
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/d96cd042-9990-3ef7-a275-88bffac36444.roa
File: d96cd042-9990-3ef7-a275-88bffac36444.roa (raw, json)
Hash identifier: 5dKaEFoLndlZKYHXUSRoUqQo8q0v+UdNjWZhR76Qokw=
Subject key identifier: 9F:57:B5:2C:13:C3:59:9B:C3:B8:65:0F:A0:14:15:0E:AA:19:AC:34
Certificate issuer: /CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Certificate serial: 010D0C9F4328584D146D7F7569E0DCCBC5318080
Authority key identifier: BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/d96cd042-9990-3ef7-a275-88bffac36444.roa
Signing time: Fri 06 Mar 2026 15:38:22 +0000
ROA not before: Fri 06 Mar 2026 15:38:22 +0000
ROA not after: Thu 04 Jun 2026 14:38:22 +0000
asID: 19718
IP address blocks: 2610:28:f020::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:14:6d:7f:75:69:e0:dc:cb:c5:31:80:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d291b6a-1b30-4fc0-b1dd-582ab98347d6
Validity
Not Before: Mar 6 15:38:22 2026 GMT
Not After : Jun 4 14:38:22 2026 GMT
Subject: CN=e21974bc-5fd0-49b6-8c95-e79fe69a7ab1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ea:72:81:8a:ac:ef:4f:2a:8b:02:a3:4a:fe:
55:04:eb:a4:2f:b0:ee:dd:74:2b:19:6d:bf:a9:bc:
69:06:13:de:87:cf:0a:9d:8a:f5:16:dd:7c:91:8f:
4a:32:af:24:5d:d6:bf:2b:cf:de:f4:4b:c9:c9:cb:
31:d4:b3:f6:07:ef:0c:b3:cd:85:87:22:90:db:a6:
4f:4b:15:a5:7c:7e:f7:aa:b4:ce:ca:77:26:dd:77:
de:64:09:e7:56:b1:87:77:42:d0:9f:11:7d:53:e7:
74:72:3d:8c:7d:46:74:58:7f:4d:e4:1c:c6:b7:cb:
79:71:a3:48:2f:3f:14:f7:a1:a1:9a:c3:d1:b0:d7:
8c:7a:64:68:e8:05:3f:ee:36:b2:98:e3:3e:a8:4b:
88:ae:fc:e9:0a:04:15:fe:e0:9d:de:40:29:a1:87:
0f:79:62:ac:b2:e0:f6:ba:cd:03:4d:bc:99:98:dc:
13:69:90:3f:20:61:3e:4a:69:86:1b:43:56:df:d0:
6e:89:36:4a:de:ae:b4:1a:ea:c0:3d:76:3b:18:df:
08:f9:08:43:d6:cc:7a:62:9a:31:77:03:1a:5a:48:
70:16:4b:99:e4:87:ca:ac:3a:37:6b:78:0a:0d:67:
85:ea:24:b6:ea:c7:6b:ad:9f:6e:29:5c:38:00:d1:
0d:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:57:B5:2C:13:C3:59:9B:C3:B8:65:0F:A0:14:15:0E:AA:19:AC:34
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/d96cd042-9990-3ef7-a275-88bffac36444.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.crl
X509v3 Authority Key Identifier:
keyid:BC:F7:6D:C8:7E:F4:7A:0B:B2:C7:B8:46:A4:17:5E:45:ED:F8:72:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3d291b6a-1b30-4fc0-b1dd-582ab98347d6.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:28:f020::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
37:b0:9d:b5:00:e0:76:45:3c:22:92:e8:54:b0:8b:7e:c3:4c:
25:9d:8e:9c:eb:63:c6:8d:bc:d1:cc:94:4d:9f:90:f6:46:3c:
ce:7f:d6:3c:28:17:0a:4b:8b:72:e1:23:70:0c:42:af:a7:57:
6f:24:a9:d1:03:c8:1d:3a:48:93:d1:73:35:04:14:e7:ea:1e:
04:bc:6f:e7:a2:4e:b5:66:19:95:0a:de:ce:62:26:fc:fa:98:
ed:3d:3f:ca:7b:24:8e:ba:a8:4d:2a:51:a6:18:bd:9b:0e:56:
16:17:03:d3:71:e5:d4:c4:cb:67:f5:b3:15:84:70:e4:18:e0:
aa:88:9a:25:a5:64:7b:3d:8d:c5:72:8a:86:5c:30:87:fe:22:
df:25:ce:c1:e1:a2:fd:98:bb:ea:0e:51:16:ce:44:d6:c4:92:
c0:50:96:8e:38:ae:0c:22:60:84:86:93:c2:69:d2:ad:a6:3c:
a3:fc:0a:9d:c0:ca:bb:64:f6:07:04:17:18:9e:d9:fb:9c:95:
75:55:09:3f:c3:1a:eb:a6:08:7d:58:29:48:a2:49:78:0a:61:
6f:83:c0:d0:95:8e:cc:91:92:55:07:d2:52:b0:64:a2:04:e6:
b5:71:db:84:dc:54:62:fe:04:dc:e3:eb:8e:67:04:06:c9:4a:
fe:ed:1b:ac
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0UbX91aeDcy8UxgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyOTFiNmEtMWIzMC00ZmMwLWIxZGQtNTgyYWI5ODM0
N2Q2MB4XDTI2MDMwNjE1MzgyMloXDTI2MDYwNDE0MzgyMlowLzEtMCsGA1UEAxMk
ZTIxOTc0YmMtNWZkMC00OWI2LThjOTUtZTc5ZmU2OWE3YWIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+pygYqs708qiwKjSv5VBOukL7Du3XQrGW2/
qbxpBhPeh88KnYr1Ft18kY9KMq8kXda/K8/e9EvJycsx1LP2B+8Ms82FhyKQ26ZP
SxWlfH73qrTOyncm3XfeZAnnVrGHd0LQnxF9U+d0cj2MfUZ0WH9N5BzGt8t5caNI
Lz8U96GhmsPRsNeMemRo6AU/7jaymOM+qEuIrvzpCgQV/uCd3kApoYcPeWKssuD2
us0DTbyZmNwTaZA/IGE+SmmGG0NW39BuiTZK3q60GurAPXY7GN8I+QhD1sx6Ypox
dwMaWkhwFkuZ5IfKrDo3a3gKDWeF6iS26sdrrZ9uKVw4ANENewIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ9XtSwTw1mbw7hlD6AUFQ6qGaw0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5
MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJhYjk4MzQ3ZDYvZDk2Y2QwNDItOTk5MC0z
ZWY3LWEyNzUtODhiZmZhYzM2NDQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2QyOTFiNmEtMWIzMC00ZmMwLWIx
ZGQtNTgyYWI5ODM0N2Q2LzNkMjkxYjZhLTFiMzAtNGZjMC1iMWRkLTU4MmFiOTgz
NDdkNi5jcmwwHwYDVR0jBBgwFoAUvPdtyH70eguyx7hGpBdeRe34chEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zZDI5MWI2YS0xYjMwLTRmYzAtYjFkZC01ODJh
Yjk4MzQ3ZDYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAKPAg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBADewnbUA4HZFPCKS6FSwi37DTCWdjpzrY8aNvNHMlE2fkPZGPM5/
1jwoFwpLi3LhI3AMQq+nV28kqdEDyB06SJPRczUEFOfqHgS8b+eiTrVmGZUK3s5i
Jvz6mO09P8p7JI66qE0qUaYYvZsOVhYXA9Nx5dTEy2f1sxWEcOQY4KqImiWlZHs9
jcVyioZcMIf+It8lzsHhov2Yu+oOURbORNbEksBQlo44rgwiYISGk8Jp0q2mPKP8
Cp3Ayrtk9gcEFxie2fuclXVVCT/DGuumCH1YKUiiSXgKYW+DwNCVjsyRklUH0lKw
ZKIE5rVx24TcVGL+BNzj645nBAbJSv7tG6w=
-----END CERTIFICATE-----
Generated at Thu Mar 26 06:25:05 2026 by rpki-client