
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa
File: 9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa (raw, json)
Hash identifier: cM7PqNXeRo3zdSB1VXToqSBqUbkBuoFrzkFnxYc8dDk=
Subject key identifier: 38:CE:61:C4:A2:71:1F:FC:4B:D5:90:EB:62:DB:89:31:0C:E8:A0:C8
Certificate issuer: /CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
Certificate serial: 010D0C9F4328584F02423F79287F7D04F3F1FB10
Authority key identifier: B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa
Signing time: Sun 30 Aug 2026 13:00:11 +0000
ROA not before: Sun 30 Aug 2026 13:00:11 +0000
ROA not after: Sat 28 Nov 2026 14:00:11 +0000
asID: 398206
IP address blocks: 2602:fcab::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 01 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:02:42:3f:79:28:7f:7d:04:f3:f1:fb:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4241fd4f-7ca1-4822-8ae9-684d75b05110
Validity
Not Before: Aug 30 13:00:11 2026 GMT
Not After : Nov 28 14:00:11 2026 GMT
Subject: CN=2dd71fbd-9b04-4866-b0e8-78a1b3ba02d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d7:9b:a5:f6:53:64:4b:9f:92:95:4c:1d:21:
a4:8e:fd:73:b6:f5:98:e8:56:6d:08:ae:dc:71:d4:
16:70:dc:8c:72:ff:ef:58:17:3a:db:17:09:65:4d:
55:72:a4:b6:fe:5c:9b:5e:3d:02:bf:90:0c:d3:94:
f6:96:1a:ea:7a:7e:ec:0f:0d:98:12:08:a7:df:ee:
5f:c2:5e:1f:fa:2b:c4:c7:70:eb:6f:73:5c:1e:42:
f3:c2:8a:a9:e7:83:58:2e:8b:a3:2d:62:ae:9b:92:
18:6c:85:35:44:e9:28:26:82:24:d3:bf:44:cd:07:
6a:73:17:c6:6a:50:b5:86:a5:0f:1f:0b:9e:04:8a:
89:86:2c:4e:78:84:2a:8f:0c:fe:8c:b5:9f:d1:e9:
85:55:ba:8e:f0:23:df:cf:41:f0:2e:5c:61:fb:4f:
0f:48:cc:a0:85:f4:d3:e1:4e:5b:eb:0a:06:22:6f:
91:96:13:08:2f:59:e2:62:02:0a:92:d2:2b:99:ba:
79:34:76:fc:5d:0e:ea:d9:6e:d5:86:a5:91:80:87:
a7:09:1a:b5:ca:20:fd:4b:11:05:98:a9:1c:36:7d:
39:13:50:17:85:13:fa:1f:a0:bf:40:c0:b8:fa:40:
7d:6d:94:fd:a2:d2:37:ea:c7:01:ec:e7:47:1e:d4:
1a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:CE:61:C4:A2:71:1F:FC:4B:D5:90:EB:62:DB:89:31:0C:E8:A0:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/9a3cf8fa-a37a-32f7-bf37-143346e3e0be.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110/4241fd4f-7ca1-4822-8ae9-684d75b05110.crl
X509v3 Authority Key Identifier:
keyid:B9:E3:F7:30:C7:2B:E0:44:26:25:D5:9F:CD:4B:BB:D8:0F:03:E8:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/4241fd4f-7ca1-4822-8ae9-684d75b05110.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fcab::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
83:85:6b:1b:e1:c4:b3:d0:51:ac:d1:25:d3:b3:89:a0:fd:19:
a1:2d:ef:b9:ca:ad:8c:5a:04:6e:a4:1d:e4:b4:d5:3d:32:c7:
1e:3d:86:32:b1:6b:08:01:8c:94:94:04:19:cb:98:71:dc:bf:
0a:17:be:19:05:11:3d:33:c7:25:79:55:07:6c:a9:13:bb:76:
8e:41:1b:e8:3b:d0:fd:39:c3:99:35:8e:54:43:8e:6f:d5:ce:
eb:3d:1e:b9:a3:d1:6c:3d:73:c2:48:2e:9a:db:20:89:17:83:
fc:5e:81:fb:db:22:d3:6b:46:e2:19:e3:1f:5c:15:b8:c9:40:
b6:6e:46:b8:73:83:82:34:bd:d7:e8:be:cc:db:35:2a:dd:2b:
f9:59:0f:ca:02:a2:6d:de:10:70:6b:78:b0:6f:2c:20:fd:1d:
ac:b6:4f:da:f0:58:fc:88:e7:08:7e:fa:03:d7:c1:c9:cd:3d:
98:96:a0:82:f9:77:1d:48:bf:c8:10:34:f0:97:71:a0:06:ea:
4c:fc:4e:6f:42:d5:f3:ce:5b:23:d2:05:38:13:21:65:ef:91:
87:e3:1f:54:5f:e0:ec:28:e6:18:24:1c:6b:fe:fa:d3:88:e5:
9b:2e:59:50:2f:b1:8a:e6:61:d2:2f:4b:82:c3:10:c2:f8:30:
5d:6f:d0:fd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8CQj95KH99BPPx+xAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDI0MWZkNGYtN2NhMS00ODIyLThhZTktNjg0ZDc1YjA1
MTEwMB4XDTI2MDgzMDEzMDAxMVoXDTI2MTEyODE0MDAxMVowLzEtMCsGA1UEAxMk
MmRkNzFmYmQtOWIwNC00ODY2LWIwZTgtNzhhMWIzYmEwMmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdebpfZTZEufkpVMHSGkjv1ztvWY6FZtCK7c
cdQWcNyMcv/vWBc62xcJZU1VcqS2/lybXj0Cv5AM05T2lhrqen7sDw2YEgin3+5f
wl4f+ivEx3Drb3NcHkLzwoqp54NYLoujLWKum5IYbIU1ROkoJoIk079EzQdqcxfG
alC1hqUPHwueBIqJhixOeIQqjwz+jLWf0emFVbqO8CPfz0HwLlxh+08PSMyghfTT
4U5b6woGIm+RlhMIL1niYgIKktIrmbp5NHb8XQ7q2W7VhqWRgIenCRq1yiD9SxEF
mKkcNn05E1AXhRP6H6C/QMC4+kB9bZT9otI36scB7OdHHtQavQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFDjOYcSicR/8S9WQ62LbiTEM6KDIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS80MjQx
ZmQ0Zi03Y2ExLTQ4MjItOGFlOS02ODRkNzViMDUxMTAvOWEzY2Y4ZmEtYTM3YS0z
MmY3LWJmMzctMTQzMzQ2ZTNlMGJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvNDI0MWZkNGYtN2NhMS00ODIyLThh
ZTktNjg0ZDc1YjA1MTEwLzQyNDFmZDRmLTdjYTEtNDgyMi04YWU5LTY4NGQ3NWIw
NTExMC5jcmwwHwYDVR0jBBgwFoAUueP3MMcr4EQmJdWfzUu72A8D6BgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS80MjQxZmQ0Zi03Y2ExLTQ4MjItOGFlOS02ODRk
NzViMDUxMTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL8qwAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAg4VrG+HEs9BRrNEl07OJoP0ZoS3vucqtjFoEbqQd5LTVPTLHHj2G
MrFrCAGMlJQEGcuYcdy/Che+GQURPTPHJXlVB2ypE7t2jkEb6DvQ/TnDmTWOVEOO
b9XO6z0euaPRbD1zwkgumtsgiReD/F6B+9si02tG4hnjH1wVuMlAtm5GuHODgjS9
1+i+zNs1Kt0r+VkPygKibd4QcGt4sG8sIP0drLZP2vBY/IjnCH76A9fByc09mJag
gvl3HUi/yBA08JdxoAbqTPxOb0LV885bI9IFOBMhZe+Rh+MfVF/g7CjmGCQca/76
04jlmy5ZUC+xiuZh0i9LgsMQwvgwXW/Q/Q==
-----END CERTIFICATE-----
Generated at Mon Aug 31 10:24:35 2026 by rpki-client