
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa
File: cddf7f78-b844-3101-b25e-04a2714b6f1b.roa (raw, json)
Hash identifier: 2MPe62dcOpUTVnr/OnuHCLLlXYjad26pIa0JWAZ1OLg=
Subject key identifier: 7B:44:33:3A:1E:5E:95:37:F1:82:BE:4E:99:1C:FF:64:F5:83:F0:C6
Certificate issuer: /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial: 010D0C9F4328584CAE58BD1177DFD9E36F457614
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa
Signing time: Thu 29 Jan 2026 02:00:32 +0000
ROA not before: Thu 29 Jan 2026 02:00:32 +0000
ROA not after: Wed 29 Apr 2026 01:00:32 +0000
asID: 33651
IP address blocks: 2603:3024:1e00::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ae:58:bd:11:77:df:d9:e3:6f:45:76:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Validity
Not Before: Jan 29 02:00:32 2026 GMT
Not After : Apr 29 01:00:32 2026 GMT
Subject: CN=92e3838d-5c99-4d5d-a288-5aa42703a9a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2a:54:96:24:fe:50:a6:82:7b:90:9e:7b:a1:
50:ad:15:82:2c:1f:5f:7f:e6:16:fb:d4:ea:7c:90:
af:7d:c7:be:df:4c:92:05:5a:e0:07:a4:fb:b3:ff:
19:f3:59:25:a3:ce:68:95:2d:f9:6f:7f:a1:2a:75:
2f:12:ba:ba:3a:50:2d:12:df:02:19:e7:48:f4:16:
58:2e:98:38:3e:07:53:6c:f4:3e:d7:fc:eb:c4:0f:
da:2e:fb:42:d7:14:44:00:5a:c2:2e:be:83:c3:e6:
8b:cb:f1:fa:62:0c:13:47:14:d4:21:12:9c:b8:73:
a5:ca:4c:90:82:9f:0e:b6:e4:7c:22:7a:17:93:2e:
c7:f0:bd:a3:ef:2c:02:b9:e5:8d:4c:48:4a:26:d2:
81:29:89:c0:24:e0:82:68:57:1f:dc:eb:1d:d1:59:
52:29:e5:f2:22:b3:b9:71:ab:02:13:30:b8:5d:5e:
86:90:81:68:94:2d:43:50:22:9d:a4:a8:30:a5:c1:
33:f1:39:7f:d5:94:92:fd:a8:42:97:60:f1:cf:ee:
e7:4a:d7:e4:9a:15:b4:d3:6c:6f:43:f0:e9:37:bf:
d9:37:e8:ff:b6:0d:c6:37:8a:4f:ff:bf:34:2f:ef:
cd:5c:9a:27:a4:3f:04:51:21:ea:28:71:55:b7:1d:
06:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:44:33:3A:1E:5E:95:37:F1:82:BE:4E:99:1C:FF:64:F5:83:F0:C6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/cddf7f78-b844-3101-b25e-04a2714b6f1b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
X509v3 Authority Key Identifier:
keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2603:3024:1e00::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b8:75:53:a0:30:d2:e3:af:a1:23:78:0d:a8:bb:5a:36:ab:af:
2a:89:2b:2e:8e:b6:75:a8:4b:02:9f:fc:16:58:12:99:80:8c:
20:4f:44:a9:c4:c9:a2:06:66:d1:70:17:2b:0c:6d:a4:02:af:
18:cb:fa:0c:c6:a9:f9:f6:6a:90:6b:6e:1a:af:53:e4:7c:41:
66:60:24:df:1f:ce:42:72:e9:c1:55:19:7c:f2:eb:b1:d0:c6:
b5:4d:c3:86:bd:0c:0c:0b:c0:70:39:a7:5f:22:ed:b7:7b:ab:
18:3e:86:ef:7b:56:2a:1e:5f:ce:0f:1c:ba:e2:ad:dc:0a:dd:
ed:ad:ef:1b:67:f9:92:7b:60:da:6a:82:5e:df:e7:d3:5f:e2:
30:42:e7:0a:bb:f5:37:a7:63:35:7d:32:5c:3d:d3:62:1d:f4:
a1:c6:ff:c4:65:0c:b2:17:af:6b:7f:45:85:b2:b0:bb:d0:54:
28:88:45:96:19:dc:58:5c:93:82:f9:3b:db:f1:72:b6:e6:9f:
7f:e9:c7:2b:33:98:bf:88:39:97:08:5c:b7:40:8a:db:3a:49:
2c:5a:d4:66:b5:a5:d6:6b:34:c9:73:41:8f:6e:e2:30:5e:f6:
b9:cc:09:e8:6f:8c:68:db:4e:cd:29:08:5d:0a:3a:24:a5:82:
52:f3:54:28
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyuWL0Rd9/Z429FdhQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI2MDEyOTAyMDAzMloXDTI2MDQyOTAxMDAzMlowLzEtMCsGA1UEAxMk
OTJlMzgzOGQtNWM5OS00ZDVkLWEyODgtNWFhNDI3MDNhOWE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoypUliT+UKaCe5Cee6FQrRWCLB9ff+YW+9Tq
fJCvfce+30ySBVrgB6T7s/8Z81klo85olS35b3+hKnUvErq6OlAtEt8CGedI9BZY
Lpg4PgdTbPQ+1/zrxA/aLvtC1xREAFrCLr6Dw+aLy/H6YgwTRxTUIRKcuHOlykyQ
gp8OtuR8InoXky7H8L2j7ywCueWNTEhKJtKBKYnAJOCCaFcf3Osd0VlSKeXyIrO5
casCEzC4XV6GkIFolC1DUCKdpKgwpcEz8Tl/1ZSS/ahCl2Dxz+7nStfkmhW002xv
Q/DpN7/ZN+j/tg3GN4pP/780L+/NXJonpD8EUSHqKHFVtx0GzwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHtEMzoeXpU38YK+Tpkc/2T1g/DGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvY2RkZjdmNzgtYjg0NC0z
MTAxLWIyNWUtMDRhMjcxNGI2ZjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgMwJB4w
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAuHVToDDS46+hI3gNqLtaNquvKokrLo62dahLAp/8FlgSmYCMIE9E
qcTJogZm0XAXKwxtpAKvGMv6DMap+fZqkGtuGq9T5HxBZmAk3x/OQnLpwVUZfPLr
sdDGtU3Dhr0MDAvAcDmnXyLtt3urGD6G73tWKh5fzg8cuuKt3Ard7a3vG2f5kntg
2mqCXt/n01/iMELnCrv1N6djNX0yXD3TYh30ocb/xGUMsheva39FhbKwu9BUKIhF
lhncWFyTgvk72/Fytuaff+nHKzOYv4g5lwhct0CK2zpJLFrUZrWl1ms0yXNBj27i
MF72ucwJ6G+MaNtOzSkIXQo6JKWCUvNUKA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:16:47 2026 by rpki-client