
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa
File: 34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa (raw, json)
Hash identifier: MLiChUNGnQClAoYSTSPtYGf4SlN1ZIjC63/WTpNvpAQ=
Subject key identifier: 63:9A:F0:9A:01:CF:15:FD:DE:78:C9:A9:B5:0F:B0:47:FE:80:4C:90
Certificate issuer: /CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84
Certificate serial: 010D0C9F4328584D6AAA7EC058737BD351170740
Authority key identifier: 9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa
Signing time: Mon 06 Apr 2026 13:00:30 +0000
ROA not before: Mon 06 Apr 2026 13:00:30 +0000
ROA not after: Sun 05 Jul 2026 13:00:30 +0000
asID: 13490
IP address blocks: 2600:2800::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:6a:aa:7e:c0:58:73:7b:d3:51:17:07:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ce4bae22-282c-4c42-a04f-dc6b4250fa84
Validity
Not Before: Apr 6 13:00:30 2026 GMT
Not After : Jul 5 13:00:30 2026 GMT
Subject: CN=25a0cf52-8e37-4afe-ad26-30c7d3899e89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:22:c0:31:a0:6f:ba:e4:32:93:26:bb:56:d8:
74:c5:8c:e8:52:7b:7a:60:eb:ae:d0:2b:21:fa:aa:
3c:7b:f7:bc:3c:2c:68:4a:67:ab:03:98:a4:10:08:
fc:cd:9f:e2:0c:6d:5a:44:09:14:25:ba:78:ce:70:
98:d1:6e:11:67:6a:94:e8:7a:60:fc:3a:be:08:b5:
4f:ff:85:ea:d8:43:19:db:86:62:c7:c0:18:12:55:
e8:1d:75:9c:c1:44:47:ae:de:6f:00:dd:73:0e:e0:
1c:ea:c3:b4:c8:5d:8c:80:3c:c4:c7:c6:4c:64:70:
60:cc:ee:f7:fa:69:ae:89:f3:66:e6:20:85:d3:4b:
16:9c:03:16:24:bf:28:7c:fc:90:42:fd:f1:d7:68:
35:ce:31:54:15:df:8a:99:b3:1c:e9:96:79:59:5d:
9e:0d:f4:87:4f:6b:47:03:cc:f9:c3:ba:3f:79:37:
ff:26:93:98:f1:27:64:07:51:66:c0:5a:67:68:fe:
16:a3:45:fa:5e:2c:8c:32:ff:99:b0:cc:e2:e3:ee:
26:ac:30:e6:e8:c3:6b:c3:4b:fc:a2:43:90:2c:1c:
d4:0c:9e:61:d2:72:4e:b0:25:38:02:d8:2a:e4:e2:
72:51:38:68:20:e6:9a:17:e3:74:5b:17:53:cc:10:
ee:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:9A:F0:9A:01:CF:15:FD:DE:78:C9:A9:B5:0F:B0:47:FE:80:4C:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/34c6d0e5-e0f9-32d7-8fe3-e69401e8d259.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84/ce4bae22-282c-4c42-a04f-dc6b4250fa84.crl
X509v3 Authority Key Identifier:
keyid:9A:FA:30:EF:DB:56:29:65:F4:E7:84:99:AE:B1:D5:D5:A7:89:5C:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/ce4bae22-282c-4c42-a04f-dc6b4250fa84.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:2800::/30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:a6:ec:c8:4c:8d:e2:fe:f0:b9:bb:ab:ea:b3:87:18:59:5a:
b8:e9:08:ea:32:4b:6c:e8:33:21:0e:3b:7e:7a:82:7b:ab:9d:
39:4c:82:78:9a:99:2a:db:16:f1:8b:25:6c:51:58:50:f3:16:
8f:69:48:6b:71:0b:99:0d:08:ed:3d:0c:ef:cd:60:fe:1e:08:
b8:32:8b:25:f4:9b:c4:b8:f0:22:7f:e5:fe:8d:3d:de:47:5f:
6a:07:15:30:ff:3e:3e:ce:18:d7:a9:a2:c7:7f:9d:8d:9c:ca:
0a:f2:65:e8:c7:e4:67:fa:8a:de:41:9a:87:b1:86:09:0b:4e:
df:4c:aa:15:65:38:24:39:62:16:ae:1a:a3:31:97:59:ea:4b:
f4:45:5d:bc:7b:3e:09:e3:67:a1:f3:76:34:91:5a:fe:30:e6:
53:21:32:07:b6:a6:f4:6c:3a:61:77:46:2b:dc:83:f3:b1:50:
bf:6c:97:13:58:40:6e:14:78:c5:66:7e:a8:e8:a9:9d:da:0c:
a0:aa:b9:39:6b:57:20:90:08:3f:33:0d:84:14:2c:40:74:1a:
11:9a:f0:a2:74:28:6e:f5:f9:d6:fe:3c:4a:2c:5c:a9:77:e4:
6a:cf:2d:97:b8:53:a5:04:38:d3:58:1e:84:fe:14:16:7b:ed:
ab:e2:00:66
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1qqn7AWHN701EXB0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2U0YmFlMjItMjgyYy00YzQyLWEwNGYtZGM2YjQyNTBm
YTg0MB4XDTI2MDQwNjEzMDAzMFoXDTI2MDcwNTEzMDAzMFowLzEtMCsGA1UEAxMk
MjVhMGNmNTItOGUzNy00YWZlLWFkMjYtMzBjN2QzODk5ZTg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmiLAMaBvuuQykya7Vth0xYzoUnt6YOuu0Csh
+qo8e/e8PCxoSmerA5ikEAj8zZ/iDG1aRAkUJbp4znCY0W4RZ2qU6Hpg/Dq+CLVP
/4Xq2EMZ24Zix8AYElXoHXWcwURHrt5vAN1zDuAc6sO0yF2MgDzEx8ZMZHBgzO73
+mmuifNm5iCF00sWnAMWJL8ofPyQQv3x12g1zjFUFd+KmbMc6ZZ5WV2eDfSHT2tH
A8z5w7o/eTf/JpOY8SdkB1FmwFpnaP4Wo0X6XiyMMv+ZsMzi4+4mrDDm6MNrw0v8
okOQLBzUDJ5h0nJOsCU4Atgq5OJyUThoIOaaF+N0WxdTzBDuFwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGOa8JoBzxX93njJqbUPsEf+gEyQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRi
YWUyMi0yODJjLTRjNDItYTA0Zi1kYzZiNDI1MGZhODQvMzRjNmQwZTUtZTBmOS0z
MmQ3LThmZTMtZTY5NDAxZThkMjU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NWUwNmVhZi0z
N2E3LTQ1ODgtYWJlYS1lNDkwOWVmMWI0ZTIvY2U0YmFlMjItMjgyYy00YzQyLWEw
NGYtZGM2YjQyNTBmYTg0L2NlNGJhZTIyLTI4MmMtNGM0Mi1hMDRmLWRjNmI0MjUw
ZmE4NC5jcmwwHwYDVR0jBBgwFoAUmvow79tWKWX054SZrrHV1aeJXNEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg1ZTA2ZWFmLTM3YTctNDU4
OC1hYmVhLWU0OTA5ZWYxYjRlMi9jZTRiYWUyMi0yODJjLTRjNDItYTA0Zi1kYzZi
NDI1MGZhODQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgAoADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAppuzITI3i/vC5u6vqs4cYWVq46QjqMkts6DMhDjt+eoJ7q505TIJ4
mpkq2xbxiyVsUVhQ8xaPaUhrcQuZDQjtPQzvzWD+Hgi4Mosl9JvEuPAif+X+jT3e
R19qBxUw/z4+zhjXqaLHf52NnMoK8mXox+Rn+oreQZqHsYYJC07fTKoVZTgkOWIW
rhqjMZdZ6kv0RV28ez4J42eh83Y0kVr+MOZTITIHtqb0bDphd0Yr3IPzsVC/bJcT
WEBuFHjFZn6o6Kmd2gygqrk5a1cgkAg/Mw2EFCxAdBoRmvCidChu9fnW/jxKLFyp
d+Rqzy2XuFOlBDjTWB6E/hQWe+2r4gBm
-----END CERTIFICATE-----
Generated at Mon Apr 13 12:08:00 2026 by rpki-client