
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa
File: d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa (raw, json)
Hash identifier: 7IEdxv+Ibg3Xhje+FNs5GDhzYkQojY13iglU1JabasY=
Subject key identifier: B5:0B:5C:E9:D8:7D:D2:84:92:1B:18:68:BD:7A:E7:9B:50:8B:C0:53
Certificate issuer: /CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Certificate serial: 010D0C9F4328584DAAE036D3B8377BE2FDE1E800
Authority key identifier: F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa
Signing time: Wed 29 Apr 2026 13:00:31 +0000
ROA not before: Wed 29 Apr 2026 13:00:31 +0000
ROA not after: Tue 28 Jul 2026 13:00:31 +0000
asID: 54309
IP address blocks: 2602:fa3c::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:aa:e0:36:d3:b8:37:7b:e2:fd:e1:e8:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5a89d62c-a08e-4c4e-9f47-a40d1629f091
Validity
Not Before: Apr 29 13:00:31 2026 GMT
Not After : Jul 28 13:00:31 2026 GMT
Subject: CN=d6fcf20f-2578-4426-82bd-bb88d23935a1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:5e:61:6d:4a:e8:47:63:6c:cb:0a:4d:7f:02:
00:86:de:20:7f:f0:ec:33:75:03:26:ed:09:aa:b2:
7e:1e:05:b3:dd:e0:61:20:01:ea:f2:4a:b7:b3:90:
4c:9c:7c:e8:98:58:54:fc:5e:2c:8b:8e:d4:b5:00:
b5:ea:d7:d7:2e:d8:e8:05:9e:15:ab:79:66:a6:76:
f8:f6:38:da:8b:78:b3:b1:d9:58:fa:c3:54:71:10:
68:e1:67:4f:71:89:b6:39:1d:70:2c:93:c0:f1:6f:
02:59:a4:24:c6:1c:65:05:0c:dc:df:3e:e9:ba:e7:
0e:1d:02:94:59:e3:be:25:7a:d9:7e:65:79:cb:3c:
43:63:d0:68:de:05:55:4b:39:56:8e:cb:8c:23:5e:
b2:b7:cb:cf:a9:c5:31:2c:2c:19:03:e8:42:3e:cf:
a9:b6:0e:72:7d:0c:73:07:3e:81:f3:92:ab:68:45:
bc:e6:b1:3a:a5:70:e8:7f:bf:04:c3:f4:db:45:bc:
23:57:4d:ce:d4:90:32:06:f4:59:60:e6:5d:50:5b:
af:16:1e:f0:69:ef:67:4b:14:b9:2f:f8:2b:3e:8d:
77:8d:c1:48:cb:af:27:50:bb:e0:56:06:ab:9a:f5:
1e:f0:6b:e9:fa:00:f8:e2:fd:49:90:3d:b7:06:94:
0d:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:0B:5C:E9:D8:7D:D2:84:92:1B:18:68:BD:7A:E7:9B:50:8B:C0:53
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/d66ba33e-1a87-3f7a-a3ca-829c23db2bc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091/5a89d62c-a08e-4c4e-9f47-a40d1629f091.crl
X509v3 Authority Key Identifier:
keyid:F0:55:B2:4B:43:30:D5:E0:D7:D2:86:CD:A1:92:44:3C:5D:4A:80:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5a89d62c-a08e-4c4e-9f47-a40d1629f091.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa3c::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4b:0b:cb:e5:01:54:1b:62:e4:07:ed:d3:8d:58:c0:e7:82:d9:
a9:63:91:dd:a4:50:e9:5d:cc:4d:40:e4:c8:30:1b:15:27:08:
e1:36:ae:81:6e:58:da:6f:32:c9:3d:0d:14:37:da:37:1d:a9:
60:5f:0e:63:ce:e9:ae:a0:e2:9a:90:ba:e7:4c:c8:ef:15:53:
58:0d:19:9b:3f:54:71:cd:dd:a2:1d:51:17:6d:b1:81:38:47:
05:a6:4d:29:e5:58:d6:cc:d3:ee:36:76:c5:a3:b7:62:c1:57:
aa:3b:2f:c9:81:3e:24:ad:e8:f1:af:97:92:6b:f1:23:04:50:
24:7f:5c:f8:e6:71:e9:08:32:58:0b:50:96:8f:ba:d1:f7:43:
61:61:ae:89:2f:12:76:a1:5b:95:0d:44:7b:30:af:9b:de:94:
99:a2:a8:11:f0:a7:21:df:00:e6:08:1b:0e:77:39:3f:9f:ad:
06:b6:ad:93:22:6f:68:c7:03:22:3d:33:ca:c5:2b:3a:55:0f:
27:66:df:20:99:5c:0a:25:23:f0:21:0e:00:53:3d:d9:25:11:
9a:ae:e8:79:ac:2e:46:70:4f:2b:b8:09:ac:4e:0e:55:71:61:
02:06:53:bd:77:6d:df:7c:6e:8b:55:84:11:2a:04:58:6a:ef:
ac:e7:f4:f1
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE2q4DbTuDd74v3h6AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWE4OWQ2MmMtYTA4ZS00YzRlLTlmNDctYTQwZDE2Mjlm
MDkxMB4XDTI2MDQyOTEzMDAzMVoXDTI2MDcyODEzMDAzMVowLzEtMCsGA1UEAxMk
ZDZmY2YyMGYtMjU3OC00NDI2LTgyYmQtYmI4OGQyMzkzNWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo15hbUroR2NsywpNfwIAht4gf/DsM3UDJu0J
qrJ+HgWz3eBhIAHq8kq3s5BMnHzomFhU/F4si47UtQC16tfXLtjoBZ4Vq3lmpnb4
9jjai3izsdlY+sNUcRBo4WdPcYm2OR1wLJPA8W8CWaQkxhxlBQzc3z7puucOHQKU
WeO+JXrZfmV5yzxDY9Bo3gVVSzlWjsuMI16yt8vPqcUxLCwZA+hCPs+ptg5yfQxz
Bz6B85KraEW85rE6pXDof78Ew/TbRbwjV03O1JAyBvRZYOZdUFuvFh7wae9nSxS5
L/grPo13jcFIy68nULvgVgarmvUe8Gvp+gD44v1JkD23BpQNcwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFLULXOnYfdKEkhsYaL1655tQi8BTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5
ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBkMTYyOWYwOTEvZDY2YmEzM2UtMWE4Ny0z
ZjdhLWEzY2EtODI5YzIzZGIyYmMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWE4OWQ2MmMtYTA4ZS00YzRlLTlm
NDctYTQwZDE2MjlmMDkxLzVhODlkNjJjLWEwOGUtNGM0ZS05ZjQ3LWE0MGQxNjI5
ZjA5MS5jcmwwHwYDVR0jBBgwFoAU8FWyS0Mw1eDX0obNoZJEPF1KgJowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81YTg5ZDYyYy1hMDhlLTRjNGUtOWY0Ny1hNDBk
MTYyOWYwOTEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL6PAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASwvL5QFUG2LkB+3TjVjA54LZqWOR3aRQ6V3MTUDkyDAbFScI4Tau
gW5Y2m8yyT0NFDfaNx2pYF8OY87prqDimpC650zI7xVTWA0Zmz9Ucc3doh1RF22x
gThHBaZNKeVY1szT7jZ2xaO3YsFXqjsvyYE+JK3o8a+XkmvxIwRQJH9c+OZx6Qgy
WAtQlo+60fdDYWGuiS8SdqFblQ1EezCvm96UmaKoEfCnId8A5ggbDnc5P5+tBrat
kyJvaMcDIj0zysUrOlUPJ2bfIJlcCiUj8CEOAFM92SURmq7oeawuRnBPK7gJrE4O
VXFhAgZTvXdt33xui1WEESoEWGrvrOf08Q==
-----END CERTIFICATE-----
Generated at Wed May 13 01:19:59 2026 by rpki-client