
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
File: 2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa (raw, json)
Hash identifier: NKXNJBguoMG9pcPT0nwJrZdm7T9XrbOkhWkeI10FkDI=
Subject key identifier: 31:49:2D:92:04:6D:1B:DB:87:ED:34:CC:F9:33:02:00:3B:CB:A0:EF
Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial: 010D0C9F4328584DA2800E7019221A2EFB2FDD00
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
Signing time: Sun 26 Apr 2026 13:00:30 +0000
ROA not before: Sun 26 Apr 2026 13:00:30 +0000
ROA not after: Sat 25 Jul 2026 13:00:30 +0000
asID: 40663
IP address blocks: 2602:fc24::/44 maxlen: 44
2602:fc24:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:a2:80:0e:70:19:22:1a:2e:fb:2f:dd:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Validity
Not Before: Apr 26 13:00:30 2026 GMT
Not After : Jul 25 13:00:30 2026 GMT
Subject: CN=f785807d-e05e-4092-8e6c-5c2b42c44d0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:00:11:83:6e:67:2f:83:dd:75:30:4f:15:df:
19:41:f7:f8:30:35:73:e9:a3:7b:6e:3f:54:69:21:
d1:a6:ce:9c:08:a9:82:d7:42:f1:f9:a6:b8:55:3a:
e1:ac:d6:52:f0:83:44:6c:3c:4b:74:3b:05:c4:43:
23:24:b3:b6:1b:0f:a2:8c:45:d7:4f:d6:10:c2:19:
36:8d:fe:a1:9d:e8:ba:e2:c7:56:c0:f8:18:d6:9f:
be:b4:8f:46:fd:65:2e:21:08:40:17:ab:40:78:9d:
45:3b:d1:58:25:fb:53:c6:a0:77:19:78:f6:f5:6f:
2b:a1:1f:18:07:5a:73:37:e5:4e:34:96:92:9a:e7:
f5:28:86:21:5f:7b:89:e8:5e:63:fb:7d:61:4a:e2:
50:3e:69:7a:66:0e:6d:26:a4:dd:c1:02:77:7c:b3:
09:d1:95:15:63:73:16:f6:c2:be:71:b0:e6:f5:f9:
3e:7c:29:28:e6:7b:ed:b0:d4:cb:1d:ad:7d:e8:07:
19:64:da:f2:6a:a1:8e:f5:f3:c9:b4:57:f0:c3:38:
33:d4:c8:af:fc:d0:d2:27:50:da:65:34:3e:13:8e:
10:3d:4a:50:61:0c:18:03:85:6a:6b:fe:b4:69:47:
00:37:18:44:4e:f0:1e:e5:f3:59:10:e9:69:7d:ea:
d1:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:49:2D:92:04:6D:1B:DB:87:ED:34:CC:F9:33:02:00:3B:CB:A0:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
X509v3 Authority Key Identifier:
keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc24::/44
2602:fc24:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:b0:64:1a:13:43:a4:34:15:2b:d6:ac:a5:79:04:61:ae:eb:
b7:20:54:68:18:14:61:95:5b:f6:6f:6a:b8:a1:b5:25:49:ff:
00:27:ea:9e:eb:52:aa:c7:c4:90:62:2b:8a:16:ff:1c:40:33:
fc:fa:0b:51:6c:ff:55:16:b9:f4:83:f8:f3:25:bf:4b:b2:fe:
ef:5e:a9:e9:7a:04:a2:87:3f:e1:0b:b2:b5:ec:fd:7e:98:d0:
81:9d:da:8a:3e:8c:75:31:3e:4a:42:42:77:16:4c:cc:91:2f:
98:b3:36:54:45:b2:da:6e:8c:7c:b2:e2:b2:e2:01:5c:ab:76:
e6:40:ca:46:e2:76:1f:0a:87:ec:99:e7:61:81:d4:10:64:82:
45:6a:1d:65:a2:34:76:e4:18:16:f2:d7:16:52:f8:ad:06:58:
7b:82:f5:38:c0:28:42:10:6d:49:d7:55:ad:9d:5d:c7:50:8a:
d6:22:25:a0:35:f9:9f:42:97:17:8b:de:3a:d8:48:b3:83:b0:
d1:6e:d0:2e:ac:20:57:7c:da:b7:ef:bd:af:00:c3:c5:c9:f4:
1c:cc:d0:fc:9a:9f:dd:f8:3e:f8:6b:47:80:f1:db:4b:24:70:
cd:48:11:23:41:a0:3c:e3:50:4d:83:64:52:a0:fa:2b:76:0d:
e9:e0:dc:3f
-----BEGIN CERTIFICATE-----
MIIGTjCCBTagAwIBAgIUAQ0Mn0MoWE2igA5wGSIaLvsv3QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGFlZWVhNjAtZTEyZS00NTcwLWEzMTAtY2FjNmY1MGMy
YmVmMB4XDTI2MDQyNjEzMDAzMFoXDTI2MDcyNTEzMDAzMFowLzEtMCsGA1UEAxMk
Zjc4NTgwN2QtZTA1ZS00MDkyLThlNmMtNWMyYjQyYzQ0ZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsAARg25nL4PddTBPFd8ZQff4MDVz6aN7bj9U
aSHRps6cCKmC10Lx+aa4VTrhrNZS8INEbDxLdDsFxEMjJLO2Gw+ijEXXT9YQwhk2
jf6hnei64sdWwPgY1p++tI9G/WUuIQhAF6tAeJ1FO9FYJftTxqB3GXj29W8roR8Y
B1pzN+VONJaSmuf1KIYhX3uJ6F5j+31hSuJQPml6Zg5tJqTdwQJ3fLMJ0ZUVY3MW
9sK+cbDm9fk+fCko5nvtsNTLHa196AcZZNryaqGO9fPJtFfwwzgz1Miv/NDSJ1Da
ZTQ+E44QPUpQYQwYA4Vqa/60aUcANxhETvAe5fNZEOlpferRPQIDAQABo4IDYDCC
A1wwHQYDVR0OBBYEFDFJLZIEbRvbh+00zPkzAgA7y6DvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVl
ZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2ZjUwYzJiZWYvMmFlNmQxMTktNGQ3My0z
YzRiLTk0ZDUtMmJhNmRiODQyZmNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNGFlZWVhNjAtZTEyZS00NTcwLWEz
MTAtY2FjNmY1MGMyYmVmLzRhZWVlYTYwLWUxMmUtNDU3MC1hMzEwLWNhYzZmNTBj
MmJlZi5jcmwwHwYDVR0jBBgwFoAUpJDk1gjBX1VkEHVwfcHmpS1DnY8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80YWVlZWE2MC1lMTJlLTQ1NzAtYTMxMC1jYWM2
ZjUwYzJiZWYuY2VyMCoGCCsGAQUFBwEHAQH/BBswGTAXBAIAAjARAwcEJgL8JAAA
AwYAJgL8JAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIB
FixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDAN
BgkqhkiG9w0BAQsFAAOCAQEAYrBkGhNDpDQVK9aspXkEYa7rtyBUaBgUYZVb9m9q
uKG1JUn/ACfqnutSqsfEkGIrihb/HEAz/PoLUWz/VRa59IP48yW/S7L+716p6XoE
ooc/4Quytez9fpjQgZ3aij6MdTE+SkJCdxZMzJEvmLM2VEWy2m6MfLLisuIBXKt2
5kDKRuJ2HwqH7JnnYYHUEGSCRWodZaI0duQYFvLXFlL4rQZYe4L1OMAoQhBtSddV
rZ1dx1CK1iIloDX5n0KXF4veOthIs4Ow0W7QLqwgV3zat++9rwDDxcn0HMzQ/Jqf
3fg++GtHgPHbSyRwzUgRI0GgPONQTYNkUqD6K3YN6eDcPw==
-----END CERTIFICATE-----
Generated at Wed May 13 04:07:11 2026 by rpki-client