
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
File: b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa (raw, json)
Hash identifier: 2tl4XVeL5K4e9RpRK7lwOQP5TKjA38l6ieor90jgLIc=
Subject key identifier: DA:83:67:B1:46:E4:08:13:F2:71:0B:EA:F7:AC:1D:2E:84:9C:62:AE
Certificate issuer: /CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Certificate serial: 010D0C9F4328584F497409BF99A860C28CD82ECB
Authority key identifier: 32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 21538
IP address blocks: 2602:fc30:a4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:09:bf:99:a8:60:c2:8c:d8:2e:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e97da778-a1f6-4dad-9d0a-d3a070010373
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b48b853a-f467-4ac9-a88f-4b421d92f43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:ea:e7:67:86:06:5d:15:18:cd:b8:fb:65:
fb:86:20:46:6b:44:f8:79:9c:3f:ad:25:a0:18:5b:
17:b2:5a:a6:50:d8:65:3e:53:f8:ba:b9:85:54:7a:
19:a9:05:a2:92:dd:d7:89:88:c4:51:cd:91:d9:bd:
7d:49:db:32:df:9f:4f:36:1a:a8:b2:43:ba:ce:3f:
ed:fb:75:77:18:41:c0:58:86:de:59:db:23:79:a6:
ab:43:bc:ef:49:41:08:0a:3a:dc:ee:00:01:ff:cb:
32:c5:51:52:f0:b3:94:34:ec:1a:a5:82:b3:ac:77:
04:0d:33:12:8f:77:9d:fa:59:3e:bb:ef:80:b5:19:
37:22:8c:e3:ba:4c:b4:b0:2e:11:b7:7e:ef:19:0c:
97:0d:d6:02:ae:f7:d1:68:15:91:81:58:b5:f1:1b:
de:8e:54:6c:7d:5f:7e:83:91:a7:11:c4:43:32:fa:
11:75:87:05:40:2a:1c:75:dd:d6:42:ab:67:a1:08:
35:49:1e:50:95:be:ab:a6:f8:1e:e4:5a:6a:34:2d:
37:72:80:12:c3:48:9a:9b:e6:e6:08:dd:4a:16:25:
30:46:09:be:c1:88:b3:f1:43:fc:71:c0:04:20:d2:
80:6d:f4:e0:b4:70:43:31:05:4c:ea:4e:9a:35:d3:
be:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:83:67:B1:46:E4:08:13:F2:71:0B:EA:F7:AC:1D:2E:84:9C:62:AE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/b8ef39ba-8a31-389a-a2e8-5c5eb3bdd3e2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373/e97da778-a1f6-4dad-9d0a-d3a070010373.crl
X509v3 Authority Key Identifier:
keyid:32:E0:B6:A6:90:69:42:21:20:40:BD:4A:90:E5:92:E0:8F:1E:7B:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e97da778-a1f6-4dad-9d0a-d3a070010373.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc30:a4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
51:09:c3:b6:2b:ff:d0:36:c4:81:7c:2a:63:9d:aa:38:e4:a1:
7e:3e:da:ac:d5:65:3f:62:7f:d3:0c:1b:5a:fb:d2:30:c6:5d:
d6:7b:27:83:da:81:cc:8e:a5:37:a3:8a:c0:76:9b:88:a1:4d:
cd:45:3d:c2:1e:a3:67:c3:5e:89:5c:84:35:0c:80:67:2c:67:
b0:e7:28:f3:da:c7:b3:8f:38:75:ee:f6:e3:80:48:70:39:04:
35:46:64:18:9d:df:65:63:a9:c4:b5:2f:25:16:3a:dc:88:d3:
1c:ed:e1:ea:72:ef:34:23:b8:fc:71:a8:96:87:00:9e:75:d1:
90:8a:17:34:fb:7d:ec:5f:e2:ae:88:91:15:87:9a:ce:a2:6a:
a3:8d:76:4e:8b:ee:e2:60:41:51:06:f9:28:2a:82:ac:64:83:
0c:cc:2e:37:b9:10:ad:c8:09:89:08:c5:c2:92:a8:f0:a7:fa:
84:7f:1e:a2:9a:6e:03:ed:d4:36:7a:c0:96:eb:f2:4e:b9:77:
d1:9c:ae:e6:83:41:ec:02:d1:52:97:9c:68:4f:57:2a:5b:87:
5a:ad:84:a9:95:80:19:bd:cd:a7:59:a3:0f:e9:ed:65:50:d5:
90:58:9b:65:24:f4:41:37:87:71:95:88:26:1d:58:b4:49:47:
5b:2f:4d:e7
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdAm/mahgwozYLsswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk3ZGE3NzgtYTFmNi00ZGFkLTlkMGEtZDNhMDcwMDEw
MzczMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YjQ4Yjg1M2EtZjQ2Ny00YWM5LWE4OGYtNGI0MjFkOTJmNDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ3q52eGBl0VGM24+2X7hiBGa0T4eZw/rSWg
GFsXslqmUNhlPlP4urmFVHoZqQWikt3XiYjEUc2R2b19Sdsy359PNhqoskO6zj/t
+3V3GEHAWIbeWdsjeaarQ7zvSUEICjrc7gAB/8syxVFS8LOUNOwapYKzrHcEDTMS
j3ed+lk+u++AtRk3Iozjuky0sC4Rt37vGQyXDdYCrvfRaBWRgVi18RvejlRsfV9+
g5GnEcRDMvoRdYcFQCocdd3WQqtnoQg1SR5Qlb6rpvge5FpqNC03coASw0iam+bm
CN1KFiUwRgm+wYiz8UP8ccAEINKAbfTgtHBDMQVM6k6aNdO+6wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNqDZ7FG5AgT8nEL6vesHS6EnGKuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdk
YTc3OC1hMWY2LTRkYWQtOWQwYS1kM2EwNzAwMTAzNzMvYjhlZjM5YmEtOGEzMS0z
ODlhLWEyZTgtNWM1ZWIzYmRkM2UyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk3ZGE3NzgtYTFmNi00ZGFkLTlk
MGEtZDNhMDcwMDEwMzczL2U5N2RhNzc4LWExZjYtNGRhZC05ZDBhLWQzYTA3MDAx
MDM3My5jcmwwHwYDVR0jBBgwFoAUMuC2ppBpQiEgQL1KkOWS4I8ee6owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTdkYTc3OC1hMWY2LTRkYWQtOWQwYS1kM2Ew
NzAwMTAzNzMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL8MACk
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAFEJw7Yr/9A2xIF8KmOdqjjkoX4+2qzVZT9if9MMG1r70jDGXdZ7
J4PagcyOpTejisB2m4ihTc1FPcIeo2fDXolchDUMgGcsZ7DnKPPax7OPOHXu9uOA
SHA5BDVGZBid32VjqcS1LyUWOtyI0xzt4epy7zQjuPxxqJaHAJ510ZCKFzT7fexf
4q6IkRWHms6iaqONdk6L7uJgQVEG+SgqgqxkgwzMLje5EK3ICYkIxcKSqPCn+oR/
HqKabgPt1DZ6wJbr8k65d9GcruaDQewC0VKXnGhPVypbh1qthKmVgBm9zadZow/p
7WVQ1ZBYm2Uk9EE3h3GViCYdWLRJR1svTec=
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:33:01 2026 by rpki-client