
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
File: b4d941c7-94be-35d4-9a43-4e671333d3fb.roa (raw, json)
Hash identifier: SurUZZI2hXni6XEria9QS510Jqz6lWig5T/bYZGYmqg=
Subject key identifier: 2A:F1:7B:54:B3:D8:01:BA:ED:2D:1D:2E:70:0E:A2:09:72:10:05:42
Certificate issuer: /CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Certificate serial: 010D0C9F4328584F374D1D2D9E23FB2CC5870D00
Authority key identifier: DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
Signing time: Fri 18 Sep 2026 13:00:12 +0000
ROA not before: Fri 18 Sep 2026 13:00:12 +0000
ROA not after: Thu 17 Dec 2026 14:00:12 +0000
asID: 213151
IP address blocks: 2602:fb2a::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:37:4d:1d:2d:9e:23:fb:2c:c5:87:0d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2
Validity
Not Before: Sep 18 13:00:12 2026 GMT
Not After : Dec 17 14:00:12 2026 GMT
Subject: CN=964b5b54-b71f-4d33-bc13-8cba57c21dfa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:85:19:77:8e:03:3d:98:37:d2:f8:67:97:1a:
a6:49:1e:d2:76:7a:e4:85:8e:36:c7:73:a8:7b:9d:
9e:29:fd:b1:ed:d6:2b:3c:c1:8f:61:bc:db:04:62:
6a:36:90:ff:4b:50:f6:c8:a0:5a:20:81:95:07:d5:
25:f8:00:d8:56:ef:f0:b4:b7:cb:b6:7e:a7:82:b3:
e2:bb:3e:01:b8:57:e4:1e:9a:03:fb:ba:ef:d8:21:
a9:f0:c5:f7:9e:45:c6:71:6c:75:7a:7b:ee:56:1b:
22:67:c0:06:b6:4e:ab:29:37:58:bf:60:20:f5:87:
22:27:bb:a6:86:65:bb:26:85:50:f4:84:65:4a:92:
ab:8f:b3:a9:87:5e:17:c5:17:3b:2c:dc:cf:9c:8b:
20:1e:41:f0:76:42:82:10:1a:0f:e6:18:df:e4:8e:
73:50:bb:6f:3f:71:ac:ed:2a:a4:75:ee:db:9a:db:
46:ab:1f:18:68:0c:7b:9f:88:ea:72:16:d7:39:16:
03:ee:f6:71:31:17:08:70:b8:92:1e:fd:e4:6b:13:
8d:f1:e1:08:fa:c1:08:70:89:df:18:88:4a:94:b7:
8c:9e:99:af:8a:de:5d:67:5e:5e:c6:74:d1:b5:f3:
f8:90:3e:e5:dc:92:b6:15:09:31:17:05:ed:47:97:
6b:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:F1:7B:54:B3:D8:01:BA:ED:2D:1D:2E:70:0E:A2:09:72:10:05:42
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/b4d941c7-94be-35d4-9a43-4e671333d3fb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.crl
X509v3 Authority Key Identifier:
keyid:DB:4C:BE:6E:B3:E7:74:A6:66:DB:BF:8D:07:AD:66:A3:D3:67:D4:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2c3e4f1e-2f9d-4c15-9fd2-8c576b7e05a2.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fb2a::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
49:11:6a:fb:7f:e5:ab:91:0f:76:ec:ae:af:8b:49:c1:13:cf:
2d:34:6a:dc:1d:3e:45:ff:59:b0:ba:9d:cb:a7:2a:8e:1e:77:
05:08:1b:95:ec:82:7e:e6:20:a8:31:7b:a5:36:20:4a:46:46:
fe:19:27:0e:d6:a1:f7:73:7c:4e:52:40:a2:69:f2:d2:9c:c7:
2f:28:ff:d7:b2:c9:59:72:c0:36:cf:90:cf:79:43:88:14:75:
74:54:11:b1:d0:10:9d:1b:30:a1:cb:15:63:ce:74:1b:9c:9d:
7d:37:8a:7c:c4:a0:fb:a8:34:f9:91:98:2d:8a:7d:a6:2f:6a:
d8:44:41:f5:5b:39:89:ee:c8:c5:7e:6f:fd:20:8b:fb:7c:05:
1e:cf:6b:98:77:6d:e4:df:77:cd:a0:9e:39:a5:99:48:a8:7e:
26:26:20:c3:a8:2c:f5:72:3d:93:bb:a8:a2:71:5a:2a:b4:a1:
43:28:8a:b0:ed:c1:de:35:39:31:8c:71:2a:58:dc:b8:36:e0:
5c:e0:a8:76:a8:08:01:b0:0f:c8:b6:94:5d:21:5f:50:30:de:
a2:25:70:7b:33:1c:00:19:7e:dc:57:20:26:f9:db:32:c9:7a:
4d:b5:2a:9b:e2:b8:fb:7d:49:8f:89:bc:bc:8f:8c:53:2b:0e:
84:af:fc:0a
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE83TR0tniP7LMWHDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmMzZTRmMWUtMmY5ZC00YzE1LTlmZDItOGM1NzZiN2Uw
NWEyMB4XDTI2MDkxODEzMDAxMloXDTI2MTIxNzE0MDAxMlowLzEtMCsGA1UEAxMk
OTY0YjViNTQtYjcxZi00ZDMzLWJjMTMtOGNiYTU3YzIxZGZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA34UZd44DPZg30vhnlxqmSR7SdnrkhY42x3Oo
e52eKf2x7dYrPMGPYbzbBGJqNpD/S1D2yKBaIIGVB9Ul+ADYVu/wtLfLtn6ngrPi
uz4BuFfkHpoD+7rv2CGp8MX3nkXGcWx1envuVhsiZ8AGtk6rKTdYv2Ag9YciJ7um
hmW7JoVQ9IRlSpKrj7Oph14XxRc7LNzPnIsgHkHwdkKCEBoP5hjf5I5zULtvP3Gs
7Sqkde7bmttGqx8YaAx7n4jqchbXORYD7vZxMRcIcLiSHv3kaxON8eEI+sEIcInf
GIhKlLeMnpmvit5dZ15exnTRtfP4kD7l3JK2FQkxFwXtR5drcQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFCrxe1Sz2AG67S0dLnAOoglyEAVCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYzNl
NGYxZS0yZjlkLTRjMTUtOWZkMi04YzU3NmI3ZTA1YTIvYjRkOTQxYzctOTRiZS0z
NWQ0LTlhNDMtNGU2NzEzMzNkM2ZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmMzZTRmMWUtMmY5ZC00YzE1LTlm
ZDItOGM1NzZiN2UwNWEyLzJjM2U0ZjFlLTJmOWQtNGMxNS05ZmQyLThjNTc2Yjdl
MDVhMi5jcmwwHwYDVR0jBBgwFoAU20y+brPndKZm27+NB61mo9Nn1FwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYzNlNGYxZS0yZjlkLTRjMTUtOWZkMi04YzU3
NmI3ZTA1YTIuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL7KgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEASRFq+3/lq5EPduyur4tJwRPPLTRq3B0+Rf9ZsLqdy6cqjh53BQgb
leyCfuYgqDF7pTYgSkZG/hknDtah93N8TlJAomny0pzHLyj/17LJWXLANs+Qz3lD
iBR1dFQRsdAQnRswocsVY850G5ydfTeKfMSg+6g0+ZGYLYp9pi9q2ERB9Vs5ie7I
xX5v/SCL+3wFHs9rmHdt5N93zaCeOaWZSKh+JiYgw6gs9XI9k7uoonFaKrShQyiK
sO3B3jU5MYxxKljcuDbgXOCodqgIAbAPyLaUXSFfUDDeoiVwezMcABl+3FcgJvnb
Msl6TbUqm+K4+31Jj4m8vI+MUysOhK/8Cg==
-----END CERTIFICATE-----
Generated at Tue Sep 22 17:27:38 2026 by rpki-client