
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/67d9001e-bdf4-3632-9574-e5ac9d70054d.roa
File: 67d9001e-bdf4-3632-9574-e5ac9d70054d.roa (raw, json)
Hash identifier: j847mBdWK8llDN+Z8i9YoQEYXfTxw7eWgESm2cZlJ0U=
Subject key identifier: 1A:02:8D:2D:0F:D4:26:F9:77:53:65:48:34:16:EE:A1:28:D2:AE:DB
Certificate issuer: /CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Certificate serial: 010D0C9F4328584D24DF68DFDAC7DF3AE5E25E00
Authority key identifier: FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/67d9001e-bdf4-3632-9574-e5ac9d70054d.roa
Signing time: Thu 12 Mar 2026 13:00:40 +0000
ROA not before: Thu 12 Mar 2026 13:00:40 +0000
ROA not after: Wed 10 Jun 2026 13:00:40 +0000
asID: 14618
IP address blocks: 2605:84c0:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:24:df:68:df:da:c7:df:3a:e5:e2:5e:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c3739a8-4c8d-47b0-8413-77e27a96700c
Validity
Not Before: Mar 12 13:00:40 2026 GMT
Not After : Jun 10 13:00:40 2026 GMT
Subject: CN=2bf6b119-080d-40f0-86be-20a1252b9cb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b8:0b:2d:1c:c6:0b:b4:21:98:a8:60:71:e5:
29:ba:f0:e2:40:b4:bd:22:7a:a8:5e:00:77:59:68:
8d:78:0c:0c:b0:0a:03:ef:6c:08:7d:ea:9e:22:69:
22:69:4a:10:a5:1f:8b:24:d9:04:c1:ee:b6:55:68:
d8:32:30:d4:98:f9:38:65:a0:4f:67:e6:9b:79:08:
05:45:20:91:33:24:e5:c3:f0:a5:7e:61:90:90:08:
c4:d9:1b:50:7e:37:5c:5a:fe:10:9c:97:86:ba:06:
5d:5c:9b:af:bd:ef:75:7d:09:80:25:ee:a8:0d:af:
43:58:df:b7:c4:51:aa:c9:03:b4:28:30:57:cc:ae:
40:94:85:4b:b6:1e:a5:e7:ff:3c:1a:91:44:7b:a1:
09:e9:8f:ab:82:f4:f6:d0:ee:7d:43:23:19:9d:09:
33:4b:d5:9b:e6:19:f6:59:f6:31:c0:80:a1:9e:06:
13:df:b8:0f:1f:6e:8a:95:9a:db:c8:fa:d3:3d:21:
1e:07:24:d0:69:93:cf:4d:56:9f:7e:cf:07:79:0d:
7c:91:55:9d:77:bc:55:b6:b9:98:35:f2:9e:ec:24:
71:0c:7f:30:de:47:a1:e4:db:93:d5:f7:bc:4e:ce:
42:a8:71:23:a5:12:4b:27:1c:09:0e:57:7b:af:ca:
f8:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:02:8D:2D:0F:D4:26:F9:77:53:65:48:34:16:EE:A1:28:D2:AE:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/67d9001e-bdf4-3632-9574-e5ac9d70054d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c/9c3739a8-4c8d-47b0-8413-77e27a96700c.crl
X509v3 Authority Key Identifier:
keyid:FB:02:1D:81:3F:23:FE:12:9B:83:93:BE:B4:14:A5:27:A5:BD:59:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/9c3739a8-4c8d-47b0-8413-77e27a96700c.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:84c0:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8d:1e:8b:cf:54:4b:27:35:2f:6f:51:92:98:60:63:24:72:c2:
ee:09:fc:88:68:11:1e:c9:11:5c:f0:56:f9:39:b2:94:9f:96:
84:87:5d:d9:ca:88:4d:0a:44:5e:07:7b:a2:5a:ed:2e:4c:12:
b2:57:0a:22:b5:7d:f9:79:08:93:ad:55:5e:85:a0:11:cc:89:
0e:08:57:76:27:bc:cb:ff:26:6d:a0:83:5b:cb:93:c4:5c:c1:
a0:7f:fc:52:4b:55:24:04:0f:0f:af:d0:0e:cc:88:00:2f:39:
26:e7:f8:58:68:b0:2b:3f:0c:c9:78:6d:4a:77:99:1d:1f:ee:
3e:fd:f4:e1:0d:ed:73:40:e3:38:16:66:c6:e8:d0:8c:9e:b7:
82:d1:43:62:c9:9c:d8:37:7a:5f:98:13:20:b1:0c:f5:fb:5f:
43:a7:c5:0d:16:3d:c7:44:d2:ef:be:3d:69:db:69:63:54:90:
73:ce:b4:97:54:b9:cc:e2:de:bf:67:29:0c:7e:ea:86:28:62:
65:fd:4f:a1:bb:79:bb:4e:4d:ad:40:1b:d3:45:18:d4:c4:e7:
c6:85:6e:e4:85:76:ad:4e:bd:c4:e6:4e:42:d0:cd:ff:c2:81:
72:fe:d3:eb:27:f3:8d:a3:ff:4b:63:54:50:7d:1d:6a:91:71:
7e:61:65:d3
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0k32jf2sffOuXiXgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMzNzM5YTgtNGM4ZC00N2IwLTg0MTMtNzdlMjdhOTY3
MDBjMB4XDTI2MDMxMjEzMDA0MFoXDTI2MDYxMDEzMDA0MFowLzEtMCsGA1UEAxMk
MmJmNmIxMTktMDgwZC00MGYwLTg2YmUtMjBhMTI1MmI5Y2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnbgLLRzGC7QhmKhgceUpuvDiQLS9InqoXgB3
WWiNeAwMsAoD72wIfeqeImkiaUoQpR+LJNkEwe62VWjYMjDUmPk4ZaBPZ+abeQgF
RSCRMyTlw/ClfmGQkAjE2RtQfjdcWv4QnJeGugZdXJuvve91fQmAJe6oDa9DWN+3
xFGqyQO0KDBXzK5AlIVLth6l5/88GpFEe6EJ6Y+rgvT20O59QyMZnQkzS9Wb5hn2
WfYxwIChngYT37gPH26KlZrbyPrTPSEeByTQaZPPTVaffs8HeQ18kVWdd7xVtrmY
NfKe7CRxDH8w3keh5NuT1fe8Ts5CqHEjpRJLJxwJDld7r8r4/wIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFBoCjS0P1Cb5d1NlSDQW7qEo0q7bMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3
MzlhOC00YzhkLTQ3YjAtODQxMy03N2UyN2E5NjcwMGMvNjdkOTAwMWUtYmRmNC0z
NjMyLTk1NzQtZTVhYzlkNzAwNTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOWMzNzM5YTgtNGM4ZC00N2IwLTg0
MTMtNzdlMjdhOTY3MDBjLzljMzczOWE4LTRjOGQtNDdiMC04NDEzLTc3ZTI3YTk2
NzAwYy5jcmwwHwYDVR0jBBgwFoAU+wIdgT8j/hKbg5O+tBSlJ6W9WXkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85YzM3MzlhOC00YzhkLTQ3YjAtODQxMy03N2Uy
N2E5NjcwMGMuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgWEwCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAI0ei89USyc1L29RkphgYyRywu4J/IhoER7JEVzwVvk5spSfloSH
XdnKiE0KRF4He6Ja7S5MErJXCiK1ffl5CJOtVV6FoBHMiQ4IV3YnvMv/Jm2gg1vL
k8RcwaB//FJLVSQEDw+v0A7MiAAvOSbn+FhosCs/DMl4bUp3mR0f7j799OEN7XNA
4zgWZsbo0Iyet4LRQ2LJnNg3el+YEyCxDPX7X0OnxQ0WPcdE0u++PWnbaWNUkHPO
tJdUuczi3r9nKQx+6oYoYmX9T6G7ebtOTa1AG9NFGNTE58aFbuSFdq1OvcTmTkLQ
zf/CgXL+0+sn842j/0tjVFB9HWqRcX5hZdM=
-----END CERTIFICATE-----
Generated at Thu Mar 26 02:03:07 2026 by rpki-client