
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa
File: 40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa (raw, json)
Hash identifier: CpMoCA6WHiuOXMs+q5Tdw9HT8DrakQZboHo6mPVXPf8=
Subject key identifier: BE:D1:D5:36:C3:9A:66:C6:70:C8:ED:C8:29:FF:BD:12:3C:2F:3F:21
Certificate issuer: /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial: 010D0C9F4328584D15A25C9CA9783848B12B2100
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa
Signing time: Sat 07 Mar 2026 02:00:32 +0000
ROA not before: Sat 07 Mar 2026 02:00:32 +0000
ROA not after: Fri 05 Jun 2026 01:00:32 +0000
asID: 852
IP address blocks: 2001:56b:c000::/35 maxlen: 35
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 16 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:15:a2:5c:9c:a9:78:38:48:b1:2b:21:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Validity
Not Before: Mar 7 02:00:32 2026 GMT
Not After : Jun 5 01:00:32 2026 GMT
Subject: CN=bb4140b0-92b1-4d79-a9ab-73932a11c8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:34:af:9c:25:ab:56:8f:ef:6e:4f:cf:61:b4:
9d:02:6c:c7:8e:cd:38:1e:98:4c:d5:d9:ad:64:12:
e6:64:e1:26:28:7b:d7:7d:8f:4d:a8:df:74:ed:f9:
e8:bf:80:06:17:c5:d9:31:62:c2:ca:5f:08:30:d6:
b9:0c:14:2d:14:94:01:66:fc:97:b5:74:db:75:e9:
61:2c:bf:e0:dc:90:77:09:c5:3c:4a:4a:9b:03:02:
56:58:eb:3c:cc:45:2c:77:e2:87:18:f0:be:5f:60:
ed:d7:33:83:b9:39:33:b2:b4:9c:81:00:bd:7f:6a:
bf:a5:f9:78:18:3d:23:86:3e:84:56:42:f1:28:fc:
d0:53:ff:33:dc:62:20:a0:38:66:c3:4a:ee:a5:e4:
b7:3c:3f:97:06:90:10:71:26:1d:ff:76:67:a1:6f:
81:42:a5:7e:91:20:88:08:51:8f:ec:76:b4:2b:3e:
2c:c0:33:5e:2e:3e:5c:ee:01:33:bc:f1:22:fa:14:
24:26:e9:63:fd:56:a7:15:2e:47:ea:b2:70:e5:58:
ad:32:30:02:0f:ac:3e:57:68:05:f2:33:13:00:81:
f3:4a:81:49:49:78:8b:fc:46:85:17:a8:c2:03:94:
ca:76:c9:48:cb:7e:02:46:4f:e4:1f:1c:3c:51:db:
c6:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:D1:D5:36:C3:9A:66:C6:70:C8:ED:C8:29:FF:BD:12:3C:2F:3F:21
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/40b87ccc-296b-3e83-b24d-1a86bd63cf9f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
X509v3 Authority Key Identifier:
keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:56b:c000::/35
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:35:e7:6c:14:08:ce:66:9e:e7:dc:1b:78:9b:71:63:37:4c:
cf:4d:60:d1:dc:ef:4d:4b:d6:b0:37:21:55:b1:d7:84:09:5a:
b1:1c:11:23:e7:90:e8:a7:f4:33:87:89:e8:b2:1e:b3:9a:f0:
21:88:be:c2:a4:e0:f5:f2:e0:39:d0:dc:04:7c:e1:58:e1:ad:
c6:89:53:a6:48:12:1c:51:7c:2b:8f:e7:75:88:da:88:0f:04:
6f:8d:10:b0:82:c0:f7:8a:09:8c:dd:de:6a:e8:37:40:51:f0:
7d:00:91:3b:0d:db:fd:57:30:eb:03:f8:1c:94:f5:61:7c:a3:
b8:db:7a:74:9a:0b:a9:cc:da:5b:3a:d3:53:7f:ae:21:d5:0c:
ca:28:61:bb:f1:53:e6:b8:77:3b:f8:5c:f3:50:fc:60:24:c3:
3d:b3:c0:5c:04:a9:7a:68:e0:48:68:f0:f7:1a:9e:40:90:2e:
50:1b:f2:52:f0:c9:d2:6d:fb:0d:36:e6:04:f1:9b:2a:10:18:
89:c9:f5:47:ef:20:14:a8:25:5a:c4:34:83:1c:a3:d5:e3:8e:
ab:ba:54:d6:f6:eb:1f:bd:28:fc:44:f6:e2:34:2a:57:56:af:
01:80:da:f9:fc:b5:5e:05:38:86:04:2e:6d:d7:37:97:43:8b:
10:9e:0a:71
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0VolycqXg4SLErIQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI2MDMwNzAyMDAzMloXDTI2MDYwNTAxMDAzMlowLzEtMCsGA1UEAxMk
YmI0MTQwYjAtOTJiMS00ZDc5LWE5YWItNzM5MzJhMTFjOGM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTSvnCWrVo/vbk/PYbSdAmzHjs04HphM1dmt
ZBLmZOEmKHvXfY9NqN907fnov4AGF8XZMWLCyl8IMNa5DBQtFJQBZvyXtXTbdelh
LL/g3JB3CcU8SkqbAwJWWOs8zEUsd+KHGPC+X2Dt1zODuTkzsrScgQC9f2q/pfl4
GD0jhj6EVkLxKPzQU/8z3GIgoDhmw0rupeS3PD+XBpAQcSYd/3ZnoW+BQqV+kSCI
CFGP7Ha0Kz4swDNeLj5c7gEzvPEi+hQkJulj/VanFS5H6rJw5VitMjACD6w+V2gF
8jMTAIHzSoFJSXiL/EaFF6jCA5TKdslIy34CRk/kHxw8UdvGvwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL7R1TbDmmbGcMjtyCn/vRI8Lz8hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNDBiODdjY2MtMjk2Yi0z
ZTgzLWIyNGQtMWE4NmJkNjNjZjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYFIAEFa8Aw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApzXnbBQIzmae59wbeJtxYzdMz01g0dzvTUvWsDchVbHXhAlasRwR
I+eQ6Kf0M4eJ6LIes5rwIYi+wqTg9fLgOdDcBHzhWOGtxolTpkgSHFF8K4/ndYja
iA8Eb40QsILA94oJjN3eaug3QFHwfQCROw3b/Vcw6wP4HJT1YXyjuNt6dJoLqcza
WzrTU3+uIdUMyihhu/FT5rh3O/hc81D8YCTDPbPAXASpemjgSGjw9xqeQJAuUBvy
UvDJ0m37DTbmBPGbKhAYicn1R+8gFKglWsQ0gxyj1eOOq7pU1vbrH70o/ET24jQq
V1avAYDa+fy1XgU4hgQubdc3l0OLEJ4KcQ==
-----END CERTIFICATE-----
Generated at Fri Mar 13 23:53:06 2026 by rpki-client