
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2ea3378-08d9-360d-9857-e9aba7c1e179.roa
File: f2ea3378-08d9-360d-9857-e9aba7c1e179.roa (raw, json)
Hash identifier: aNx2xpkg6JNYPA+2xEVMIKFTFXGLD0aCAlE8ncUZvrg=
Subject key identifier: 8D:6D:B2:F7:43:FB:3A:3E:57:AC:AE:DF:EF:A2:78:80:DE:01:9D:B1
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584D2A74DCD610DB1F784EA84680
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2ea3378-08d9-360d-9857-e9aba7c1e179.roa
Signing time: Sat 14 Mar 2026 13:00:40 +0000
ROA not before: Sat 14 Mar 2026 13:00:40 +0000
ROA not after: Fri 12 Jun 2026 13:00:40 +0000
asID: 26042
IP address blocks: 2607:740:49::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:2a:74:dc:d6:10:db:1f:78:4e:a8:46:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 14 13:00:40 2026 GMT
Not After : Jun 12 13:00:40 2026 GMT
Subject: CN=e14d1245-88e1-4617-a85c-97f6a0657bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:d6:e7:2e:d0:1c:01:3b:01:95:05:eb:c6:c6:
bf:50:b7:b0:09:93:5e:2b:15:88:33:07:f6:d8:c0:
c5:6c:56:fd:26:d5:71:0d:9a:ec:5d:84:fd:65:e6:
e9:5f:0e:ce:10:87:92:c9:c9:37:f1:43:31:5d:11:
47:95:8c:40:53:94:c9:5b:50:f8:9c:53:d1:bb:54:
ef:71:93:64:cd:8d:b1:a1:4f:5d:70:32:00:90:af:
27:79:8d:e9:60:a8:3d:09:a0:cc:27:75:f3:48:a5:
a9:dc:3f:9f:06:73:42:c4:0d:50:d3:a8:72:f0:69:
cc:b2:29:3d:57:2c:7d:21:f8:66:a0:dd:d6:86:f8:
9f:8d:c6:56:e6:7f:42:42:d0:96:91:b8:1d:83:7d:
7e:bf:b5:61:ff:7b:16:22:42:69:74:60:2a:50:85:
6a:d1:21:85:7d:2b:9d:ea:bb:e7:62:5c:12:d2:3c:
39:d3:0e:cf:3d:06:a7:f8:b0:e3:9f:0f:6d:ff:76:
84:64:a5:c8:3e:ba:92:d6:b2:f4:83:df:3e:a2:5d:
92:04:34:82:25:36:bc:90:40:f8:64:73:6d:5a:88:
d8:0f:25:7e:9b:af:00:fd:fc:fc:b1:41:04:d2:dc:
08:c6:7b:06:31:56:f7:0d:38:74:57:11:01:c2:71:
0f:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:6D:B2:F7:43:FB:3A:3E:57:AC:AE:DF:EF:A2:78:80:DE:01:9D:B1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f2ea3378-08d9-360d-9857-e9aba7c1e179.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:49::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
89:06:23:d4:29:99:e8:df:f2:c3:09:a5:77:a4:03:c0:14:30:
59:93:c3:d4:65:95:3a:7d:7f:77:52:76:51:89:e0:a0:22:62:
04:91:bf:f1:48:ea:3f:18:bf:ee:bf:13:d9:d5:75:78:15:03:
4d:c9:a3:23:17:9d:d0:bc:2e:d8:a3:f5:0b:84:7e:b3:75:17:
40:ce:19:9d:43:1e:f0:09:45:07:ab:98:a9:86:89:91:1c:be:
c7:6a:05:39:18:91:9d:df:e7:b0:23:fb:41:37:e6:0f:3c:44:
22:3c:b0:d5:ba:54:86:38:72:74:dc:4d:8f:7a:62:fe:0b:04:
3c:d7:cf:ab:07:29:1a:33:d3:bb:24:54:f9:36:2a:64:bb:0c:
6c:09:c5:5d:c4:89:ca:49:83:63:42:52:0c:9f:11:1b:8d:70:
96:14:a6:b0:f8:8d:93:64:cd:ca:74:dd:91:47:d0:9e:75:fa:
cc:d0:f3:3a:e1:58:4d:a4:b3:fb:e4:e0:85:66:c9:b2:8c:bb:
be:0d:84:fc:db:f9:7c:06:fc:e8:ed:df:c5:32:d7:44:3b:61:
8f:e7:1c:a8:d0:1f:8a:98:6b:54:23:b3:e8:da:e7:3b:be:ab:
3a:0d:cf:45:b8:25:85:92:43:56:c4:38:e7:10:a8:f6:79:74:
7a:70:d2:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0qdNzWENsfeE6oRoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI2MDMxNDEzMDA0MFoXDTI2MDYxMjEzMDA0MFowLzEtMCsGA1UEAxMk
ZTE0ZDEyNDUtODhlMS00NjE3LWE4NWMtOTdmNmEwNjU3YmI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAndbnLtAcATsBlQXrxsa/ULewCZNeKxWIMwf2
2MDFbFb9JtVxDZrsXYT9ZebpXw7OEIeSyck38UMxXRFHlYxAU5TJW1D4nFPRu1Tv
cZNkzY2xoU9dcDIAkK8neY3pYKg9CaDMJ3XzSKWp3D+fBnNCxA1Q06hy8GnMsik9
Vyx9IfhmoN3WhvifjcZW5n9CQtCWkbgdg31+v7Vh/3sWIkJpdGAqUIVq0SGFfSud
6rvnYlwS0jw50w7PPQan+LDjnw9t/3aEZKXIPrqS1rL0g98+ol2SBDSCJTa8kED4
ZHNtWojYDyV+m68A/fz8sUEE0twIxnsGMVb3DTh0VxEBwnEP8wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFI1tsvdD+zo+V6yu3++ieIDeAZ2xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjJlYTMzNzgtMDhkOS0z
NjBkLTk4NTctZTlhYmE3YzFlMTc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABJ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIkGI9Qpmejf8sMJpXekA8AUMFmTw9RllTp9f3dSdlGJ4KAiYgSR
v/FI6j8Yv+6/E9nVdXgVA03JoyMXndC8Ltij9QuEfrN1F0DOGZ1DHvAJRQermKmG
iZEcvsdqBTkYkZ3f57Aj+0E35g88RCI8sNW6VIY4cnTcTY96Yv4LBDzXz6sHKRoz
07skVPk2KmS7DGwJxV3EicpJg2NCUgyfERuNcJYUprD4jZNkzcp03ZFH0J51+szQ
8zrhWE2ks/vk4IVmybKMu74NhPzb+XwG/Ojt38Uy10Q7YY/nHKjQH4qYa1Qjs+ja
5zu+qzoNz0W4JYWSQ1bEOOcQqPZ5dHpw0so=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:52:24 2026 by rpki-client