
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
File: 7521a614-187c-3123-b77e-bd58d56bf8bd.roa (raw, json)
Hash identifier: 7f398DBQCucFB4CZsr5w4BNMSDP8/udf7BFhR1cVNMs=
Subject key identifier: DA:92:F3:2B:67:BA:EC:04:C9:C2:BC:84:D4:DC:05:C0:2D:96:20:7D
Certificate issuer: /CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Certificate serial: 010D0C9F4328584F1467A6596971EE002B6D2400
Authority key identifier: E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
Signing time: Sun 06 Sep 2026 01:00:11 +0000
ROA not before: Sun 06 Sep 2026 01:00:11 +0000
ROA not after: Sat 05 Dec 2026 02:00:11 +0000
asID: 4226
IP address blocks: 2604:f580::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:14:67:a6:59:69:71:ee:00:2b:6d:24:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=65f8721d-b6b4-4e88-9328-3a834dc36005
Validity
Not Before: Sep 6 01:00:11 2026 GMT
Not After : Dec 5 02:00:11 2026 GMT
Subject: CN=69b5ca87-547c-40ac-ad70-8758941bbea0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:a4:10:4a:20:6e:42:27:17:b2:06:a1:47:d5:
88:52:88:c8:ba:e1:98:99:c1:3e:a2:3d:3b:61:2e:
41:51:aa:48:e3:81:6f:fe:21:7d:32:ce:3b:fa:82:
a4:01:4d:a4:c6:85:41:24:de:b8:d7:67:f3:25:ed:
20:b1:61:56:33:39:b7:f2:f1:18:61:be:58:03:19:
1c:d1:92:95:0e:05:d8:56:87:00:2d:32:bf:0c:ba:
ee:d1:ec:d7:7b:7f:bf:48:1d:04:4b:2a:92:eb:ea:
68:ac:82:c1:7c:5b:60:38:10:48:6b:8d:7f:9e:cb:
74:69:5f:18:ad:b4:8b:5e:65:bf:e9:c3:e8:f6:b0:
29:0f:d0:2d:26:74:1c:07:14:0e:37:e4:7e:62:2c:
9d:23:01:78:77:f4:db:3b:09:59:ea:4b:a4:65:e1:
e8:90:cb:f5:7a:b5:fc:ef:2d:5f:3b:d2:c5:5f:8c:
f1:31:10:1a:b4:a1:df:6f:af:09:b9:5e:4a:89:06:
80:c8:2d:88:4c:e8:77:5b:f8:b1:96:2b:38:57:37:
61:24:87:c3:18:04:36:43:e0:1a:2c:55:68:c4:63:
62:52:c7:c1:88:32:d2:66:2e:4b:90:5d:25:0d:4b:
cf:19:bf:9a:6b:2e:40:06:0b:b6:1b:1d:47:18:d3:
cc:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:92:F3:2B:67:BA:EC:04:C9:C2:BC:84:D4:DC:05:C0:2D:96:20:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/7521a614-187c-3123-b77e-bd58d56bf8bd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005/65f8721d-b6b4-4e88-9328-3a834dc36005.crl
X509v3 Authority Key Identifier:
keyid:E3:2C:B6:FD:01:50:F1:21:ED:52:65:5E:96:5C:7A:D4:FB:4F:77:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/65f8721d-b6b4-4e88-9328-3a834dc36005.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:f580::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:66:80:1b:41:83:9f:60:1d:64:e2:29:38:6c:0f:46:99:e0:
70:84:c3:7b:fb:f5:f5:38:02:8b:4a:7b:0c:57:bb:db:ad:58:
6d:e6:44:da:fb:cf:d3:6e:3d:0e:c2:7b:93:77:2a:0f:66:cf:
c0:03:1c:da:9e:5b:c9:28:6c:ca:81:e0:f8:74:f9:ff:c0:1c:
9c:e5:e7:de:48:b2:d8:3b:1e:8d:f9:2a:ca:c4:5e:94:e8:3b:
f3:63:4a:8a:20:5a:4d:31:16:9c:98:4e:3a:80:8d:e0:bc:7d:
76:92:08:1c:dd:b7:bc:17:1b:64:52:0c:8e:a3:20:26:80:1b:
c6:56:94:b1:4d:11:24:9a:0d:31:9f:44:35:bd:47:3b:54:4d:
aa:24:58:a3:9d:25:e4:f8:dc:31:ac:54:d9:dd:d0:f7:94:02:
55:f9:5b:12:1f:84:c4:c2:71:4e:8d:3f:93:58:e0:33:cb:47:
fc:24:6e:98:5b:77:87:75:f9:25:4f:f5:14:d9:dd:bb:98:71:
6a:f0:1d:c0:f0:92:ea:2e:7e:b9:26:80:b2:fa:45:31:40:0e:
ad:15:4e:0a:a5:e4:fe:8c:00:0d:f3:7d:5f:80:d4:11:2c:ad:
cd:6a:96:5d:f5:cb:ce:03:4b:9c:9a:c2:20:40:d8:a9:75:f6:
74:3e:df:e0
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8UZ6ZZaXHuACttJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjVmODcyMWQtYjZiNC00ZTg4LTkzMjgtM2E4MzRkYzM2
MDA1MB4XDTI2MDkwNjAxMDAxMVoXDTI2MTIwNTAyMDAxMVowLzEtMCsGA1UEAxMk
NjliNWNhODctNTQ3Yy00MGFjLWFkNzAtODc1ODk0MWJiZWEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnKQQSiBuQicXsgahR9WIUojIuuGYmcE+oj07
YS5BUapI44Fv/iF9Ms47+oKkAU2kxoVBJN6412fzJe0gsWFWMzm38vEYYb5YAxkc
0ZKVDgXYVocALTK/DLru0ezXe3+/SB0ESyqS6+porILBfFtgOBBIa41/nst0aV8Y
rbSLXmW/6cPo9rApD9AtJnQcBxQON+R+YiydIwF4d/TbOwlZ6kukZeHokMv1erX8
7y1fO9LFX4zxMRAatKHfb68JuV5KiQaAyC2ITOh3W/ixlis4VzdhJIfDGAQ2Q+Aa
LFVoxGNiUsfBiDLSZi5LkF0lDUvPGb+aay5ABgu2Gx1HGNPMTQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFNqS8ytnuuwEycK8hNTcBcAtliB9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4
NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgzNGRjMzYwMDUvNzUyMWE2MTQtMTg3Yy0z
MTIzLWI3N2UtYmQ1OGQ1NmJmOGJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNjVmODcyMWQtYjZiNC00ZTg4LTkz
MjgtM2E4MzRkYzM2MDA1LzY1Zjg3MjFkLWI2YjQtNGU4OC05MzI4LTNhODM0ZGMz
NjAwNS5jcmwwHwYDVR0jBBgwFoAU4yy2/QFQ8SHtUmVellx61PtPd/QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82NWY4NzIxZC1iNmI0LTRlODgtOTMyOC0zYTgz
NGRjMzYwMDUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgT1gDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBlZoAbQYOfYB1k4ik4bA9GmeBwhMN7+/X1OAKLSnsMV7vbrVht5kTa
+8/Tbj0OwnuTdyoPZs/AAxzanlvJKGzKgeD4dPn/wByc5efeSLLYOx6N+SrKxF6U
6DvzY0qKIFpNMRacmE46gI3gvH12kggc3be8FxtkUgyOoyAmgBvGVpSxTREkmg0x
n0Q1vUc7VE2qJFijnSXk+NwxrFTZ3dD3lAJV+VsSH4TEwnFOjT+TWOAzy0f8JG6Y
W3eHdfklT/UU2d27mHFq8B3A8JLqLn65JoCy+kUxQA6tFU4KpeT+jAAN831fgNQR
LK3NapZd9cvOA0ucmsIgQNipdfZ0Pt/g
-----END CERTIFICATE-----
Generated at Mon Sep 28 12:24:48 2026 by rpki-client