
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
File: 7d91392f-83f2-35b7-b65b-48348b34691a.roa (raw, json)
Hash identifier: j63YeGVBll3o7rYEKSD9g9IkzZGhTin5ULLHNLmN7Ck=
Subject key identifier: 91:55:84:6E:83:88:BE:E0:C9:0D:FB:B1:6C:74:31:CB:CA:A1:74:71
Certificate issuer: /CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Certificate serial: 010D0C9F4328584CAB8C4CCB267D70C884F62000
Authority key identifier: 89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
Signing time: Wed 28 Jan 2026 02:00:29 +0000
ROA not before: Wed 28 Jan 2026 02:00:29 +0000
ROA not after: Tue 28 Apr 2026 01:00:29 +0000
asID: 3477
IP address blocks: 2601:a005::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ab:8c:4c:cb:26:7d:70:c8:84:f6:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78a3d836-1df8-4303-a944-17cd53d7d04e
Validity
Not Before: Jan 28 02:00:29 2026 GMT
Not After : Apr 28 01:00:29 2026 GMT
Subject: CN=2b653a66-8590-434e-b3a7-19e4bf7b7e8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:c2:5c:36:32:5a:9f:75:5d:cb:39:37:7f:56:
e8:8e:bc:64:1d:11:e4:d6:eb:b0:2e:14:fb:5e:e8:
9a:88:63:26:45:b9:b1:89:88:df:6b:55:6a:d2:4d:
39:e3:61:f6:c2:52:45:8a:05:57:a1:8c:f8:72:ae:
88:96:fe:e2:7c:ab:88:2e:4d:78:6e:15:50:24:82:
89:be:3e:3f:61:0f:20:ae:bf:14:9d:f2:40:68:4f:
41:34:0e:c7:e1:2f:b0:31:69:c8:3a:18:63:3a:d6:
00:dc:26:3e:b0:f3:3e:c4:5b:59:70:c2:85:dd:cb:
ec:ab:8b:32:19:01:e0:88:cc:e7:d7:7b:bb:65:d9:
34:54:8a:2c:5e:61:ec:2d:e4:99:c4:9b:04:31:49:
e8:94:b7:f7:f0:9f:c9:32:3f:8e:c6:33:3f:95:78:
77:37:be:8c:04:d0:24:d0:8f:74:12:75:05:a1:a1:
76:de:ed:3f:ce:35:fb:3d:04:25:5c:08:8f:c2:5f:
3d:86:fa:57:4f:cf:c6:1b:12:01:76:3e:b9:a1:fd:
ab:a8:36:69:2f:f6:b9:b9:75:e7:47:77:1e:a0:cb:
84:9e:30:99:1e:f2:e8:81:7b:e5:be:c2:d5:49:24:
b4:57:d0:db:25:a4:e3:f0:d3:90:54:44:32:a5:03:
98:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:55:84:6E:83:88:BE:E0:C9:0D:FB:B1:6C:74:31:CB:CA:A1:74:71
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/7d91392f-83f2-35b7-b65b-48348b34691a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e/78a3d836-1df8-4303-a944-17cd53d7d04e.crl
X509v3 Authority Key Identifier:
keyid:89:D0:13:AC:DA:15:84:B6:C4:A7:42:B5:71:32:1D:0F:5D:0E:A2:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/78a3d836-1df8-4303-a944-17cd53d7d04e.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:a005::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
91:d8:9f:9a:ba:ec:51:20:43:c5:0c:f2:12:30:b9:80:d0:8d:
ae:17:7c:41:7e:73:4d:80:70:41:91:53:17:38:d1:41:e0:dc:
2f:83:08:53:df:ef:21:91:ba:90:ee:fe:10:0c:ac:24:e0:d4:
64:42:e0:21:d0:33:f1:31:fd:a7:c4:8a:50:a0:e9:a6:75:4f:
0b:4f:c3:46:96:49:d6:ed:fe:53:f4:54:72:21:d0:5a:b3:de:
02:ac:c4:7b:fa:a5:a8:48:3d:e6:6e:5a:a6:5a:d0:32:2d:54:
9a:10:6d:55:1f:1a:14:a7:1c:09:cd:4e:9e:a1:c7:62:09:48:
6b:ae:c8:66:57:67:9b:5f:a2:87:f3:25:bb:13:73:22:06:c9:
a3:60:aa:03:6a:cc:5c:c9:87:e4:ad:d0:88:bf:15:68:6f:f9:
54:c7:9f:31:0e:e7:b7:2c:3a:38:c7:fc:3b:33:4a:a6:96:e2:
a3:e0:62:1f:33:70:17:6c:dd:f0:d3:6b:11:58:d0:04:72:79:
ed:f4:4d:f3:e1:12:4b:f6:e6:4d:9d:38:e1:c3:12:03:1e:1e:
9a:0a:93:07:69:d8:ff:53:8d:09:93:3b:8c:d8:9d:25:fe:79:
cb:df:e3:2e:b9:c0:d4:0c:cc:52:f4:79:60:e8:73:a8:b5:5f:
00:90:4f:e2
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEyrjEzLJn1wyIT2IAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzhhM2Q4MzYtMWRmOC00MzAzLWE5NDQtMTdjZDUzZDdk
MDRlMB4XDTI2MDEyODAyMDAyOVoXDTI2MDQyODAxMDAyOVowLzEtMCsGA1UEAxMk
MmI2NTNhNjYtODU5MC00MzRlLWIzYTctMTllNGJmN2I3ZThjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqsJcNjJan3Vdyzk3f1bojrxkHRHk1uuwLhT7
XuiaiGMmRbmxiYjfa1Vq0k0542H2wlJFigVXoYz4cq6Ilv7ifKuILk14bhVQJIKJ
vj4/YQ8grr8UnfJAaE9BNA7H4S+wMWnIOhhjOtYA3CY+sPM+xFtZcMKF3cvsq4sy
GQHgiMzn13u7Zdk0VIosXmHsLeSZxJsEMUnolLf38J/JMj+OxjM/lXh3N76MBNAk
0I90EnUFoaF23u0/zjX7PQQlXAiPwl89hvpXT8/GGxIBdj65of2rqDZpL/a5uXXn
R3ceoMuEnjCZHvLogXvlvsLVSSS0V9DbJaTj8NOQVEQypQOYUQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFJFVhG6DiL7gyQ37sWx0McvKoXRxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83OGEz
ZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2NkNTNkN2QwNGUvN2Q5MTM5MmYtODNmMi0z
NWI3LWI2NWItNDgzNDhiMzQ2OTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzhhM2Q4MzYtMWRmOC00MzAzLWE5
NDQtMTdjZDUzZDdkMDRlLzc4YTNkODM2LTFkZjgtNDMwMy1hOTQ0LTE3Y2Q1M2Q3
ZDA0ZS5jcmwwHwYDVR0jBBgwFoAUidATrNoVhLbEp0K1cTIdD10OotIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83OGEzZDgzNi0xZGY4LTQzMDMtYTk0NC0xN2Nk
NTNkN2QwNGUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgGgBTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCR2J+auuxRIEPFDPISMLmA0I2uF3xBfnNNgHBBkVMXONFB4NwvgwhT
3+8hkbqQ7v4QDKwk4NRkQuAh0DPxMf2nxIpQoOmmdU8LT8NGlknW7f5T9FRyIdBa
s94CrMR7+qWoSD3mblqmWtAyLVSaEG1VHxoUpxwJzU6eocdiCUhrrshmV2ebX6KH
8yW7E3MiBsmjYKoDasxcyYfkrdCIvxVob/lUx58xDue3LDo4x/w7M0qmluKj4GIf
M3AXbN3w02sRWNAEcnnt9E3z4RJL9uZNnTjhwxIDHh6aCpMHadj/U40JkzuM2J0l
/nnL3+MuucDUDMxS9Hlg6HOotV8AkE/i
-----END CERTIFICATE-----
Generated at Sun Mar 1 21:07:35 2026 by rpki-client