
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
File: b9b307c3-dc7b-3371-a0f1-315acde48792.roa (raw, json)
Hash identifier: cN3t+KIWMvrZ62MLP4nSWl8W52oU06U3LqcYYslYVoM=
Subject key identifier: 27:C7:CD:5D:99:16:8C:98:FE:A9:E2:F5:91:D2:E8:16:72:1A:6D:1C
Certificate issuer: /CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
Certificate serial: 010D0C9F4328584D95F00488FB7C5D06476941C0
Authority key identifier: 50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 1351
IP address blocks: 2620:104:e000::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:f0:04:88:fb:7c:5d:06:47:69:41:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a2190d0-2edf-4b5e-a6f6-c788ca636585
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=889ad551-75cc-4f58-912a-74b4323a0c6c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:0c:d0:66:89:51:a3:95:37:8e:f1:c6:da:61:
b8:f5:c6:ab:10:1b:f5:1f:37:9b:6a:4a:0a:a7:fd:
96:02:21:73:1a:d9:20:f7:cd:d4:6f:34:c2:98:dc:
cb:f6:6e:c7:7d:10:f3:e3:ee:80:c2:94:38:fc:be:
28:9f:bd:77:a7:6d:ba:37:b5:30:86:2e:c3:1b:fb:
ac:29:16:1b:81:0b:da:7f:70:c5:cb:7f:f2:1d:d4:
11:b1:3b:c5:3b:3c:86:52:43:e5:66:9a:6e:04:90:
ad:fa:5b:33:62:8c:1a:d7:84:73:a9:2f:71:cd:be:
2c:c7:1d:8c:06:de:91:3a:c4:0a:cf:cd:91:62:50:
85:c8:d9:f6:f4:9f:c2:f7:51:1e:cc:8a:4e:91:a9:
64:fd:5e:55:43:38:83:db:b0:95:01:25:44:45:96:
ac:bb:87:af:c7:ad:54:9d:ae:49:f0:22:34:e1:25:
6a:16:38:f7:2e:ff:a5:e4:6c:27:c2:85:b1:9d:23:
e6:b9:f5:c2:25:f7:dd:c6:c9:e2:6f:78:7e:4d:71:
b4:bb:55:5b:52:5f:87:5e:af:80:f1:74:1d:c0:b7:
20:c7:4b:e1:49:bd:ac:04:25:25:54:4b:69:43:ba:
3f:b0:7b:94:6a:3d:5e:de:da:1d:3c:bf:95:f7:38:
b1:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:C7:CD:5D:99:16:8C:98:FE:A9:E2:F5:91:D2:E8:16:72:1A:6D:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/b9b307c3-dc7b-3371-a0f1-315acde48792.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585/2a2190d0-2edf-4b5e-a6f6-c788ca636585.crl
X509v3 Authority Key Identifier:
keyid:50:09:31:6F:BA:FD:0F:52:FB:AA:67:0B:4C:76:D2:DC:90:EF:32:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a2190d0-2edf-4b5e-a6f6-c788ca636585.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:104:e000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:8a:21:4f:40:55:8e:ae:e1:3b:e1:e6:21:67:40:d3:4e:13:
d2:6d:81:4a:87:ad:b2:6c:cc:9b:7c:ed:dd:0e:78:37:38:50:
bb:21:36:e5:b5:dc:e4:8f:6e:fd:ab:a4:07:af:9e:96:ef:a3:
10:4c:2b:02:6c:2e:54:25:1f:c3:9f:e0:00:47:c6:fc:2b:2f:
c8:c1:d3:f8:70:bc:87:8a:cf:7a:9c:11:ee:ed:25:7d:78:e2:
d5:ce:5d:fb:f5:85:85:14:e4:7b:8c:d0:61:f7:12:d4:84:89:
eb:d4:72:23:39:83:ef:d6:5e:6b:d6:56:c1:5c:be:ea:0a:3c:
1d:3c:8f:6c:6f:8d:44:4f:2b:98:68:6b:52:c3:13:13:6a:be:
a3:c8:8f:c9:c1:9d:94:21:14:fd:ef:98:b5:8a:2b:d9:7c:1a:
00:81:3f:e2:7c:1b:c9:fd:53:9b:8f:32:52:e7:55:ca:20:4f:
09:85:de:ee:43:7f:57:3b:66:9f:fa:37:d8:68:80:a9:75:67:
d3:b1:be:a5:0f:30:2f:bc:fe:6e:82:e4:1b:94:38:be:3a:d3:
31:5b:8e:fb:43:c0:58:9b:d0:a9:00:dc:05:11:c8:ed:17:78:
66:ff:78:3f:7b:15:40:b0:85:4f:86:34:26:08:94:be:85:19:
53:42:1a:05
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2V8ASI+3xdBkdpQcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEyMTkwZDAtMmVkZi00YjVlLWE2ZjYtYzc4OGNhNjM2
NTg1MB4XDTI2MDQyMjAxMDAyM1oXDTI2MDcyMTAxMDAyM1owLzEtMCsGA1UEAxMk
ODg5YWQ1NTEtNzVjYy00ZjU4LTkxMmEtNzRiNDMyM2EwYzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwzQZolRo5U3jvHG2mG49carEBv1HzebakoK
p/2WAiFzGtkg983UbzTCmNzL9m7HfRDz4+6AwpQ4/L4on713p226N7Uwhi7DG/us
KRYbgQvaf3DFy3/yHdQRsTvFOzyGUkPlZppuBJCt+lszYowa14RzqS9xzb4sxx2M
Bt6ROsQKz82RYlCFyNn29J/C91EezIpOkalk/V5VQziD27CVASVERZasu4evx61U
na5J8CI04SVqFjj3Lv+l5GwnwoWxnSPmufXCJffdxsnib3h+TXG0u1VbUl+HXq+A
8XQdwLcgx0vhSb2sBCUlVEtpQ7o/sHuUaj1e3todPL+V9zixrwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCfHzV2ZFoyY/qni9ZHS6BZyGm0cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYTIx
OTBkMC0yZWRmLTRiNWUtYTZmNi1jNzg4Y2E2MzY1ODUvYjliMzA3YzMtZGM3Yi0z
MzcxLWEwZjEtMzE1YWNkZTQ4NzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmEyMTkwZDAtMmVkZi00YjVlLWE2
ZjYtYzc4OGNhNjM2NTg1LzJhMjE5MGQwLTJlZGYtNGI1ZS1hNmY2LWM3ODhjYTYz
NjU4NS5jcmwwHwYDVR0jBBgwFoAUUAkxb7r9D1L7qmcLTHbS3JDvMqUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYTIxOTBkMC0yZWRmLTRiNWUtYTZmNi1jNzg4
Y2E2MzY1ODUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJiABBOAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALIohT0BVjq7hO+HmIWdA004T0m2BSoetsmzMm3zt3Q54NzhQuyE2
5bXc5I9u/aukB6+elu+jEEwrAmwuVCUfw5/gAEfG/CsvyMHT+HC8h4rPepwR7u0l
fXji1c5d+/WFhRTke4zQYfcS1ISJ69RyIzmD79Zea9ZWwVy+6go8HTyPbG+NRE8r
mGhrUsMTE2q+o8iPycGdlCEU/e+YtYor2XwaAIE/4nwbyf1Tm48yUudVyiBPCYXe
7kN/Vztmn/o32GiAqXVn07G+pQ8wL7z+boLkG5Q4vjrTMVuO+0PAWJvQqQDcBRHI
7Rd4Zv94P3sVQLCFT4Y0JgiUvoUZU0IaBQ==
-----END CERTIFICATE-----
Generated at Wed May 13 13:20:46 2026 by rpki-client