
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fbcdcee-18f5-3e40-a205-a7d83669f080.roa
File: 8fbcdcee-18f5-3e40-a205-a7d83669f080.roa (raw, json)
Hash identifier: Kxnv1gcP0RxIXOogDj1VsOR3RLJrPMPPMbpE6J6OaQ4=
Subject key identifier: 1A:24:54:F6:40:D6:A9:94:DB:BA:18:9D:F9:74:3D:12:6C:C0:A1:32
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE57AA7CDB784EF2D5F40340
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fbcdcee-18f5-3e40-a205-a7d83669f080.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33659
IP address blocks: 2601:81:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:57:aa:7c:db:78:4e:f2:d5:f4:03:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=fb1ee983-2e95-48ef-ad27-b2d7f4d21ede
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:6c:b6:11:21:a1:69:bd:b4:46:cb:56:81:0b:
f6:b7:d1:d9:aa:a7:10:fb:bf:77:34:67:7c:3a:7f:
26:6b:5c:39:20:0b:e8:71:94:7f:a4:a0:1c:47:94:
54:e1:ab:a5:27:3d:46:c2:e7:d2:84:17:8b:3e:2c:
0e:da:38:62:2c:38:c2:c1:52:bb:8c:fc:d1:58:dc:
44:99:eb:3d:73:51:d4:61:6c:d5:04:9a:c9:b6:0a:
68:a7:d4:f8:74:39:c6:52:e8:3c:fd:61:09:c6:5f:
f0:58:f8:7f:aa:f4:e0:b8:ba:ff:d9:86:4d:06:09:
fd:be:f7:47:16:b2:95:61:bd:27:d7:99:96:6a:1d:
17:97:45:05:44:6b:3c:4d:8e:9e:4a:10:65:cf:6e:
11:0d:97:81:1b:9c:ed:98:9f:96:7f:21:60:77:68:
67:64:9d:f2:77:e2:56:73:89:55:fe:e2:4d:b7:81:
b8:8c:1b:ee:c6:fd:4f:75:9c:6b:d6:3d:09:41:e2:
f9:ef:0b:81:a4:f2:56:eb:bc:3c:f6:8d:12:49:13:
f4:24:46:c1:5b:6c:3f:60:e8:15:6c:4a:8d:e6:8c:
c2:39:ca:74:3f:b1:74:47:cf:72:8b:5d:92:8b:1c:
63:74:53:38:4e:f7:b3:7b:10:c3:d5:ab:cf:cb:e9:
ce:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:24:54:F6:40:D6:A9:94:DB:BA:18:9D:F9:74:3D:12:6C:C0:A1:32
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/8fbcdcee-18f5-3e40-a205-a7d83669f080.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:81:4000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2e:3c:a5:42:15:2d:2d:3a:6b:d3:b9:cd:24:10:c5:0a:39:5d:
25:74:8d:d7:f7:2d:21:ce:e1:aa:b6:f6:a9:e9:09:12:93:b1:
ce:0f:c0:47:d5:39:1a:45:5b:16:d3:62:8c:0d:b5:de:da:77:
6e:b5:57:ae:53:06:dc:59:34:f1:f8:58:80:8d:ac:04:27:fd:
d4:70:e6:f7:3c:ce:45:ff:25:d4:b7:bf:78:65:d8:9c:a0:a2:
c4:e0:2a:bb:9f:18:3b:df:94:77:9b:0b:21:3c:fc:45:a3:31:
ce:e8:e4:16:f2:02:72:89:63:83:e8:aa:5c:66:70:ae:f9:b7:
3c:62:61:06:cc:29:1c:d8:ae:33:9e:27:0b:2a:30:0a:bb:e4:
3e:7f:fe:9c:5b:f7:bf:11:4b:95:b8:fb:3a:17:23:70:3a:1d:
dd:b7:bd:0f:1c:59:0f:8e:2d:ee:f7:a3:60:21:45:db:a9:93:
8c:bc:f7:60:2f:12:a7:03:b9:d3:41:7c:87:b4:f2:c0:f4:50:
ba:dc:f6:cc:a5:70:e9:79:ec:84:b6:42:10:59:e1:1b:f3:2d:
00:72:60:cc:d2:b5:58:34:09:84:0a:38:2f:d3:28:e9:04:9a:
53:ed:d4:c9:d1:11:29:da:43:91:8e:54:12:ab:dd:65:05:0a:
4e:99:50:48
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuV6p823hO8tX0A0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
ZmIxZWU5ODMtMmU5NS00OGVmLWFkMjctYjJkN2Y0ZDIxZWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuGy2ESGhab20RstWgQv2t9HZqqcQ+793NGd8
On8ma1w5IAvocZR/pKAcR5RU4aulJz1GwufShBeLPiwO2jhiLDjCwVK7jPzRWNxE
mes9c1HUYWzVBJrJtgpop9T4dDnGUug8/WEJxl/wWPh/qvTguLr/2YZNBgn9vvdH
FrKVYb0n15mWah0Xl0UFRGs8TY6eShBlz24RDZeBG5ztmJ+WfyFgd2hnZJ3yd+JW
c4lV/uJNt4G4jBvuxv1PdZxr1j0JQeL57wuBpPJW67w89o0SSRP0JEbBW2w/YOgV
bEqN5ozCOcp0P7F0R89yi12SixxjdFM4TvezexDD1avPy+nOEwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFBokVPZA1qmU27oYnfl0PRJswKEyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvOGZiY2RjZWUtMThmNS0z
ZTQwLWEyMDUtYTdkODM2NjlmMDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEAgUAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEALjylQhUtLTpr07nNJBDFCjldJXSN1/ctIc7hqrb2qekJEpOxzg/A
R9U5GkVbFtNijA213tp3brVXrlMG3Fk08fhYgI2sBCf91HDm9zzORf8l1Le/eGXY
nKCixOAqu58YO9+Ud5sLITz8RaMxzujkFvICcoljg+iqXGZwrvm3PGJhBswpHNiu
M54nCyowCrvkPn/+nFv3vxFLlbj7OhcjcDod3be9DxxZD44t7vejYCFF26mTjLz3
YC8SpwO500F8h7TywPRQutz2zKVw6XnshLZCEFnhG/MtAHJgzNK1WDQJhAo4L9Mo
6QSaU+3UydERKdpDkY5UEqvdZQUKTplQSA==
-----END CERTIFICATE-----
Generated at Sun Mar 1 18:26:41 2026 by rpki-client