECdxl/mojtkmb0nlhDmgbydph1Fg07rGUILmX9j2ZT6
mx5okfWXotmh3bcP+TCo40RHRnEuRjXiX8cZcqshgg2sxmL4J7wcUgyJe2vL8ZXg
wdpeKYSEt9hdfmhUayN2/rPDWboYjw8Si6kTdYrRrT4tamiBfBUkf54ZbrMHotyD
XtdEnmEfrmMgtjcAqHY7rS49kZU80lFl72b4sQm6/jVztqAyBmRca9f1thY20bsN
lBVi/h9C3uUG7uK4oD7tEAhjetvb/CB9Gw==
-----END CERTIFICATE-----
Generated at Fri Sep 18 22:27:16 2026 by rpki-client