
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa
File: ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa (raw, json)
Hash identifier: 7RxDI8fF7otbY7kd3nZ3GP9iU5WP97YyFV0ZHzssLQU=
Subject key identifier: 74:07:87:52:FA:09:F0:97:B5:75:12:92:E0:40:9F:CB:88:55:CE:61
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFFF3C30F7D55FD0EAAD80
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2605:a401:842a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:ff:3c:30:f7:d5:5f:d0:ea:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=ef6bf6bd-0a34-4ae3-844c-5bc235eb5811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:5e:18:04:3d:8d:aa:7e:5f:ec:be:59:e8:31:
eb:ad:d0:47:b1:03:46:93:fa:54:dc:41:a7:17:d3:
06:22:3a:56:a6:ac:85:bf:d4:00:ee:d5:5f:0e:64:
c7:77:b1:34:0b:92:63:1d:63:aa:57:68:de:fc:4f:
ca:0a:9a:95:5a:56:94:8b:90:78:b9:f6:91:67:fe:
7e:40:00:95:1e:46:4b:65:ec:fc:cf:c8:5e:7e:7a:
7e:43:41:2b:30:ab:d0:a6:55:e4:d5:30:a7:ba:45:
39:fa:46:f9:62:17:f6:eb:dc:5c:0b:26:55:eb:4a:
14:78:1e:43:00:e4:12:cd:6b:29:81:ea:36:c4:ee:
e9:75:2d:1a:9f:31:20:d1:e3:66:26:00:5d:69:b9:
8d:d0:21:9e:3d:ce:92:c2:42:69:09:15:00:5d:20:
fd:67:14:18:f9:1e:5b:dc:00:5f:05:d5:4d:06:fe:
3f:f2:9d:1c:de:79:fe:e5:92:9e:37:ef:64:13:b9:
e2:14:31:0a:c9:9a:27:a2:14:53:fe:0e:e4:65:38:
a9:f0:d1:4d:2d:09:f7:26:3f:4e:57:d4:c5:a5:26:
f9:ce:02:ec:6b:90:41:c3:be:fc:4f:08:d2:bf:e1:
b7:49:fc:62:49:60:98:50:63:e0:a9:43:2d:a5:a2:
4b:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:07:87:52:FA:09:F0:97:B5:75:12:92:E0:40:9F:CB:88:55:CE:61
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/ff6f6bc8-d0ed-3c1c-929a-0dd60a80e621.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:842a::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:3d:c6:2a:f1:91:fc:76:2a:85:ad:31:23:6a:92:f6:b2:4d:
cb:33:b1:5c:28:0b:e2:fa:97:88:a1:d0:5c:0d:e6:6f:0f:e0:
3e:ce:92:1d:cf:93:c8:cd:0d:4f:3e:78:a3:55:af:7b:6b:79:
0a:45:d4:4c:a7:2d:34:f9:f5:e1:bd:30:2c:de:27:65:a1:88:
ec:6f:0a:29:1f:58:d6:20:d5:7f:93:50:8c:0b:6c:b5:35:bd:
53:0f:58:86:d4:53:c2:15:26:c3:b6:aa:56:ab:dc:f9:ed:07:
ba:f7:9c:46:c0:ab:11:7d:a0:a3:46:f5:8a:90:a3:fd:d9:28:
ce:95:88:05:e7:52:4f:2f:c8:d3:e3:82:92:45:af:46:43:1d:
91:e9:40:ac:1d:0f:35:f6:58:a4:d8:f0:4e:bc:6d:59:92:72:
4f:aa:f8:06:e9:0b:fd:94:90:7c:89:37:7d:8f:41:9c:9c:71:
92:db:a1:f3:a7:b0:b2:d4:cc:4d:f5:61:62:fe:d7:3f:81:fb:
ad:4e:ab:8d:0c:5d:a9:57:bc:11:29:e8:ef:fc:43:e0:dc:19:
1a:51:91:0d:35:01:99:0d:a7:67:68:c1:a6:08:2e:42:b9:d3:
41:22:8c:73:cb:c7:f3:a8:bd:5d:56:ef:ba:7b:e2:6c:b1:ec:
94:94:b3:23
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE09//88MPfVX9DqrYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI2MDMyMTEzMDAzOVoXDTI2MDYxOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZWY2YmY2YmQtMGEzNC00YWUzLTg0NGMtNWJjMjM1ZWI1ODExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiV4YBD2Nqn5f7L5Z6DHrrdBHsQNGk/pU3EGn
F9MGIjpWpqyFv9QA7tVfDmTHd7E0C5JjHWOqV2je/E/KCpqVWlaUi5B4ufaRZ/5+
QACVHkZLZez8z8hefnp+Q0ErMKvQplXk1TCnukU5+kb5Yhf269xcCyZV60oUeB5D
AOQSzWspgeo2xO7pdS0anzEg0eNmJgBdabmN0CGePc6SwkJpCRUAXSD9ZxQY+R5b
3ABfBdVNBv4/8p0c3nn+5ZKeN+9kE7niFDEKyZonohRT/g7kZTip8NFNLQn3Jj9O
V9TFpSb5zgLsa5BBw778TwjSv+G3SfxiSWCYUGPgqUMtpaJLvwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFHQHh1L6CfCXtXUSkuBAn8uIVc5hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvZmY2ZjZiYzgtZDBlZC0z
YzFjLTkyOWEtMGRkNjBhODBlNjIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWkAYQq
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEM9xirxkfx2KoWtMSNqkvayTcszsVwoC+L6l4ih0FwN5m8P4D7O
kh3Pk8jNDU8+eKNVr3treQpF1EynLTT59eG9MCzeJ2WhiOxvCikfWNYg1X+TUIwL
bLU1vVMPWIbUU8IVJsO2qlar3PntB7r3nEbAqxF9oKNG9YqQo/3ZKM6ViAXnUk8v
yNPjgpJFr0ZDHZHpQKwdDzX2WKTY8E68bVmSck+q+AbpC/2UkHyJN32PQZyccZLb
ofOnsLLUzE31YWL+1z+B+61Oq40MXalXvBEp6O/8Q+DcGRpRkQ01AZkNp2dowaYI
LkK500EijHPLx/OovV1W77p74myx7JSUsyM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 12:44:57 2026 by rpki-client