
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9f21026-678e-3380-8711-3bd100ee3870.roa
File: a9f21026-678e-3380-8711-3bd100ee3870.roa (raw, json)
Hash identifier: 2RvpaTNWFI3zQIRQ6DK7yFJxR/LSM+V/ZmW0lGZGUqg=
Subject key identifier: FB:48:66:E1:41:72:38:2A:99:38:44:C0:E4:27:83:B2:40:94:D5:33
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584E90BA5E0ECA59C9B89D467F72
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9f21026-678e-3380-8711-3bd100ee3870.roa
Signing time: Mon 20 Jul 2026 21:00:11 +0000
ROA not before: Mon 20 Jul 2026 21:00:11 +0000
ROA not after: Sun 18 Oct 2026 21:00:11 +0000
asID: 19905
IP address blocks: 2604:2d80:bc80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 26 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:ba:5e:0e:ca:59:c9:b8:9d:46:7f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Jul 20 21:00:11 2026 GMT
Not After : Oct 18 21:00:11 2026 GMT
Subject: CN=d477c78e-7372-4835-9e98-e555afc43fe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:46:45:cd:0d:4f:b1:22:12:3e:a6:31:a3:b9:
92:f0:07:6f:4d:3d:d5:2f:0c:47:8b:26:82:5b:d2:
82:cf:f2:9f:80:21:d7:67:51:66:aa:4e:2c:fe:27:
70:84:d2:30:10:dd:ec:77:92:a6:86:35:dd:ae:8b:
a6:1c:9d:15:cf:8f:cd:6e:c7:ed:90:d3:4b:cc:01:
6f:fc:13:eb:52:ad:06:dc:32:06:a8:00:9e:24:f3:
70:ff:b6:2b:a7:8a:08:d7:ba:80:b3:d0:ed:d7:13:
13:57:00:55:dd:93:96:ed:e4:79:aa:0e:09:1d:b8:
4d:83:7e:d4:3f:35:a1:bd:30:20:cc:e6:c7:a4:b3:
1a:ed:41:a7:6e:0c:9b:04:fe:b7:6c:7b:9a:02:9b:
35:7e:0a:d0:1a:9e:23:c5:b8:58:58:a6:d9:b7:e9:
81:36:14:9e:fc:ba:90:9f:a6:da:a4:39:c1:5d:d7:
f0:a5:e3:c3:12:13:8e:61:07:ab:9b:16:e5:6a:ab:
12:c4:6b:7c:bb:f4:9d:da:5c:76:63:3e:9b:4f:1d:
a9:67:54:76:cc:43:ee:c0:d4:97:c4:be:cb:1b:89:
c5:ae:ef:0a:eb:5c:ff:fb:a5:cc:dc:92:3c:6f:b9:
70:ff:a7:e0:75:58:28:93:bd:a6:3e:38:43:ba:7b:
da:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:48:66:E1:41:72:38:2A:99:38:44:C0:E4:27:83:B2:40:94:D5:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a9f21026-678e-3380-8711-3bd100ee3870.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:bc80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
20:2c:50:d0:9a:60:12:fa:b0:9a:66:6a:5c:e6:4a:31:62:38:
64:eb:c0:e1:76:34:78:ad:0a:2d:a2:fa:a1:07:bb:d6:6d:f8:
8b:aa:81:b1:96:40:05:7e:dc:9a:b0:9d:12:c8:a7:4a:eb:6f:
6c:b0:48:00:61:ce:10:4c:38:b0:c7:6f:9b:f1:a3:0d:9c:0a:
6e:c7:38:17:63:f1:5a:8f:27:06:25:88:36:34:fc:15:9a:aa:
7c:27:06:ae:88:e4:8e:88:ce:20:f4:6a:c7:ef:23:fb:0b:7d:
b0:bf:d6:42:04:3e:46:58:68:9d:92:3d:00:0a:56:9f:6f:fa:
e7:cf:27:5b:70:6d:0e:36:47:05:68:3c:6b:3e:63:fe:8b:2e:
25:13:a3:01:47:e5:d4:47:a0:bf:a4:f3:b8:b8:fe:87:0c:b0:
73:24:7e:94:a0:35:31:e2:15:c1:81:7c:4e:c0:78:71:c5:75:
34:19:d4:0c:a3:52:d9:03:06:a9:15:4e:74:c9:2d:fd:2e:ee:
b9:1c:3a:81:68:d2:e0:34:2e:21:1f:31:3e:20:9f:d9:4f:20:
a2:f5:39:ad:cc:cd:d4:48:0e:fd:55:70:5b:e7:3a:da:d1:4f:
e5:50:3e:7a:35:73:8d:d4:ec:24:9e:42:f4:32:a2:8d:78:c0:
84:3e:dd:5c
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6Qul4OylnJuJ1Gf3IwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDcyMDIxMDAxMVoXDTI2MTAxODIxMDAxMVowLzEtMCsGA1UEAxMk
ZDQ3N2M3OGUtNzM3Mi00ODM1LTllOTgtZTU1NWFmYzQzZmU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAikZFzQ1PsSISPqYxo7mS8AdvTT3VLwxHiyaC
W9KCz/KfgCHXZ1Fmqk4s/idwhNIwEN3sd5KmhjXdroumHJ0Vz4/NbsftkNNLzAFv
/BPrUq0G3DIGqACeJPNw/7Yrp4oI17qAs9Dt1xMTVwBV3ZOW7eR5qg4JHbhNg37U
PzWhvTAgzObHpLMa7UGnbgybBP63bHuaAps1fgrQGp4jxbhYWKbZt+mBNhSe/LqQ
n6bapDnBXdfwpePDEhOOYQermxblaqsSxGt8u/Sd2lx2Yz6bTx2pZ1R2zEPuwNSX
xL7LG4nFru8K61z/+6XM3JI8b7lw/6fgdVgok72mPjhDunvaKQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPtIZuFBcjgqmThEwOQng7JAlNUzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYTlmMjEwMjYtNjc4ZS0z
MzgwLTg3MTEtM2JkMTAwZWUzODcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcHJgQtgLyA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACAsUNCaYBL6sJpmalzmSjFiOGTrwOF2NHitCi2i+qEHu9Zt+Iuq
gbGWQAV+3JqwnRLIp0rrb2ywSABhzhBMOLDHb5vxow2cCm7HOBdj8VqPJwYliDY0
/BWaqnwnBq6I5I6IziD0asfvI/sLfbC/1kIEPkZYaJ2SPQAKVp9v+ufPJ1twbQ42
RwVoPGs+Y/6LLiUTowFH5dRHoL+k87i4/ocMsHMkfpSgNTHiFcGBfE7AeHHFdTQZ
1AyjUtkDBqkVTnTJLf0u7rkcOoFo0uA0LiEfMT4gn9lPIKL1Oa3MzdRIDv1VcFvn
OtrRT+VQPno1c43U7CSeQvQyoo14wIQ+3Vw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 11:09:22 2026 by rpki-client