
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/de87c866-1825-3308-8ce7-b12f2db0e11d.roa
File: de87c866-1825-3308-8ce7-b12f2db0e11d.roa (raw, json)
Hash identifier: 4uAcU7qPj7dDYmD451NuO9FNkMmB4UJRA2NHllU8NIw=
Subject key identifier: A7:56:A1:3A:3D:1E:00:90:73:C9:EE:22:78:F4:AD:D8:18:3B:0C:0C
Certificate issuer: /CN=601de417-7cdc-45d3-8d80-7279489a39e0
Certificate serial: 010D0C9F4328584DB4A5B1492ADC4F79C92BBDC0
Authority key identifier: BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/de87c866-1825-3308-8ce7-b12f2db0e11d.roa
Signing time: Sun 03 May 2026 01:00:23 +0000
ROA not before: Sun 03 May 2026 01:00:23 +0000
ROA not after: Sat 01 Aug 2026 01:00:23 +0000
asID: 63023
IP address blocks: 2604:86c0:f600::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b4:a5:b1:49:2a:dc:4f:79:c9:2b:bd:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=601de417-7cdc-45d3-8d80-7279489a39e0
Validity
Not Before: May 3 01:00:23 2026 GMT
Not After : Aug 1 01:00:23 2026 GMT
Subject: CN=a78a3966-9599-4032-bdea-7b06449e771e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:10:a2:09:e1:51:85:f3:cd:da:29:00:7d:2b:
ba:b2:bb:27:bc:e8:69:ab:5e:bd:0e:79:f8:46:d3:
cb:75:7d:fc:e2:72:09:33:5b:48:08:cd:47:16:5d:
62:b5:a2:9a:ef:ba:b9:94:5f:8f:eb:ec:a9:9a:b6:
d2:70:a0:4c:31:e7:c3:cb:35:6f:bf:cf:a6:45:df:
12:de:0a:4f:c3:d7:c7:e0:26:4b:8f:aa:84:c1:b0:
11:58:1b:7b:3f:cf:fd:5a:c8:58:d4:0a:bb:2c:a2:
6e:40:cc:5d:15:63:aa:16:eb:37:12:a8:e2:f7:1e:
1e:7f:53:bb:e2:64:7a:83:d3:36:89:98:ca:cb:95:
e0:77:85:dc:1d:d4:43:50:1f:cd:bc:0a:f7:15:2c:
ca:32:33:29:b0:14:83:63:92:63:9a:fe:aa:07:d3:
aa:71:72:2b:f8:ec:cd:2e:ec:78:9d:b1:8d:77:8b:
22:8d:39:5a:86:ed:79:45:e6:d9:e1:e0:b8:18:c0:
ca:62:fa:16:69:07:64:3c:8f:55:3c:20:46:6a:60:
88:8d:4d:32:30:c7:da:b5:b5:d3:07:b2:14:97:ae:
42:c3:98:8a:42:72:bc:d5:c9:b8:b6:99:7e:88:10:
70:05:e4:fa:23:0f:47:52:5e:6d:a5:13:fd:6e:00:
f9:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:56:A1:3A:3D:1E:00:90:73:C9:EE:22:78:F4:AD:D8:18:3B:0C:0C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/de87c866-1825-3308-8ce7-b12f2db0e11d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0/601de417-7cdc-45d3-8d80-7279489a39e0.crl
X509v3 Authority Key Identifier:
keyid:BD:6E:8D:C2:3E:B9:DA:1D:07:C2:5B:76:67:C5:CC:10:35:41:EE:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/601de417-7cdc-45d3-8d80-7279489a39e0.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:86c0:f600::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:9d:ea:20:e3:7d:25:8e:29:b3:82:9f:48:3a:e1:43:b5:fb:
8d:3f:54:fc:1f:da:ae:32:ad:b0:c4:da:ee:3f:69:7f:80:63:
6d:54:f6:04:39:9d:6b:f5:fb:40:e2:c6:0a:5e:02:5c:49:c3:
3b:e1:18:bb:b7:0e:7e:f3:1f:af:13:2c:3c:28:b3:8f:af:4a:
97:3b:73:4d:8c:d4:42:b9:29:dc:57:36:2e:16:10:4d:69:83:
ef:77:fa:40:aa:f3:d5:99:68:08:ed:f8:dc:01:8c:f2:2a:cb:
3a:aa:d0:38:c3:d6:a1:6d:41:b2:98:9c:71:ff:cc:e5:c9:85:
2b:48:64:16:ad:d7:73:5a:c2:d8:66:95:fe:a4:b6:06:da:57:
50:a3:94:c3:0a:08:5e:35:a8:4d:f3:a1:12:0d:1a:f7:d5:7d:
9a:b7:bf:b6:60:1c:2c:91:43:04:d4:2f:f9:6e:25:1e:50:55:
b6:28:aa:4b:d5:c8:fc:29:a0:bb:3f:60:57:f1:2c:88:55:02:
f6:14:eb:d6:65:c4:96:d8:e8:b0:1f:ff:2b:3a:17:96:0d:37:
b8:62:2e:b4:07:83:0f:78:89:f5:9e:bc:5f:96:7a:e7:0c:79:
06:4d:e1:ca:5e:f0:11:a4:cc:11:21:7a:1e:99:08:70:83:3f:
08:7e:6f:ce
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE20pbFJKtxPeckrvcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjAxZGU0MTctN2NkYy00NWQzLThkODAtNzI3OTQ4OWEz
OWUwMB4XDTI2MDUwMzAxMDAyM1oXDTI2MDgwMTAxMDAyM1owLzEtMCsGA1UEAxMk
YTc4YTM5NjYtOTU5OS00MDMyLWJkZWEtN2IwNjQ0OWU3NzFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyxCiCeFRhfPN2ikAfSu6srsnvOhpq169Dnn4
RtPLdX384nIJM1tICM1HFl1itaKa77q5lF+P6+ypmrbScKBMMefDyzVvv8+mRd8S
3gpPw9fH4CZLj6qEwbARWBt7P8/9WshY1Aq7LKJuQMxdFWOqFus3Eqji9x4ef1O7
4mR6g9M2iZjKy5Xgd4XcHdRDUB/NvAr3FSzKMjMpsBSDY5Jjmv6qB9OqcXIr+OzN
Lux4nbGNd4sijTlahu15RebZ4eC4GMDKYvoWaQdkPI9VPCBGamCIjU0yMMfatbXT
B7IUl65Cw5iKQnK81cm4tpl+iBBwBeT6Iw9HUl5tpRP9bgD5nwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKdWoTo9HgCQc8nuInj0rdgYOwwMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MDFk
ZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5NDg5YTM5ZTAvZGU4N2M4NjYtMTgyNS0z
MzA4LThjZTctYjEyZjJkYjBlMTFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjAxZGU0MTctN2NkYy00NWQzLThk
ODAtNzI3OTQ4OWEzOWUwLzYwMWRlNDE3LTdjZGMtNDVkMy04ZDgwLTcyNzk0ODlh
MzllMC5jcmwwHwYDVR0jBBgwFoAUvW6Nwj652h0Hwlt2Z8XMEDVB7okwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MDFkZTQxNy03Y2RjLTQ1ZDMtOGQ4MC03Mjc5
NDg5YTM5ZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgSGwPYw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAf53qION9JY4ps4KfSDrhQ7X7jT9U/B/arjKtsMTa7j9pf4BjbVT2
BDmda/X7QOLGCl4CXEnDO+EYu7cOfvMfrxMsPCizj69KlztzTYzUQrkp3Fc2LhYQ
TWmD73f6QKrz1ZloCO343AGM8irLOqrQOMPWoW1Bspiccf/M5cmFK0hkFq3Xc1rC
2GaV/qS2BtpXUKOUwwoIXjWoTfOhEg0a99V9mre/tmAcLJFDBNQv+W4lHlBVtiiq
S9XI/Cmguz9gV/EsiFUC9hTr1mXEltjosB//KzoXlg03uGIutAeDD3iJ9Z68X5Z6
5wx5Bk3hyl7wEaTMESF6HpkIcIM/CH5vzg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:29:45 2026 by rpki-client