
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940/da5a0898-ecc6-34e2-9f4a-b3aaefa399b2.roa
File: da5a0898-ecc6-34e2-9f4a-b3aaefa399b2.roa (raw, json)
Hash identifier: A5p5JIhR/iYRcP4PZM0WcS3ukYPJOr5Y+65bZLZnblo=
Subject key identifier: A1:3E:4A:19:A1:28:82:6D:28:8F:72:4B:3F:D8:AD:2A:78:FB:9C:35
Certificate issuer: /CN=8e53995d-6d38-4903-b754-cd2d9cb17940
Certificate serial: 010D0C9F4328584D543CB4B9BD0D1D7D68127E60
Authority key identifier: CF:59:66:73:60:63:15:68:EB:76:5E:49:C2:46:7C:31:B2:B1:A7:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940/da5a0898-ecc6-34e2-9f4a-b3aaefa399b2.roa
Signing time: Sun 29 Mar 2026 12:11:47 +0000
ROA not before: Sun 29 Mar 2026 12:11:47 +0000
ROA not after: Sat 27 Jun 2026 12:11:47 +0000
asID: 13444
IP address blocks: 2602:f461::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940/8e53995d-6d38-4903-b754-cd2d9cb17940.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940/8e53995d-6d38-4903-b754-cd2d9cb17940.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:54:3c:b4:b9:bd:0d:1d:7d:68:12:7e:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e53995d-6d38-4903-b754-cd2d9cb17940
Validity
Not Before: Mar 29 12:11:47 2026 GMT
Not After : Jun 27 12:11:47 2026 GMT
Subject: CN=78190024-0800-44ce-8932-db6efb574432
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:6c:0b:58:31:99:b3:e4:e7:63:62:a6:22:c3:
6f:4e:e0:33:0c:4a:4a:72:8c:78:9b:84:35:7d:eb:
00:2d:a4:e9:4c:9c:f1:6e:2c:49:6d:31:51:f2:92:
72:ab:50:3b:0f:09:e3:53:3d:ea:0a:2e:60:86:d3:
a5:4e:01:44:e3:26:38:f0:05:85:a7:9f:9b:99:bf:
68:82:96:f2:d3:f2:c0:2f:df:d9:8d:8d:6a:e2:e5:
d1:4e:64:1c:51:ea:ee:01:27:1b:d9:88:b7:a7:0d:
fd:e7:10:9e:da:1a:6f:9f:e6:c7:d0:c7:67:4b:3e:
aa:ec:66:79:40:81:55:50:9f:a3:7b:05:59:dc:f2:
1c:c3:93:7c:22:75:31:81:32:08:3c:08:a0:36:cb:
28:06:5e:30:9c:45:67:7b:d2:ab:08:45:da:68:c6:
b7:2c:14:c3:4f:7e:42:67:81:15:e2:09:2b:1b:b3:
2b:f8:6a:57:fb:d9:1c:a4:ad:3f:33:ba:d2:1a:b2:
a6:1c:75:32:3d:62:53:56:53:71:3b:65:dd:26:6e:
89:0b:86:17:d5:21:8e:a6:ff:e2:47:0c:bc:52:58:
6e:a5:7b:82:f7:3b:dc:95:df:4d:97:e0:81:4d:d5:
7e:44:67:7d:ac:8a:37:3f:a7:a4:46:7b:3a:15:0b:
30:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:3E:4A:19:A1:28:82:6D:28:8F:72:4B:3F:D8:AD:2A:78:FB:9C:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940/da5a0898-ecc6-34e2-9f4a-b3aaefa399b2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940/8e53995d-6d38-4903-b754-cd2d9cb17940.crl
X509v3 Authority Key Identifier:
keyid:CF:59:66:73:60:63:15:68:EB:76:5E:49:C2:46:7C:31:B2:B1:A7:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/8e53995d-6d38-4903-b754-cd2d9cb17940.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f461::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a7:6f:7a:1c:ec:19:60:d7:40:82:49:58:4f:2c:d3:d4:b3:14:
c2:12:c1:bf:02:26:8a:e4:83:f1:9c:f2:73:6f:8a:3c:57:9a:
b7:3e:cb:5e:7b:f9:77:c5:f9:8c:36:1b:3f:33:47:34:e2:b7:
8f:f9:24:bf:9d:a3:dc:81:e3:fb:0d:83:04:7e:ec:f8:73:c6:
58:68:e4:3b:0b:ef:a5:99:4b:4e:2d:ce:1d:f2:ec:f5:93:78:
7f:94:fd:47:bf:5f:8f:c3:1c:a0:c8:d4:68:05:32:9a:53:ff:
16:1f:54:35:83:65:17:da:cd:29:cd:77:de:d7:f8:0b:4e:62:
78:91:4f:db:6c:a9:66:b2:1b:ca:8d:2b:99:0f:c5:1e:e5:f2:
b2:7c:b7:75:32:9c:b0:ff:cd:5d:5b:18:fd:ba:9e:19:e3:28:
b3:61:ab:84:b9:62:1f:47:ed:f3:ed:f4:7b:65:ac:57:14:63:
b9:ae:78:61:b5:2a:15:70:ac:59:2c:aa:86:fc:d3:37:85:0b:
7e:0b:99:01:22:2e:46:ba:ea:a9:db:55:f2:84:8a:35:5a:e4:
a2:88:52:eb:a1:80:d2:33:1b:c0:d0:3d:17:c1:3a:e5:db:22:
32:e8:77:cf:98:64:57:23:2c:51:fc:ca:48:2e:8d:5e:44:19:
59:4d:7f:b6
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1UPLS5vQ0dfWgSfmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGU1Mzk5NWQtNmQzOC00OTAzLWI3NTQtY2QyZDljYjE3
OTQwMB4XDTI2MDMyOTEyMTE0N1oXDTI2MDYyNzEyMTE0N1owLzEtMCsGA1UEAxMk
NzgxOTAwMjQtMDgwMC00NGNlLTg5MzItZGI2ZWZiNTc0NDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmwLWDGZs+TnY2KmIsNvTuAzDEpKcox4m4Q1
fesALaTpTJzxbixJbTFR8pJyq1A7DwnjUz3qCi5ghtOlTgFE4yY48AWFp5+bmb9o
gpby0/LAL9/ZjY1q4uXRTmQcUeruAScb2Yi3pw395xCe2hpvn+bH0MdnSz6q7GZ5
QIFVUJ+jewVZ3PIcw5N8InUxgTIIPAigNssoBl4wnEVne9KrCEXaaMa3LBTDT35C
Z4EV4gkrG7Mr+GpX+9kcpK0/M7rSGrKmHHUyPWJTVlNxO2XdJm6JC4YX1SGOpv/i
Rwy8UlhupXuC9zvcld9Nl+CBTdV+RGd9rIo3P6ekRns6FQswUQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKE+ShmhKIJtKI9ySz/YrSp4+5w1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZTUz
OTk1ZC02ZDM4LTQ5MDMtYjc1NC1jZDJkOWNiMTc5NDAvZGE1YTA4OTgtZWNjNi0z
NGUyLTlmNGEtYjNhYWVmYTM5OWIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvOGU1Mzk5NWQtNmQzOC00OTAzLWI3
NTQtY2QyZDljYjE3OTQwLzhlNTM5OTVkLTZkMzgtNDkwMy1iNzU0LWNkMmQ5Y2Ix
Nzk0MC5jcmwwHwYDVR0jBBgwFoAUz1lmc2BjFWjrdl5JwkZ8MbKxp3AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS84ZTUzOTk1ZC02ZDM4LTQ5MDMtYjc1NC1jZDJk
OWNiMTc5NDAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL0YQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAp296HOwZYNdAgklYTyzT1LMUwhLBvwImiuSD8Zzyc2+KPFeatz7L
Xnv5d8X5jDYbPzNHNOK3j/kkv52j3IHj+w2DBH7s+HPGWGjkOwvvpZlLTi3OHfLs
9ZN4f5T9R79fj8McoMjUaAUymlP/Fh9UNYNlF9rNKc133tf4C05ieJFP22ypZrIb
yo0rmQ/FHuXysny3dTKcsP/NXVsY/bqeGeMos2GrhLliH0ft8+30e2WsVxRjua54
YbUqFXCsWSyqhvzTN4ULfguZASIuRrrqqdtV8oSKNVrkoohS66GA0jMbwNA9F8E6
5dsiMuh3z5hkVyMsUfzKSC6NXkQZWU1/tg==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:41:37 2026 by rpki-client