
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/b3795da5-d14e-3396-8e2e-11fbe6d87f15.roa
File: b3795da5-d14e-3396-8e2e-11fbe6d87f15.roa (raw, json)
Hash identifier: 3NGXqRFf2My3/meQs3mfCp1QKuloPwRIbzgOfKJZp1M=
Subject key identifier: BD:89:B1:25:02:B2:C5:28:5E:5C:89:8E:D0:3A:D9:0F:FA:4C:33:0D
Certificate issuer: /CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Certificate serial: 010D0C9F4328584F49731F38501A32E05F301580
Authority key identifier: 91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/b3795da5-d14e-3396-8e2e-11fbe6d87f15.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401725
IP address blocks: 2604:ae0:200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:1f:38:50:1a:32:e0:5f:30:15:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=253f385b-feb4-4b22-9447-502d6e3a69ac
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=ff0c8209-e50d-406e-b92d-801bb43a94bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:5c:84:9d:0b:00:1e:68:5b:9c:a5:ac:82:44:
05:41:b5:2a:6b:37:0f:7a:19:25:bc:55:ee:55:ea:
da:40:37:56:8e:7a:ca:c4:e9:ed:0f:c0:a4:fa:b4:
e4:0d:89:55:1b:6c:88:03:b8:8a:5a:8d:11:d7:1d:
af:9e:42:cf:cc:e8:11:be:54:ba:e6:ff:0e:eb:1e:
2e:75:58:df:43:6c:db:a6:43:f6:8a:80:3c:12:d5:
73:36:f0:c1:ee:af:ce:e0:6c:98:33:2a:e5:a9:09:
aa:90:69:03:e4:21:f0:c6:f2:0b:e6:6a:ae:cc:15:
3e:51:d5:91:3b:c6:a4:dd:21:2d:57:00:22:51:5c:
c4:58:86:5f:9d:6f:05:1e:38:1c:f5:33:ad:e2:2b:
30:ed:f5:d6:4d:f4:94:ca:cc:d4:be:e7:2d:55:fe:
ab:2b:66:93:6a:c1:2d:e7:7e:a6:94:46:3f:29:07:
51:16:2d:a9:5a:f4:31:bd:67:4d:a8:d4:91:d8:de:
28:28:2a:62:79:2d:e0:d6:4b:b1:49:19:9e:f2:e9:
53:77:c8:72:04:e2:a0:8e:85:ce:e5:54:96:ef:2b:
72:fc:86:d8:a7:a9:82:6a:c2:3e:db:c0:b3:91:a8:
16:0d:3e:94:03:fa:43:5b:f6:42:e7:f0:17:39:cc:
02:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:89:B1:25:02:B2:C5:28:5E:5C:89:8E:D0:3A:D9:0F:FA:4C:33:0D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/b3795da5-d14e-3396-8e2e-11fbe6d87f15.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac/253f385b-feb4-4b22-9447-502d6e3a69ac.crl
X509v3 Authority Key Identifier:
keyid:91:4A:4D:FF:64:6A:DA:27:F3:47:72:92:0A:7D:EE:AF:4E:EE:CD:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/253f385b-feb4-4b22-9447-502d6e3a69ac.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ae0:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:51:9b:d7:60:75:4a:93:d0:38:c5:e7:ed:f9:fe:43:24:03:
37:dc:ea:ad:31:80:88:99:1d:1f:28:f5:d8:65:81:dd:f7:ba:
92:a5:60:49:8d:55:e7:de:f5:8a:6c:3a:38:1f:2d:08:e3:c9:
3c:75:d1:64:50:b0:c4:2e:05:99:bf:6a:e5:68:18:f7:b5:92:
21:30:5e:a7:50:11:74:5c:27:d1:a1:6b:51:f2:c2:7e:c0:77:
ee:e7:c4:29:7f:aa:22:5b:b2:ab:0e:75:40:dd:67:37:b5:a4:
5e:b2:8f:11:e7:c9:53:30:84:fd:a7:c9:1f:ee:53:79:e3:d0:
10:1a:0a:6f:70:89:8c:b6:84:f7:78:b5:3c:9a:e1:e6:f8:2a:
0f:f3:0a:0c:ec:8f:df:dc:e9:e2:ee:0d:e4:51:70:bf:f6:50:
62:d6:2c:1f:9c:c8:34:83:bc:8f:0f:9f:86:0d:62:df:ad:04:
ce:ca:ce:ba:10:96:01:f4:da:49:47:f6:e6:08:1b:8d:5b:89:
7b:0b:70:37:2b:31:7c:73:88:79:2d:e7:16:c6:12:a9:f6:d0:
74:4a:7c:18:de:b7:53:93:ef:dd:95:b5:9a:f1:ec:80:d8:e8:
45:ff:ea:ed:46:02:10:31:b1:6a:f8:e6:a1:af:5a:98:3e:ec:
68:09:33:cf
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9Jcx84UBoy4F8wFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzZjM4NWItZmViNC00YjIyLTk0NDctNTAyZDZlM2E2
OWFjMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZmYwYzgyMDktZTUwZC00MDZlLWI5MmQtODAxYmI0M2E5NGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1yEnQsAHmhbnKWsgkQFQbUqazcPehklvFXu
VeraQDdWjnrKxOntD8Ck+rTkDYlVG2yIA7iKWo0R1x2vnkLPzOgRvlS65v8O6x4u
dVjfQ2zbpkP2ioA8EtVzNvDB7q/O4GyYMyrlqQmqkGkD5CHwxvIL5mquzBU+UdWR
O8ak3SEtVwAiUVzEWIZfnW8FHjgc9TOt4isw7fXWTfSUyszUvuctVf6rK2aTasEt
536mlEY/KQdRFi2pWvQxvWdNqNSR2N4oKCpieS3g1kuxSRme8ulTd8hyBOKgjoXO
5VSW7yty/IbYp6mCasI+28CzkagWDT6UA/pDW/ZC5/AXOcwCmQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFL2JsSUCssUoXlyJjtA62Q/6TDMNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNm
Mzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJkNmUzYTY5YWMvYjM3OTVkYTUtZDE0ZS0z
Mzk2LThlMmUtMTFmYmU2ZDg3ZjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjUzZjM4NWItZmViNC00YjIyLTk0
NDctNTAyZDZlM2E2OWFjLzI1M2YzODViLWZlYjQtNGIyMi05NDQ3LTUwMmQ2ZTNh
NjlhYy5jcmwwHwYDVR0jBBgwFoAUkUpN/2Rq2ifzR3KSCn3ur07uzf8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yNTNmMzg1Yi1mZWI0LTRiMjItOTQ0Ny01MDJk
NmUzYTY5YWMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgQK4AIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATlGb12B1SpPQOMXn7fn+QyQDN9zqrTGAiJkdHyj12GWB3fe6kqVg
SY1V5971imw6OB8tCOPJPHXRZFCwxC4Fmb9q5WgY97WSITBep1ARdFwn0aFrUfLC
fsB37ufEKX+qIluyqw51QN1nN7WkXrKPEefJUzCE/afJH+5TeePQEBoKb3CJjLaE
93i1PJrh5vgqD/MKDOyP39zp4u4N5FFwv/ZQYtYsH5zINIO8jw+fhg1i360EzsrO
uhCWAfTaSUf25ggbjVuJewtwNysxfHOIeS3nFsYSqfbQdEp8GN63U5Pv3ZW1mvHs
gNjoRf/q7UYCEDGxavjmoa9amD7saAkzzw==
-----END CERTIFICATE-----
Generated at Sat Oct 10 11:29:01 2026 by rpki-client