
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
File: b5d1b190-f53f-3f48-af49-06cea36826aa.roa (raw, json)
Hash identifier: sEiihzgHbk0UCsSz9yvrmRif8RqB49GZuZrlRqDw4Cg=
Subject key identifier: 41:26:F1:2D:43:08:5A:A6:D1:01:F4:1D:17:67:0F:4C:BD:8C:3A:1A
Certificate issuer: /CN=3db33a74-4bfb-4717-906c-95b172456bd9
Certificate serial: 010D0C9F4328584F4974200713A68DBDD6193880
Authority key identifier: 69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 401671
IP address blocks: 2604:c20:56::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:20:07:13:a6:8d:bd:d6:19:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3db33a74-4bfb-4717-906c-95b172456bd9
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=0faf28c8-47b5-4e08-b7a5-135b6f3f4b33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:e6:3d:8a:03:2e:0c:fc:bf:ee:46:b7:7b:47:
cd:9c:db:94:8e:f8:5d:69:fd:d9:ae:23:ad:7c:e9:
a0:60:16:c0:6f:a4:dc:74:b0:cb:53:e4:4a:b0:2b:
f8:a2:34:87:af:7d:96:4a:47:97:9e:67:08:87:c9:
0d:38:29:98:51:bc:a1:ee:5b:24:82:86:94:17:9d:
17:c5:61:5c:cd:17:67:0c:7a:eb:3b:0c:3c:d9:ec:
35:0d:a1:f8:f4:b1:e5:b8:05:5c:89:d9:56:c9:c8:
2c:79:f4:f4:42:43:3d:78:34:38:95:c3:78:c5:33:
88:65:4b:a1:24:ce:23:e9:ab:cb:eb:72:df:fb:6e:
6b:73:2b:b1:61:9d:2d:e3:86:2e:8c:70:2a:fc:68:
5f:02:68:a7:08:f5:f7:cd:b9:9d:47:3b:3e:35:be:
59:1a:bb:d6:3a:66:29:b5:81:b4:3e:05:7d:18:1e:
a5:8b:6d:f9:b7:a9:e8:d8:d2:cb:f5:55:f0:9f:79:
f3:8b:92:63:b9:d9:6b:0c:bc:41:32:fa:1b:cb:82:
b5:8f:45:60:30:44:d3:a0:8e:ee:0b:46:79:e3:79:
1d:10:b9:da:e7:a3:d2:9b:db:76:de:d6:20:b8:b9:
42:2a:f6:4b:80:3b:76:b7:1b:ef:b7:ab:c6:c1:b5:
49:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:26:F1:2D:43:08:5A:A6:D1:01:F4:1D:17:67:0F:4C:BD:8C:3A:1A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/b5d1b190-f53f-3f48-af49-06cea36826aa.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9/3db33a74-4bfb-4717-906c-95b172456bd9.crl
X509v3 Authority Key Identifier:
keyid:69:2E:CB:75:45:EE:D7:42:B1:97:51:87:E8:14:A2:D8:83:4B:88:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/3db33a74-4bfb-4717-906c-95b172456bd9.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:c20:56::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:47:be:8e:4d:e3:b1:84:ba:4d:a5:56:0e:73:bc:ec:85:02:
8b:53:eb:b1:34:dd:45:1a:fb:da:5d:44:10:d9:20:d2:92:83:
00:69:4b:a9:d2:cb:58:ac:f9:5f:04:eb:68:79:84:c6:f7:e7:
47:41:e2:e8:a2:e7:a3:a4:2d:65:6f:0e:f7:8f:58:09:fd:41:
08:20:65:83:30:2e:75:a9:b1:02:27:dd:95:bb:eb:8b:bf:aa:
d6:18:c5:8e:7a:6f:a4:fb:29:5d:88:91:74:6b:e1:f6:49:5e:
66:9e:eb:7c:f7:73:09:2f:52:1c:d4:1c:cc:c1:a4:1a:80:30:
8f:56:4f:76:b9:71:b8:f2:c3:6f:52:d1:4f:61:92:36:fa:98:
02:f9:59:70:70:6a:65:f3:b3:ea:ba:8b:8b:6a:a7:f2:ac:6c:
d3:8b:a3:d5:4e:53:55:7e:39:68:a7:88:1a:4b:66:78:82:08:
4e:4b:7a:34:20:d3:c1:ed:42:a8:4d:81:85:bb:7e:ad:8a:42:
79:a9:13:8d:c8:57:60:d1:da:6a:00:d0:7a:4e:d4:3f:2e:7a:
6a:9f:5e:93:31:fa:4b:f3:bb:3f:1b:3c:67:28:72:fe:80:ef:
71:ba:87:e9:97:28:44:25:27:24:35:15:40:76:c4:85:81:32:
f1:f2:96:72
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdCAHE6aNvdYZOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2RiMzNhNzQtNGJmYi00NzE3LTkwNmMtOTViMTcyNDU2
YmQ5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MGZhZjI4YzgtNDdiNS00ZTA4LWI3YTUtMTM1YjZmM2Y0YjMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn+Y9igMuDPy/7ka3e0fNnNuUjvhdaf3ZriOt
fOmgYBbAb6TcdLDLU+RKsCv4ojSHr32WSkeXnmcIh8kNOCmYUbyh7lskgoaUF50X
xWFczRdnDHrrOww82ew1DaH49LHluAVcidlWycgsefT0QkM9eDQ4lcN4xTOIZUuh
JM4j6avL63Lf+25rcyuxYZ0t44YujHAq/GhfAminCPX3zbmdRzs+Nb5ZGrvWOmYp
tYG0PgV9GB6li235t6no2NLL9VXwn3nzi5JjudlrDLxBMvoby4K1j0VgMETToI7u
C0Z543kdELna56PSm9t23tYguLlCKvZLgDt2txvvt6vGwbVJmQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEEm8S1DCFqm0QH0HRdnD0y9jDoaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMwZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIz
M2E3NC00YmZiLTQ3MTctOTA2Yy05NWIxNzI0NTZiZDkvYjVkMWIxOTAtZjUzZi0z
ZjQ4LWFmNDktMDZjZWEzNjgyNmFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kZTAyN2ExYS0y
Njk1LTRjMGUtYWU3ZC1lNmNiMTBhZmExMjUvM2RiMzNhNzQtNGJmYi00NzE3LTkw
NmMtOTViMTcyNDU2YmQ5LzNkYjMzYTc0LTRiZmItNDcxNy05MDZjLTk1YjE3MjQ1
NmJkOS5jcmwwHwYDVR0jBBgwFoAUaS7LdUXu10Kxl1GH6BSi2INLiHUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2RlMDI3YTFhLTI2OTUtNGMw
ZS1hZTdkLWU2Y2IxMGFmYTEyNS8zZGIzM2E3NC00YmZiLTQ3MTctOTA2Yy05NWIx
NzI0NTZiZDkuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcBJgQMIABW
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHxHvo5N47GEuk2lVg5zvOyFAotT67E03UUa+9pdRBDZINKSgwBp
S6nSy1is+V8E62h5hMb350dB4uii56OkLWVvDvePWAn9QQggZYMwLnWpsQIn3ZW7
64u/qtYYxY56b6T7KV2IkXRr4fZJXmae63z3cwkvUhzUHMzBpBqAMI9WT3a5cbjy
w29S0U9hkjb6mAL5WXBwamXzs+q6i4tqp/KsbNOLo9VOU1V+OWiniBpLZniCCE5L
ejQg08HtQqhNgYW7fq2KQnmpE43IV2DR2moA0HpO1D8uemqfXpMx+kvzuz8bPGco
cv6A73G6h+mXKEQlJyQ1FUB2xIWBMvHylnI=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:36:41 2026 by rpki-client