
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa
File: a2851502-ec1f-392a-80d4-f10b991ad233.roa (raw, json)
Hash identifier: HVJxv5eVXHdn9R9vab8XqaZ4T0AXyl2MlsWdw48ddww=
Subject key identifier: E7:0B:E8:8F:5C:B9:84:D5:0C:A3:F1:26:C8:35:C0:F5:77:F2:6D:71
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFF0E1D2F134B03F7F6680
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2603:9001::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:f0:e1:d2:f1:34:b0:3f:7f:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=84ef6890-65d4-4a2b-900a-aadb72549428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:30:76:aa:99:0e:cd:1f:b2:05:a9:6f:7b:7c:
a5:cc:82:64:89:21:bf:d2:f6:2e:f7:65:9f:06:93:
85:57:aa:e8:9a:e8:00:44:0f:ec:0c:8b:c4:54:6c:
4d:61:5b:ae:54:c8:73:46:bb:24:ce:44:a7:cf:4f:
5a:cc:0b:9c:c6:36:68:93:09:6a:87:70:c7:e6:cf:
93:76:44:30:5a:94:82:19:34:b8:ac:ca:7e:f2:23:
d0:4f:10:ff:97:71:b2:bd:37:93:43:cc:32:bc:5f:
22:0c:7b:a3:9f:e6:a7:15:12:dc:6b:19:9d:02:b8:
2b:31:bd:10:65:34:95:f6:8d:a2:12:ab:a6:03:31:
c0:12:59:9d:70:b6:37:14:5b:01:9a:6e:88:d3:17:
d8:7f:2e:72:15:54:5c:75:ba:13:fd:c7:94:93:f7:
07:e8:13:76:1f:77:f8:8f:b7:7f:19:af:e5:f6:2b:
0c:7a:e7:70:f5:1c:31:de:75:3b:13:eb:3c:e6:22:
e0:fa:e4:24:2c:a1:7f:12:bc:1d:b0:6e:b1:6f:95:
a6:82:7e:0d:1d:46:35:00:43:35:39:04:77:9c:61:
5c:59:c5:49:83:8f:49:8c:fd:9d:69:31:79:b5:d9:
40:ae:de:eb:bb:69:1f:9e:32:00:d5:d8:92:77:4f:
af:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:0B:E8:8F:5C:B9:84:D5:0C:A3:F1:26:C8:35:C0:F5:77:F2:6D:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/a2851502-ec1f-392a-80d4-f10b991ad233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:9001::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
5a:89:d7:2a:cf:0d:4f:9a:bc:bd:80:7a:75:a8:d1:2f:89:cd:
13:f2:f2:06:25:c1:48:03:ce:99:b7:a1:0c:7c:85:1b:d8:a8:
51:2f:de:e1:75:60:b0:14:ec:12:49:63:c3:69:a5:e5:fa:30:
4d:60:80:ee:96:91:a1:5f:01:12:51:a2:86:56:bc:6f:1d:72:
21:ae:2f:c8:f3:bf:6c:77:0c:e7:6e:17:80:5c:03:f9:ef:1c:
ca:be:85:7a:64:d5:6a:88:4a:79:e2:c1:fb:c4:c4:70:c2:31:
d7:e9:21:f8:a4:68:c1:a5:68:97:36:d3:df:52:22:d7:57:47:
35:0f:9c:fb:10:24:5c:5c:67:4f:e0:a8:f4:8d:a7:dd:f5:54:
ef:f3:b1:74:ff:d6:3c:16:dd:2c:af:4f:8a:8c:6a:fe:eb:93:
0b:b5:2c:4f:4b:a6:bf:cc:d6:47:18:f5:9b:ac:9c:13:5f:4d:
fb:0f:4f:9c:20:f2:9d:87:2e:24:2b:02:2b:86:e4:0a:1b:26:
54:a2:d2:37:68:ea:a7:e7:30:b5:dc:3b:e8:b0:f1:d9:3a:91:
08:3f:3a:73:f9:3a:5e:99:51:e1:4e:fb:ed:a7:1a:96:07:f2:
fd:59:8e:91:cd:17:af:cf:00:f6:a2:50:0e:11:54:40:fe:bc:
50:d7:9c:70
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE09//Dh0vE0sD9/ZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ODRlZjY4OTAtNjVkNC00YTJiLTkwMGEtYWFkYjcyNTQ5NDI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkjB2qpkOzR+yBalve3ylzIJkiSG/0vYu92Wf
BpOFV6romugARA/sDIvEVGxNYVuuVMhzRrskzkSnz09azAucxjZokwlqh3DH5s+T
dkQwWpSCGTS4rMp+8iPQTxD/l3GyvTeTQ8wyvF8iDHujn+anFRLcaxmdArgrMb0Q
ZTSV9o2iEqumAzHAElmdcLY3FFsBmm6I0xfYfy5yFVRcdboT/ceUk/cH6BN2H3f4
j7d/Ga/l9isMeudw9Rwx3nU7E+s85iLg+uQkLKF/ErwdsG6xb5Wmgn4NHUY1AEM1
OQR3nGFcWcVJg49JjP2daTF5tdlArt7ru2kfnjIA1diSd0+vRQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFOcL6I9cuYTVDKPxJsg1wPV38m1xMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYTI4NTE1MDItZWMxZi0z
OTJhLTgwZDQtZjEwYjk5MWFkMjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgOQATBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBaidcqzw1Pmry9gHp1qNEvic0T8vIGJcFIA86Zt6EMfIUb2KhRL97h
dWCwFOwSSWPDaaXl+jBNYIDulpGhXwESUaKGVrxvHXIhri/I879sdwznbheAXAP5
7xzKvoV6ZNVqiEp54sH7xMRwwjHX6SH4pGjBpWiXNtPfUiLXV0c1D5z7ECRcXGdP
4Kj0jafd9VTv87F0/9Y8Ft0sr0+KjGr+65MLtSxPS6a/zNZHGPWbrJwTX037D0+c
IPKdhy4kKwIrhuQKGyZUotI3aOqn5zC13DvosPHZOpEIPzpz+TpemVHhTvvtpxqW
B/L9WY6RzRevzwD2olAOEVRA/rxQ15xw
-----END CERTIFICATE-----
Generated at Thu Mar 26 21:58:05 2026 by rpki-client