
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa
File: 5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa (raw, json)
Hash identifier: 6kMvvgz3pImENmN/YPDq5iuGPEwkBcwiK27QRjqk+/A=
Subject key identifier: 53:40:32:D9:43:0C:F4:02:A4:8A:F9:3F:56:B7:FB:D7:7D:D1:6E:18
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58BA96B5BB6372AF7D8880
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 2601:642::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:ba:96:b5:bb:63:72:af:7d:88:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=48f9f572-58cf-4ba9-b911-011222ba721b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:86:8b:48:2f:82:94:04:be:29:3f:bd:76:42:
36:f8:21:e6:db:72:44:01:55:7e:03:d6:e2:8d:68:
a4:10:78:e9:18:42:0b:a1:34:27:98:e4:2b:da:52:
d3:70:05:36:f2:85:c7:38:bc:ea:5c:c8:58:91:f5:
42:45:2c:55:13:af:f5:fc:78:ba:7e:eb:2a:6f:33:
c0:22:2d:18:7e:9a:16:1d:22:9b:9b:12:f4:2e:f0:
1f:64:9d:c4:c2:f4:57:77:51:cf:b7:23:cd:6f:bf:
72:1f:80:8c:78:70:39:c6:fb:bc:dc:07:40:16:69:
a9:ea:06:e4:6f:a2:9e:62:57:67:09:be:4e:1c:12:
7d:61:7a:b0:de:16:33:da:e3:e7:c1:95:ac:b3:5b:
fd:8c:74:22:90:cb:d4:17:9a:7b:81:dc:b5:a7:6b:
5d:3a:af:36:dc:9c:50:0a:b2:e8:b8:03:e8:ef:4a:
4a:db:e5:48:a9:16:e1:0f:5d:e5:dd:b1:53:3f:14:
65:bf:1d:b2:64:ca:13:ad:ae:f2:66:07:b4:ab:fd:
07:d3:31:7e:00:dd:89:21:93:0d:2c:de:65:d7:7f:
75:33:e8:c4:6b:34:12:ef:a7:a5:07:f4:2a:f3:83:
6b:cf:95:14:a3:2b:b9:b1:ac:44:a8:ea:aa:d6:38:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:40:32:D9:43:0C:F4:02:A4:8A:F9:3F:56:B7:FB:D7:7D:D1:6E:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/5baf7cb7-98be-3a97-8a19-2a5aa63c2946.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:642::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:88:16:d2:e6:a0:c1:1b:3f:ab:84:d7:bb:20:cb:92:7b:17:
0f:c6:2f:e4:2a:78:64:86:7c:49:4d:ed:9f:08:5d:a1:da:e1:
bc:9e:dc:cc:b2:38:2f:9f:2e:a9:dd:6e:27:8c:0a:b7:80:cf:
bd:d3:31:8a:4a:81:73:d7:66:a1:ae:9e:ae:a1:64:bb:4d:24:
63:7c:a3:a0:e1:e5:6e:98:5a:9e:78:85:7b:3b:00:df:cf:10:
21:3f:03:fa:1a:7f:ef:56:08:ea:7c:0f:c0:30:0f:4d:00:08:
32:74:a6:06:19:b3:8c:56:fb:72:c5:53:34:1e:59:42:da:b5:
d8:e1:83:4f:b3:6f:ef:65:fd:61:b5:7f:f2:17:1c:f4:de:ab:
4d:e9:1a:65:dc:4f:a8:28:c4:cf:6c:2f:f0:66:c3:23:85:16:
c8:db:f0:bb:d0:2b:9c:e3:bd:e8:2d:28:4e:8c:9d:e1:40:ec:
6e:15:fe:51:e1:d2:27:ae:73:ed:1b:72:ba:10:30:7a:49:5b:
7d:2b:d8:65:cd:c7:a7:f3:79:6a:c1:94:a8:ee:49:e3:5f:a3:
00:2c:2c:dd:33:f0:5b:c7:86:93:0a:78:d6:0a:55:14:88:25:
3f:c9:3f:72:03:b3:f2:1b:ff:67:1f:af:78:64:f4:8d:88:1e:
6f:2e:bf:cd
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuWLqWtbtjcq99iIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
NDhmOWY1NzItNThjZi00YmE5LWI5MTEtMDExMjIyYmE3MjFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04aLSC+ClAS+KT+9dkI2+CHm23JEAVV+A9bi
jWikEHjpGEILoTQnmOQr2lLTcAU28oXHOLzqXMhYkfVCRSxVE6/1/Hi6fusqbzPA
Ii0YfpoWHSKbmxL0LvAfZJ3EwvRXd1HPtyPNb79yH4CMeHA5xvu83AdAFmmp6gbk
b6KeYldnCb5OHBJ9YXqw3hYz2uPnwZWss1v9jHQikMvUF5p7gdy1p2tdOq823JxQ
CrLouAPo70pK2+VIqRbhD13l3bFTPxRlvx2yZMoTra7yZge0q/0H0zF+AN2JIZMN
LN5l1391M+jEazQS76elB/Qq84Nrz5UUoyu5saxEqOqq1jhBxQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFNAMtlDDPQCpIr5P1a3+9d90W4YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvNWJhZjdjYjctOThiZS0z
YTk3LThhMTktMmE1YWE2M2MyOTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEGQgAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEATYgW0uagwRs/q4TXuyDLknsXD8Yv5Cp4ZIZ8SU3tnwhdodrhvJ7c
zLI4L58uqd1uJ4wKt4DPvdMxikqBc9dmoa6erqFku00kY3yjoOHlbphanniFezsA
388QIT8D+hp/71YI6nwPwDAPTQAIMnSmBhmzjFb7csVTNB5ZQtq12OGDT7Nv72X9
YbV/8hcc9N6rTekaZdxPqCjEz2wv8GbDI4UWyNvwu9ArnOO96C0oToyd4UDsbhX+
UeHSJ65z7RtyuhAweklbfSvYZc3Hp/N5asGUqO5J41+jACws3TPwW8eGkwp41gpV
FIglP8k/cgOz8hv/Zx+veGT0jYgeby6/zQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:29:24 2026 by rpki-client