
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
File: af24fabb-a446-3593-9b02-7544b4fbbf3c.roa (raw, json)
Hash identifier: hLyDoC8WnxksGCFOWSHM3Gy7LxxaDN86PIU1Zdvv9KY=
Subject key identifier: 43:D0:BF:9F:C5:31:DB:E5:49:D9:CB:47:EF:CB:11:B4:F6:8A:E3:0A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D624A5C039820BDD0077FA100
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
Signing time: Fri 03 Apr 2026 13:00:30 +0000
ROA not before: Fri 03 Apr 2026 13:00:30 +0000
ROA not after: Thu 02 Jul 2026 13:00:30 +0000
asID: 30036
IP address blocks: 2604:2d80:3000::/38 maxlen: 38
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:62:4a:5c:03:98:20:bd:d0:07:7f:a1:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Apr 3 13:00:30 2026 GMT
Not After : Jul 2 13:00:30 2026 GMT
Subject: CN=a1e5fcee-c1d0-4142-b5be-41d2b710f0b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:32:6d:54:09:d0:63:74:9c:1a:fe:0e:72:41:
67:7c:98:b7:51:64:c7:a0:65:b8:7d:73:0b:84:41:
dd:89:64:6d:49:ed:86:41:cf:27:ef:14:fb:4a:5a:
b7:5e:75:5b:01:c8:e9:87:70:e3:9b:5d:49:3a:1e:
57:77:0e:eb:15:d1:f2:57:3f:1b:b6:03:42:e3:9b:
6e:98:1d:d7:b5:4d:3e:62:10:72:18:aa:37:9f:a9:
48:27:2e:a2:97:60:5a:3e:74:f0:d7:e4:41:dd:c2:
8a:fe:1a:aa:05:79:9b:58:27:70:a3:74:e5:a3:33:
d5:b1:9d:88:a1:96:c1:82:ef:e5:c6:74:66:8b:62:
c2:a4:99:65:86:7e:ef:74:9c:3d:66:be:ac:38:f0:
4e:85:25:5f:2d:f3:0f:10:be:22:6b:a1:93:85:e7:
cc:6b:89:20:8d:5b:5f:3b:91:f7:17:76:d2:8b:2d:
99:bc:31:17:c1:c5:0e:09:c4:31:3c:f7:ca:23:fd:
49:0c:56:3b:b8:7a:1d:47:50:11:80:61:b2:16:2b:
60:79:83:c9:8b:07:4b:24:23:4b:ca:33:2c:06:59:
c5:6c:15:45:de:cd:a6:9e:e4:d1:a1:06:bf:28:86:
93:c3:c4:ab:bc:a2:68:13:b1:bf:fa:19:58:18:98:
09:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:D0:BF:9F:C5:31:DB:E5:49:D9:CB:47:EF:CB:11:B4:F6:8A:E3:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/af24fabb-a446-3593-9b02-7544b4fbbf3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:3000::/38
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
75:40:73:5b:da:23:d3:11:e6:46:41:c9:ad:66:80:5d:7f:3c:
ea:f0:ef:0f:73:56:56:0b:ee:e5:68:17:4f:fc:2d:df:f0:5b:
24:89:f7:89:33:88:2d:99:22:22:99:80:8c:71:45:8c:a6:cd:
bb:ee:1f:40:c3:9e:0d:96:68:f6:49:2c:41:7a:9c:6e:6b:1c:
9c:ab:9f:55:62:58:fb:82:7b:e6:c5:88:32:9f:cb:dc:33:24:
ee:f9:51:e8:8f:ca:48:da:b7:42:5f:6a:0a:75:ed:28:1c:de:
73:ee:8a:cd:ca:89:2e:63:95:5a:06:f2:f5:b4:8c:04:e5:d8:
34:26:ca:87:4b:c4:08:49:5b:4f:b8:16:12:f2:88:61:13:34:
1b:e7:52:f7:bf:5e:cd:9f:2b:99:cf:03:fc:86:bc:c9:ff:bc:
16:2b:7a:9f:9d:b2:17:ed:02:99:26:a4:4e:f2:75:37:d9:dd:
c7:92:db:5f:a7:fa:d5:3d:7e:3e:86:c1:7d:16:3c:bd:2e:7e:
32:61:04:ca:e7:df:0c:20:f0:49:5d:48:92:80:06:09:06:aa:
7d:44:d4:34:18:f0:75:b3:62:83:eb:2d:dd:61:3a:48:b9:b0:
10:f6:b6:cb:99:f1:1c:88:91:67:9d:63:81:e6:a3:bf:5e:0b:
80:7f:ac:91
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE1iSlwDmCC90Ad/oQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2M0NDkxYjktOTJiYi00ZTNlLWE2MGMtYzI4YmMxMDBk
ZmRjMB4XDTI2MDQwMzEzMDAzMFoXDTI2MDcwMjEzMDAzMFowLzEtMCsGA1UEAxMk
YTFlNWZjZWUtYzFkMC00MTQyLWI1YmUtNDFkMmI3MTBmMGI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1zJtVAnQY3ScGv4OckFnfJi3UWTHoGW4fXML
hEHdiWRtSe2GQc8n7xT7Slq3XnVbAcjph3Djm11JOh5Xdw7rFdHyVz8btgNC45tu
mB3XtU0+YhByGKo3n6lIJy6il2BaPnTw1+RB3cKK/hqqBXmbWCdwo3TlozPVsZ2I
oZbBgu/lxnRmi2LCpJllhn7vdJw9Zr6sOPBOhSVfLfMPEL4ia6GThefMa4kgjVtf
O5H3F3bSiy2ZvDEXwcUOCcQxPPfKI/1JDFY7uHodR1ARgGGyFitgeYPJiwdLJCNL
yjMsBlnFbBVF3s2mnuTRoQa/KIaTw8SrvKJoE7G/+hlYGJgJMwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEPQv5/FMdvlSdnLR+/LEbT2iuMKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0
OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhiYzEwMGRmZGMvYWYyNGZhYmItYTQ0Ni0z
NTkzLTliMDItNzU0NGI0ZmJiZjNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvM2M0NDkxYjktOTJiYi00ZTNlLWE2
MGMtYzI4YmMxMDBkZmRjLzNjNDQ5MWI5LTkyYmItNGUzZS1hNjBjLWMyOGJjMTAw
ZGZkYy5jcmwwHwYDVR0jBBgwFoAUa98yzK1b6acPP1rDV05DiuxO05YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zYzQ0OTFiOS05MmJiLTRlM2UtYTYwYy1jMjhi
YzEwMGRmZGMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYCJgQtgDAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAdUBzW9oj0xHmRkHJrWaAXX886vDvD3NWVgvu5WgXT/wt3/BbJIn3
iTOILZkiIpmAjHFFjKbNu+4fQMOeDZZo9kksQXqcbmscnKufVWJY+4J75sWIMp/L
3DMk7vlR6I/KSNq3Ql9qCnXtKBzec+6KzcqJLmOVWgby9bSMBOXYNCbKh0vECElb
T7gWEvKIYRM0G+dS979ezZ8rmc8D/Ia8yf+8Fit6n52yF+0CmSakTvJ1N9ndx5Lb
X6f61T1+PobBfRY8vS5+MmEEyuffDCDwSV1IkoAGCQaqfUTUNBjwdbNig+st3WE6
SLmwEPa2y5nxHIiRZ51jgeajv14LgH+skQ==
-----END CERTIFICATE-----
Generated at Fri Apr 17 14:10:14 2026 by rpki-client