
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/ae0ce974-b160-3b50-8606-6a49c27c111f.roa
File: ae0ce974-b160-3b50-8606-6a49c27c111f.roa (raw, json)
Hash identifier: px84oAZbP9Qn7jrbkxTb5JAE9pFI1EMBTyU/5ZrVLTQ=
Subject key identifier: 57:56:14:1E:E3:13:4C:74:27:44:7A:9D:D7:48:24:CA:38:6B:5E:35
Certificate issuer: /CN=841d3ce8-d29f-40af-b883-2f114aee4d29
Certificate serial: 010D0C9F4328584F4988D6AF4B1DF48A00279580
Authority key identifier: DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/ae0ce974-b160-3b50-8606-6a49c27c111f.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 400615
IP address blocks: 2607:e100:3000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:88:d6:af:4b:1d:f4:8a:00:27:95:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=841d3ce8-d29f-40af-b883-2f114aee4d29
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=c6458153-a598-4757-8655-7ee94f66a275
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:df:12:d6:6e:69:55:d8:41:79:1d:56:d5:46:
80:cb:e9:fe:78:f4:df:e3:d7:7d:10:16:12:ed:89:
85:08:a7:e2:7a:16:cf:88:35:28:9c:5b:31:23:f1:
60:5b:41:ff:1e:29:d6:e1:3c:a1:70:08:44:19:56:
34:52:b3:d6:d6:d7:80:df:b7:db:20:ba:a8:e4:ce:
fe:a2:fb:80:a2:a7:23:27:c3:60:16:2a:bf:01:30:
13:c6:b5:43:6f:72:d2:04:08:91:4f:1b:79:25:6d:
c6:b6:39:f9:5c:d1:73:7c:5e:83:63:ed:08:a3:ee:
7f:95:9d:ff:90:c7:9e:cf:88:3b:95:a3:e1:b4:3c:
29:99:e0:e3:9f:8c:97:94:52:77:a4:e9:9c:b3:a9:
de:3a:cb:99:51:d6:2b:4a:e3:58:6c:52:3d:d3:d6:
80:be:13:ab:32:3e:be:15:30:87:62:73:12:74:42:
87:c2:f3:a1:27:45:17:8c:a8:93:08:30:4f:72:a5:
cb:94:6a:11:d3:cd:f2:e8:d4:4f:40:c1:2d:39:ac:
d4:f5:a4:80:e8:a7:c1:e8:83:2d:55:99:7e:1b:29:
f9:63:4f:8e:a0:a1:0c:55:a7:b1:d7:b1:d3:d0:d9:
6e:fb:7e:7a:e3:01:8a:43:9a:ce:d7:3f:9e:07:70:
6d:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:56:14:1E:E3:13:4C:74:27:44:7A:9D:D7:48:24:CA:38:6B:5E:35
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/ae0ce974-b160-3b50-8606-6a49c27c111f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29/841d3ce8-d29f-40af-b883-2f114aee4d29.crl
X509v3 Authority Key Identifier:
keyid:DC:AE:0C:99:9A:44:86:66:5A:A7:3A:3A:49:5F:BD:2A:B3:58:21:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/841d3ce8-d29f-40af-b883-2f114aee4d29.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:e100:3000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:ff:3d:87:52:fe:9b:c7:55:5d:58:f1:0b:73:8f:3b:70:41:
32:7d:36:48:57:30:16:60:e9:81:02:dc:d5:54:02:ed:bf:52:
98:7e:3d:bc:ea:b5:36:24:f3:6b:e4:c1:1b:68:ae:81:fc:9d:
d3:db:9f:22:ef:d7:06:ec:88:8a:c4:45:85:d5:af:a3:e4:3a:
61:8c:18:1b:14:30:69:d2:ce:13:c2:d7:ac:20:cb:5d:df:8d:
6c:89:08:0d:b8:59:b0:20:38:8a:8b:6c:71:7e:86:79:ca:1c:
0c:08:f4:a1:86:73:c3:bf:5c:fe:62:9f:e0:92:d9:40:6c:8d:
6f:10:a5:26:d5:a0:03:66:de:4a:26:11:86:5e:92:79:8b:f1:
89:50:63:49:a0:de:cd:1d:d8:15:d7:db:60:1d:91:d1:ba:30:
d6:fd:5b:d6:99:91:db:cf:80:e5:5a:00:d3:71:2e:55:1f:4a:
e5:45:2e:7a:b8:34:17:bf:d5:d8:a9:12:e8:c5:75:c2:e3:71:
6f:8d:f9:9a:3c:9d:c7:e2:06:7d:d7:d8:f1:08:96:fc:d5:fd:
52:47:d4:0e:cb:47:e6:db:36:23:0e:1f:70:04:26:a8:05:de:
c6:78:ab:72:a2:e3:f5:9f:5b:57:4d:c6:a9:ed:67:6c:3e:49:
92:da:b2:70
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiNavSx30igAnlYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQxZDNjZTgtZDI5Zi00MGFmLWI4ODMtMmYxMTRhZWU0
ZDI5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
YzY0NTgxNTMtYTU5OC00NzU3LTg2NTUtN2VlOTRmNjZhMjc1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkd8S1m5pVdhBeR1W1UaAy+n+ePTf49d9EBYS
7YmFCKfiehbPiDUonFsxI/FgW0H/HinW4TyhcAhEGVY0UrPW1teA37fbILqo5M7+
ovuAoqcjJ8NgFiq/ATATxrVDb3LSBAiRTxt5JW3Gtjn5XNFzfF6DY+0Io+5/lZ3/
kMeez4g7laPhtDwpmeDjn4yXlFJ3pOmcs6neOsuZUdYrSuNYbFI909aAvhOrMj6+
FTCHYnMSdEKHwvOhJ0UXjKiTCDBPcqXLlGoR083y6NRPQMEtOazU9aSA6KfB6IMt
VZl+Gyn5Y0+OoKEMVaex17HT0Nlu+3564wGKQ5rO1z+eB3BtBQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFdWFB7jE0x0J0R6nddIJMo4a141MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC84NDFk
M2NlOC1kMjlmLTQwYWYtYjg4My0yZjExNGFlZTRkMjkvYWUwY2U5NzQtYjE2MC0z
YjUwLTg2MDYtNmE0OWMyN2MxMTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvODQxZDNjZTgtZDI5Zi00MGFmLWI4
ODMtMmYxMTRhZWU0ZDI5Lzg0MWQzY2U4LWQyOWYtNDBhZi1iODgzLTJmMTE0YWVl
NGQyOS5jcmwwHwYDVR0jBBgwFoAU3K4MmZpEhmZapzo6SV+9KrNYIcQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC84NDFkM2NlOC1kMjlmLTQwYWYtYjg4My0yZjEx
NGFlZTRkMjkuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgfhADAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASP89h1L+m8dVXVjxC3OPO3BBMn02SFcwFmDpgQLc1VQC7b9SmH49
vOq1NiTza+TBG2iugfyd09ufIu/XBuyIisRFhdWvo+Q6YYwYGxQwadLOE8LXrCDL
Xd+NbIkIDbhZsCA4iotscX6GecocDAj0oYZzw79c/mKf4JLZQGyNbxClJtWgA2be
SiYRhl6SeYvxiVBjSaDezR3YFdfbYB2R0bow1v1b1pmR28+A5VoA03EuVR9K5UUu
erg0F7/V2KkS6MV1wuNxb435mjydx+IGfdfY8QiW/NX9UkfUDstH5ts2Iw4fcAQm
qAXexnircqLj9Z9bV03Gqe1nbD5JktqycA==
-----END CERTIFICATE-----
Generated at Fri Sep 25 08:49:17 2026 by rpki-client