
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c842c4-4b3f-3303-ac60-92700e73f011.roa
File: a8c842c4-4b3f-3303-ac60-92700e73f011.roa (raw, json)
Hash identifier: l3MCU9TtE4PRsEgUBPymzwiL4u699wg+ig3Uxf9mUzQ=
Subject key identifier: 40:95:25:A0:41:E9:E7:00:2B:20:24:C5:52:1D:49:AC:42:12:DE:7A
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584F49821650E7D23446E98B6480
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c842c4-4b3f-3303-ac60-92700e73f011.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 13367
IP address blocks: 2601:448:8000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:82:16:50:e7:d2:34:46:e9:8b:64:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=e987b3de-0ebb-4bb3-bbf4-e373a7be9601
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d5:26:17:c7:7a:13:1f:2b:5a:40:d4:2f:25:
e9:41:92:60:5c:2b:56:3b:c7:85:90:c4:f5:06:b3:
18:08:3b:fe:d3:f1:fd:a4:bb:20:4a:8e:f6:5b:ef:
99:b4:99:44:c4:7c:06:82:38:0a:20:50:88:91:7d:
12:68:4b:77:67:19:4d:4c:b5:30:79:5d:d9:9d:38:
a5:81:1e:f9:c0:7f:9b:b0:2e:f1:93:f4:3a:b7:48:
b5:6b:f9:fd:16:8f:ad:f5:4f:c3:6e:5a:21:5f:76:
18:c6:58:dd:c9:7a:03:a9:28:c1:0c:b1:75:1e:2b:
a4:5b:b0:89:f3:5f:84:60:58:37:5e:71:1a:a8:cd:
58:c3:2f:bc:85:16:e3:28:de:a2:c4:58:3a:1a:a6:
6f:bb:3c:58:a9:f6:37:85:de:a8:b7:a4:ab:31:e9:
81:1a:fd:31:9c:8b:42:73:36:68:6f:b5:09:d4:ea:
25:4b:84:07:9a:5e:ef:f8:d0:3b:e6:b0:9a:fc:c4:
01:90:d6:d0:71:94:a9:76:45:b5:1e:05:77:91:d9:
23:d0:d8:17:85:8b:72:4d:d3:2b:dc:1a:98:da:76:
97:0a:81:f5:47:dc:ee:f3:8c:f1:79:04:f4:08:74:
4c:5c:78:5f:f7:98:d0:e9:97:5b:1a:8d:79:bb:de:
49:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:95:25:A0:41:E9:E7:00:2B:20:24:C5:52:1D:49:AC:42:12:DE:7A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/a8c842c4-4b3f-3303-ac60-92700e73f011.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:448:8000::/34
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
cc:a8:93:2d:0b:5d:ed:07:e5:1c:0f:ad:a2:f6:f2:05:d0:d4:
be:f3:3b:d8:9f:14:a7:f5:61:24:6e:32:6b:3f:93:88:59:f0:
b7:8b:9a:e5:e9:59:35:4e:a3:93:c1:00:6d:46:bb:6c:6f:e8:
73:aa:29:ec:5b:73:68:2e:28:01:74:53:be:39:85:44:05:2e:
47:f1:b8:cb:2e:3a:2d:c9:d5:36:45:a6:53:a6:62:9a:88:1b:
4f:a9:cf:78:55:ba:7d:4a:29:bc:59:4e:02:11:09:67:81:c0:
f4:92:61:78:3d:5c:b5:c6:73:a2:ba:8b:44:d4:1b:c0:31:42:
b8:e8:bb:b7:b2:9d:40:9e:b2:ec:c1:34:e8:18:07:01:66:24:
9c:76:2f:4b:09:aa:3d:02:06:a9:45:b8:f6:d4:ba:d5:4b:28:
7a:dc:36:b3:38:56:05:d1:56:c0:58:35:14:b5:93:12:e9:ca:
cd:33:8c:7d:11:cd:80:ba:22:77:d0:1e:2e:b6:6f:09:2d:19:
44:d1:c1:31:86:be:e1:0d:01:43:2f:09:86:e8:93:50:35:4a:
49:40:b4:33:5f:7b:b2:ac:4b:dd:87:50:e8:04:40:c4:c7:57:
20:c4:56:05:22:b9:eb:8e:9b:68:17:3f:13:c2:31:0c:02:d0:
26:d9:ba:78
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JghZQ59I0RumLZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ZTk4N2IzZGUtMGViYi00YmIzLWJiZjQtZTM3M2E3YmU5NjAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApdUmF8d6Ex8rWkDULyXpQZJgXCtWO8eFkMT1
BrMYCDv+0/H9pLsgSo72W++ZtJlExHwGgjgKIFCIkX0SaEt3ZxlNTLUweV3ZnTil
gR75wH+bsC7xk/Q6t0i1a/n9Fo+t9U/DblohX3YYxljdyXoDqSjBDLF1HiukW7CJ
81+EYFg3XnEaqM1Ywy+8hRbjKN6ixFg6GqZvuzxYqfY3hd6ot6SrMemBGv0xnItC
czZob7UJ1OolS4QHml7v+NA75rCa/MQBkNbQcZSpdkW1HgV3kdkj0NgXhYtyTdMr
3BqY2naXCoH1R9zu84zxeQT0CHRMXHhf95jQ6ZdbGo15u95JDwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFECVJaBB6ecAKyAkxVIdSaxCEt56MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvYThjODQyYzQtNGIzZi0z
MzAzLWFjNjAtOTI3MDBlNzNmMDExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYGJgEESIAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAzKiTLQtd7QflHA+tovbyBdDUvvM72J8Up/VhJG4yaz+TiFnwt4ua
5elZNU6jk8EAbUa7bG/oc6op7FtzaC4oAXRTvjmFRAUuR/G4yy46LcnVNkWmU6Zi
mogbT6nPeFW6fUopvFlOAhEJZ4HA9JJheD1ctcZzorqLRNQbwDFCuOi7t7KdQJ6y
7ME06BgHAWYknHYvSwmqPQIGqUW49tS61Usoetw2szhWBdFWwFg1FLWTEunKzTOM
fRHNgLoid9AeLrZvCS0ZRNHBMYa+4Q0BQy8JhuiTUDVKSUC0M197sqxL3YdQ6ARA
xMdXIMRWBSK5646baBc/E8IxDALQJtm6eA==
-----END CERTIFICATE-----
Generated at Thu Oct 1 19:38:30 2026 by rpki-client