
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa
File: 3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa (raw, json)
Hash identifier: j/AQrS9bUBLwHO/sww6RnWLsLM/uIcgBVkI5Fh25fFk=
Subject key identifier: FD:F7:23:04:F9:22:55:36:8F:6A:C4:B2:68:24:F3:AB:8A:F3:AA:BE
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D24E121D66AEAE7DC1C0ED870
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 30036
IP address blocks: 2604:2d80:b880::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:e1:21:d6:6a:ea:e7:dc:1c:0e:d8:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=101a4b03-15ad-4edc-b0b9-181877a07d99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e4:e3:e2:2b:f2:e4:89:83:1b:df:3f:61:b9:
64:11:a0:82:59:91:a9:01:20:4f:91:ed:98:27:b2:
53:f6:9c:9c:de:44:b1:f3:dd:92:78:8c:b3:11:c8:
07:4f:64:f3:12:c3:42:cf:c3:48:56:0e:8e:7b:5a:
6e:32:18:26:97:46:e4:b6:59:b6:9c:0a:29:00:cd:
b4:b6:e9:cf:08:2b:41:0a:6c:f4:cd:0a:5f:f3:c2:
35:89:c1:54:ac:2f:2e:c1:8d:9d:23:62:9b:a2:1b:
72:bc:7c:7b:3e:1f:d4:b4:7a:23:b0:3b:ce:db:7d:
7c:02:1f:14:1c:ee:f2:4a:f9:b0:b5:96:3c:6a:fe:
cc:05:81:75:54:41:6f:84:95:63:08:d3:68:cc:94:
3e:f9:77:48:cd:33:0f:1f:30:24:a5:dc:8f:c1:19:
46:a6:4a:49:b8:42:54:b9:52:02:f0:f7:b0:ac:5a:
e3:de:20:d7:4a:33:30:ed:6c:81:f2:e6:ca:c6:8a:
6e:6c:d7:62:b8:7e:fb:29:35:9f:34:c5:09:a0:a7:
67:d3:8d:ed:bd:f0:38:fc:0b:0d:dd:44:5e:62:88:
70:de:1f:ff:52:b5:13:47:a3:e0:db:c2:c6:cc:91:
b0:80:e3:dd:ae:23:81:77:4a:40:ce:2c:41:02:01:
4e:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:F7:23:04:F9:22:55:36:8F:6A:C4:B2:68:24:F3:AB:8A:F3:AA:BE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3f2cd2f2-7017-3d82-b304-d7987abdd3a6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:b880::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
46:d9:d6:31:88:8d:ea:a3:82:a6:e2:9c:7f:70:2f:30:4c:64:
0e:92:28:5d:ac:fd:ae:b7:65:db:e8:cc:5a:07:09:1c:d5:09:
be:fd:9a:fe:3d:9e:36:17:3f:d2:d0:a8:92:03:8a:6d:2c:a2:
9d:33:49:71:c4:9e:95:f2:a4:78:67:31:8d:0d:9b:33:fb:24:
a2:91:c1:bf:84:36:60:0d:6c:46:34:e6:24:a6:3c:0b:91:8b:
a4:b5:4a:4b:cd:d6:6a:e1:1b:40:4f:26:b3:06:b7:f4:65:ac:
cc:e1:57:43:9f:90:59:91:2a:6f:4a:f7:40:10:f3:53:81:72:
40:22:5a:9d:c8:8d:be:ca:ae:3c:22:fc:e3:45:1f:e3:5e:a4:
32:bc:b9:d3:85:c8:ce:e4:fa:9b:df:0c:00:0b:af:5f:a4:36:
1c:f2:a4:c2:2e:49:38:78:93:33:72:6f:da:38:58:ba:09:ab:
a3:3c:70:b4:58:0e:22:c0:5c:51:89:14:19:9f:d6:c6:36:be:
4a:01:3d:03:e9:b5:95:97:8f:95:2c:bf:4d:a7:19:c6:ae:d8:
c9:2e:9b:21:ba:d3:c3:75:57:e9:23:38:90:1b:90:a3:cd:a4:
65:a0:a0:ce:a8:83:d8:2c:3c:27:ed:49:fe:18:9b:46:a0:71:
b9:8f:70:46
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k4SHWaurn3BwO2HAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MTAxYTRiMDMtMTVhZC00ZWRjLWIwYjktMTgxODc3YTA3ZDk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+Tj4ivy5ImDG98/YblkEaCCWZGpASBPke2Y
J7JT9pyc3kSx892SeIyzEcgHT2TzEsNCz8NIVg6Oe1puMhgml0bktlm2nAopAM20
tunPCCtBCmz0zQpf88I1icFUrC8uwY2dI2KbohtyvHx7Ph/UtHojsDvO2318Ah8U
HO7ySvmwtZY8av7MBYF1VEFvhJVjCNNozJQ++XdIzTMPHzAkpdyPwRlGpkpJuEJU
uVIC8PewrFrj3iDXSjMw7WyB8ubKxopubNdiuH77KTWfNMUJoKdn043tvfA4/AsN
3UReYohw3h//UrUTR6Pg28LGzJGwgOPdriOBd0pAzixBAgFOhQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFP33IwT5IlU2j2rEsmgk86uK86q+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvM2YyY2QyZjItNzAxNy0z
ZDgyLWIzMDQtZDc5ODdhYmRkM2E2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLiA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEbZ1jGIjeqjgqbinH9wLzBMZA6SKF2s/a63ZdvozFoHCRzVCb79
mv49njYXP9LQqJIDim0sop0zSXHEnpXypHhnMY0NmzP7JKKRwb+ENmANbEY05iSm
PAuRi6S1SkvN1mrhG0BPJrMGt/RlrMzhV0OfkFmRKm9K90AQ81OBckAiWp3Ijb7K
rjwi/ONFH+NepDK8udOFyM7k+pvfDAALr1+kNhzypMIuSTh4kzNyb9o4WLoJq6M8
cLRYDiLAXFGJFBmf1sY2vkoBPQPptZWXj5Usv02nGcau2MkumyG608N1V+kjOJAb
kKPNpGWgoM6og9gsPCftSf4Ym0agcbmPcEY=
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:29:50 2026 by rpki-client