
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3dc404ee-345e-3616-974b-9d1ed6f37b3c.roa
File: 3dc404ee-345e-3616-974b-9d1ed6f37b3c.roa (raw, json)
Hash identifier: gj4Ad2YkMFT9YvbdehGbjb+q6cgHnuvdFR4pFRVaCYo=
Subject key identifier: BB:E3:16:D2:92:F0:AE:28:9F:64:4A:6F:9D:00:55:CC:0F:43:A6:4D
Certificate issuer: /CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Certificate serial: 010D0C9F4328584F576806C61716E0784B4E3DC0
Authority key identifier: B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3dc404ee-345e-3616-974b-9d1ed6f37b3c.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 16740
IP address blocks: 2602:f5c1:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 06 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:06:c6:17:16:e0:78:4b:4e:3d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3aba2284-9d24-4b6f-bc96-aa407d7a426f
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=45073daa-4f94-4dee-b056-80c34b579c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:8d:51:62:41:4f:51:81:54:6a:1c:c8:8e:
c3:f9:ef:41:b3:2f:10:05:de:2c:00:53:e6:a6:4d:
24:a8:48:db:86:53:56:51:68:0d:14:ff:f5:b5:e1:
71:be:d8:7c:c0:69:be:ce:31:b6:3a:b4:78:bb:53:
5d:05:6c:d6:f3:28:20:4f:e8:9a:72:97:37:cc:50:
f0:eb:14:cb:ce:aa:8a:fd:bb:38:da:2c:6b:81:5f:
41:56:4f:6b:ca:f2:5e:83:f6:75:0b:5b:c8:23:67:
cf:f2:18:b2:98:34:66:05:e7:d3:99:db:6c:eb:7b:
2b:89:d3:f9:8a:37:74:11:66:2d:ce:50:7a:8d:f6:
53:04:5c:e1:05:f7:82:dc:0d:22:a8:b8:50:70:3e:
36:c4:f6:1a:24:db:8e:69:04:69:2e:de:dd:4b:90:
3b:92:38:cd:2d:96:d1:85:cb:67:3a:58:67:af:d6:
75:69:a5:0c:c0:ae:76:ba:7d:20:c3:3b:bb:86:10:
6e:d6:0d:ca:8c:ab:c3:32:ca:d5:3d:1c:45:ec:e0:
62:c2:2b:07:a7:d4:d4:85:90:b4:e2:68:05:2d:d4:
1a:b9:8d:e4:99:d7:1b:77:9a:0f:76:13:a1:7e:0b:
e7:08:e9:d9:9f:c8:ab:0a:f6:9f:06:7e:90:ab:65:
3d:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:E3:16:D2:92:F0:AE:28:9F:64:4A:6F:9D:00:55:CC:0F:43:A6:4D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3dc404ee-345e-3616-974b-9d1ed6f37b3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f/3aba2284-9d24-4b6f-bc96-aa407d7a426f.crl
X509v3 Authority Key Identifier:
keyid:B5:BE:EE:25:A1:3A:DA:9E:A2:53:19:6E:15:87:43:3E:67:0B:53:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/3aba2284-9d24-4b6f-bc96-aa407d7a426f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f5c1:3::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
92:b1:97:7f:18:48:ff:03:3d:87:46:43:a3:75:16:3f:92:35:
1a:c1:fe:76:28:04:2e:2c:10:63:d7:7e:87:5f:f7:03:12:47:
08:7c:c4:94:3c:2c:fe:ed:08:9f:08:35:34:d3:28:1a:16:09:
13:e3:30:e2:fa:af:24:53:e3:56:ee:6f:71:83:3c:5d:c2:7c:
06:96:92:c4:60:96:bf:54:b5:1d:64:e3:8e:8d:17:4a:03:66:
8f:df:92:0c:f1:84:67:ef:f7:48:5e:71:a8:48:61:27:11:d7:
27:36:82:6a:4a:c1:f4:ad:47:cb:6a:3a:46:73:fe:24:b1:33:
04:a5:6f:c5:e4:7b:29:b6:78:84:9a:69:b2:af:e4:e6:cd:0c:
7c:e3:74:4b:e3:37:8c:21:0a:db:3f:1a:c2:3a:a1:07:d1:01:
37:1a:12:3f:18:86:02:e5:22:76:f6:e3:fa:4d:06:b8:3f:e4:
e6:0d:9f:89:39:01:c9:29:19:38:f5:dd:e7:34:04:50:ea:b3:
03:ac:97:67:78:ed:bb:75:6a:06:9b:7a:77:bc:11:e4:08:68:
ea:9a:0d:31:24:c3:eb:5f:b8:09:5f:9d:8b:87:6a:43:35:6e:
b7:0b:4a:fb:d0:40:9b:79:11:3e:95:a2:05:e4:5b:c3:b0:3a:
5c:9f:ec:26
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9XaAbGFxbgeEtOPcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiYTIyODQtOWQyNC00YjZmLWJjOTYtYWE0MDdkN2E0
MjZmMB4XDTI2MDkzMDAxMDAxMloXDTI2MTIyOTAyMDAxMlowLzEtMCsGA1UEAxMk
NDUwNzNkYWEtNGY5NC00ZGVlLWIwNTYtODBjMzRiNTc5Yzg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn0iNUWJBT1GBVGocyI7D+e9Bsy8QBd4sAFPm
pk0kqEjbhlNWUWgNFP/1teFxvth8wGm+zjG2OrR4u1NdBWzW8yggT+iacpc3zFDw
6xTLzqqK/bs42ixrgV9BVk9ryvJeg/Z1C1vII2fP8hiymDRmBefTmdts63sridP5
ijd0EWYtzlB6jfZTBFzhBfeC3A0iqLhQcD42xPYaJNuOaQRpLt7dS5A7kjjNLZbR
hctnOlhnr9Z1aaUMwK52un0gwzu7hhBu1g3KjKvDMsrVPRxF7OBiwisHp9TUhZC0
4mgFLdQauY3kmdcbd5oPdhOhfgvnCOnZn8irCvafBn6Qq2U9kQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLvjFtKS8K4on2RKb50AVcwPQ6ZNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJh
MjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQwN2Q3YTQyNmYvM2RjNDA0ZWUtMzQ1ZS0z
NjE2LTk3NGItOWQxZWQ2ZjM3YjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvM2FiYTIyODQtOWQyNC00YjZmLWJj
OTYtYWE0MDdkN2E0MjZmLzNhYmEyMjg0LTlkMjQtNGI2Zi1iYzk2LWFhNDA3ZDdh
NDI2Zi5jcmwwHwYDVR0jBBgwFoAUtb7uJaE62p6iUxluFYdDPmcLU1gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC8zYWJhMjI4NC05ZDI0LTRiNmYtYmM5Ni1hYTQw
N2Q3YTQyNmYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL1wQAD
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJKxl38YSP8DPYdGQ6N1Fj+SNRrB/nYoBC4sEGPXfodf9wMSRwh8
xJQ8LP7tCJ8INTTTKBoWCRPjMOL6ryRT41bub3GDPF3CfAaWksRglr9UtR1k446N
F0oDZo/fkgzxhGfv90hecahIYScR1yc2gmpKwfStR8tqOkZz/iSxMwSlb8Xkeym2
eISaabKv5ObNDHzjdEvjN4whCts/GsI6oQfRATcaEj8YhgLlInb24/pNBrg/5OYN
n4k5AckpGTj13ec0BFDqswOsl2d47bt1agabene8EeQIaOqaDTEkw+tfuAlfnYuH
akM1brcLSvvQQJt5ET6VogXkW8OwOlyf7CY=
-----END CERTIFICATE-----
Generated at Sun Oct 4 19:59:58 2026 by rpki-client