
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e645a1-f4a7-33c8-ae77-13146e5edebc.roa
File: 21e645a1-f4a7-33c8-ae77-13146e5edebc.roa (raw, json)
Hash identifier: tmljR0x9mlOMkiHCu4azCMwV7Zlwl7MSE/3GfIzA4Tg=
Subject key identifier: 0D:E8:E3:BC:5F:2F:21:E0:40:1B:82:E6:04:D7:40:F9:8B:E7:33:6F
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584D11726ED9AF21F75578B5AB5C
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e645a1-f4a7-33c8-ae77-13146e5edebc.roa
Signing time: Thu 05 Mar 2026 14:00:40 +0000
ROA not before: Thu 05 Mar 2026 14:00:40 +0000
ROA not after: Wed 03 Jun 2026 13:00:40 +0000
asID: 7922
IP address blocks: 2603:2fc0:4000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:11:72:6e:d9:af:21:f7:55:78:b5:ab:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Mar 5 14:00:40 2026 GMT
Not After : Jun 3 13:00:40 2026 GMT
Subject: CN=1c74a079-b25e-4577-b3f4-36ba92f71815
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:47:e7:ab:88:b7:c7:e8:6c:d9:61:3b:76:35:
19:2b:c0:22:c9:b9:5f:2d:a2:e1:40:1f:2e:07:3d:
03:25:6d:06:7c:08:9e:96:67:db:26:3f:bc:ce:ac:
c1:51:58:1f:40:ef:c2:62:36:d1:97:e2:11:b6:5f:
fd:c8:6a:85:e3:8a:55:8b:a0:d7:7b:89:1e:8b:62:
dc:ac:98:e8:a8:f6:16:31:4a:dd:37:4c:d9:27:12:
18:b2:84:d1:be:fb:30:aa:c7:90:8e:80:e6:5e:a5:
a5:25:69:7e:97:8b:43:93:1b:b1:83:ab:cb:c2:60:
56:e4:e4:ac:84:57:04:f4:d2:f4:27:ae:18:39:93:
88:84:84:b4:9d:6d:76:9b:ed:10:b0:ed:66:0c:f9:
75:44:cf:32:a1:5d:2d:1a:16:33:00:28:ca:16:ad:
68:ee:26:80:32:82:ce:8a:b0:32:ed:b8:e6:f8:09:
cd:3f:90:13:28:85:48:a2:cd:40:92:c0:9d:1c:bf:
98:85:3a:c4:03:95:41:a3:ee:cc:a0:1c:66:f0:b6:
83:f3:27:6d:7f:c0:16:f6:0e:98:98:89:92:d6:4e:
2d:e8:bc:1c:6b:e6:bd:74:08:a8:5d:b5:c9:d3:71:
52:22:dd:78:89:b4:63:ec:6c:3d:5e:c6:d4:e7:6f:
b7:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:E8:E3:BC:5F:2F:21:E0:40:1B:82:E6:04:D7:40:F9:8B:E7:33:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/21e645a1-f4a7-33c8-ae77-13146e5edebc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:2fc0:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
ca:45:df:87:d8:66:cc:81:1f:a7:e9:cc:de:5e:4b:61:e6:8c:
55:5f:31:b0:16:79:5e:20:5b:7b:6e:f3:2d:6f:9a:b4:45:b1:
4b:5c:13:ba:c9:e9:10:37:2f:f7:76:4c:5c:ab:99:5d:4a:1d:
75:36:ea:ef:2f:c2:fb:b3:7d:90:08:9e:89:4d:07:11:52:9b:
6b:6b:99:3d:35:f7:50:29:ba:f0:27:99:f4:26:d9:64:bd:3e:
04:1a:3f:24:ad:ee:33:96:4a:15:91:d7:a1:0f:f1:a3:0a:fe:
3d:35:47:ae:96:8c:b1:e8:33:f6:1c:cd:d5:dc:bb:ca:e8:3d:
61:3f:52:d4:b9:47:66:18:a2:ea:c9:99:45:6a:1c:a0:ea:0a:
63:13:4c:40:9c:a8:8e:29:61:d9:ac:dd:a9:72:66:13:26:71:
03:f7:17:a2:13:45:f1:ee:25:91:17:b8:b7:7c:30:54:94:5a:
bc:d7:34:5f:5e:29:2c:e5:06:5b:c4:80:72:4f:f1:18:4d:63:
1d:93:a7:a7:65:b8:ba:e7:ae:4b:99:53:ba:dd:5e:7d:15:85:
51:fc:4f:78:75:0e:63:15:a0:4b:91:c3:bf:2e:e2:38:b7:7b:
25:81:95:2b:5d:69:89:1f:9a:be:b6:d2:07:5e:ce:e4:d8:2c:
9b:73:a3:ca
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0Rcm7ZryH3VXi1q1wwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDMwNTE0MDA0MFoXDTI2MDYwMzEzMDA0MFowLzEtMCsGA1UEAxMk
MWM3NGEwNzktYjI1ZS00NTc3LWIzZjQtMzZiYTkyZjcxODE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4Efnq4i3x+hs2WE7djUZK8AiyblfLaLhQB8u
Bz0DJW0GfAielmfbJj+8zqzBUVgfQO/CYjbRl+IRtl/9yGqF44pVi6DXe4kei2Lc
rJjoqPYWMUrdN0zZJxIYsoTRvvswqseQjoDmXqWlJWl+l4tDkxuxg6vLwmBW5OSs
hFcE9NL0J64YOZOIhIS0nW12m+0QsO1mDPl1RM8yoV0tGhYzACjKFq1o7iaAMoLO
irAy7bjm+AnNP5ATKIVIos1AksCdHL+YhTrEA5VBo+7MoBxm8LaD8ydtf8AW9g6Y
mImS1k4t6Lwca+a9dAioXbXJ03FSIt14ibRj7Gw9XsbU52+31QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA3o47xfLyHgQBuC5gTXQPmL5zNvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMjFlNjQ1YTEtZjRhNy0z
M2M4LWFlNzctMTMxNDZlNWVkZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMvwEAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAykXfh9hmzIEfp+nM3l5LYeaMVV8xsBZ5XiBbe27zLW+atEWxS1wT
usnpEDcv93ZMXKuZXUoddTbq7y/C+7N9kAieiU0HEVKba2uZPTX3UCm68CeZ9CbZ
ZL0+BBo/JK3uM5ZKFZHXoQ/xowr+PTVHrpaMsegz9hzN1dy7yug9YT9S1LlHZhii
6smZRWocoOoKYxNMQJyojilh2azdqXJmEyZxA/cXohNF8e4lkRe4t3wwVJRavNc0
X14pLOUGW8SAck/xGE1jHZOnp2W4uueuS5lTut1efRWFUfxPeHUOYxWgS5HDvy7i
OLd7JYGVK11piR+avrbSB17O5Ngsm3Ojyg==
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:09:52 2026 by rpki-client