
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5ae2a426-39f0-3760-9377-592af0afb6ca.roa
File: 5ae2a426-39f0-3760-9377-592af0afb6ca.roa (raw, json)
Hash identifier: pJppYyJEklRE2kpn7XzCVg2hcRbbr2xBtPIMrpOqgB8=
Subject key identifier: F3:0E:58:3B:74:04:D3:AD:B4:23:61:5A:A9:29:36:F5:11:E9:5A:48
Certificate issuer: /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Certificate serial: 010D0C9F4328584DFC31C4B764372DDD5DF45800
Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5ae2a426-39f0-3760-9377-592af0afb6ca.roa
Signing time: Thu 28 May 2026 16:05:33 +0000
ROA not before: Thu 28 May 2026 16:05:33 +0000
ROA not after: Wed 26 Aug 2026 16:05:33 +0000
asID: 2635
IP address blocks: 2620:109:b000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:fc:31:c4:b7:64:37:2d:dd:5d:f4:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Validity
Not Before: May 28 16:05:33 2026 GMT
Not After : Aug 26 16:05:33 2026 GMT
Subject: CN=4a170a9c-5ec5-47d4-bb05-26766568ba9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:64:5e:b5:c0:fd:3b:f0:ac:16:52:3a:4c:c4:
1d:55:2b:ac:12:72:4e:ba:f4:35:a0:1d:aa:8b:ce:
c8:25:ed:63:eb:e5:3d:8b:72:ea:57:c2:1f:74:ea:
22:3d:74:1f:1d:d5:c4:0f:c0:ab:f1:87:51:85:19:
36:dd:58:3d:c6:e1:43:a8:cf:a9:f3:bf:54:81:62:
c6:a3:49:80:98:9b:70:d8:bd:5f:b9:24:3c:c7:e5:
d9:db:ba:0b:69:b3:04:e3:d4:09:37:c2:c5:de:d9:
56:c5:f5:e2:a8:c3:e1:c4:91:20:64:19:d2:38:8d:
1b:cb:5c:a2:3d:fb:c1:04:16:c2:2a:8b:41:a4:eb:
3e:c8:aa:bb:03:b4:39:23:c3:d2:96:db:4b:cf:e9:
83:4c:60:aa:66:5b:67:d6:8d:b7:2e:58:44:b8:03:
b3:c9:90:27:db:ac:a0:e6:70:b8:13:52:d2:7c:95:
94:cd:94:da:cd:75:f3:c4:15:45:e6:08:80:d0:ce:
9a:04:8e:de:e1:ac:6d:80:d7:57:90:ee:a3:8b:22:
13:cb:48:65:9d:a8:98:45:3e:fc:be:f8:7f:76:98:
bf:61:77:cd:dd:ff:74:26:19:83:0c:a7:29:f4:15:
3c:17:fe:37:f8:30:09:e0:06:10:27:23:5d:f1:9d:
19:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:0E:58:3B:74:04:D3:AD:B4:23:61:5A:A9:29:36:F5:11:E9:5A:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5ae2a426-39f0-3760-9377-592af0afb6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
X509v3 Authority Key Identifier:
keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:109:b000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c3:18:2d:86:b5:ff:05:00:30:8d:b9:fc:83:ba:f0:87:5d:0d:
54:8d:70:2d:9e:c5:39:8d:15:26:86:60:02:cc:3d:ed:32:a2:
68:d8:22:bc:71:d5:bf:77:52:63:12:ed:43:09:8f:9b:28:65:
6e:f4:b0:f3:31:1c:ba:11:02:99:ff:59:38:9d:65:a6:ed:65:
2b:ef:44:34:84:f2:d6:86:70:d0:46:67:a2:f4:98:26:07:1c:
29:3d:55:96:96:40:36:d4:86:e6:91:b1:e3:94:e4:56:41:89:
82:2b:e6:77:b1:a2:c5:41:aa:6c:61:9f:22:55:8a:fe:15:c1:
ea:83:0c:58:7b:7a:c1:87:aa:12:da:5d:20:59:16:90:b4:75:
1d:1e:44:fd:0d:3d:87:fc:b1:00:a9:35:ae:e4:fe:6a:eb:60:
5c:78:6c:28:40:ba:1e:01:c4:e6:da:9f:f6:99:35:64:f7:94:
f1:2e:8e:a7:d0:e3:76:b1:65:ac:fe:e4:62:fa:ce:72:6e:24:
a3:85:47:12:a6:04:50:ed:8a:e7:76:5d:47:1e:77:f5:98:b0:
e6:0a:bd:df:2a:1c:9f:09:16:a0:80:74:9b:7e:70:c4:67:75:
c1:2c:ff:14:43:c2:9c:eb:5a:41:9a:d5:0d:11:a1:aa:4e:c9:
60:d9:49:68
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE38McS3ZDct3V30WAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRkNTNkOWUtMzgyZC00ZjE2LWI5ZDQtMDgwNjdkNTk4
ZDgxMB4XDTI2MDUyODE2MDUzM1oXDTI2MDgyNjE2MDUzM1owLzEtMCsGA1UEAxMk
NGExNzBhOWMtNWVjNS00N2Q0LWJiMDUtMjY3NjY1NjhiYTliMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02RetcD9O/CsFlI6TMQdVSusEnJOuvQ1oB2q
i87IJe1j6+U9i3LqV8IfdOoiPXQfHdXED8Cr8YdRhRk23Vg9xuFDqM+p879UgWLG
o0mAmJtw2L1fuSQ8x+XZ27oLabME49QJN8LF3tlWxfXiqMPhxJEgZBnSOI0by1yi
PfvBBBbCKotBpOs+yKq7A7Q5I8PSlttLz+mDTGCqZltn1o23LlhEuAOzyZAn26yg
5nC4E1LSfJWUzZTazXXzxBVF5giA0M6aBI7e4axtgNdXkO6jiyITy0hlnaiYRT78
vvh/dpi/YXfN3f90JhmDDKcp9BU8F/43+DAJ4AYQJyNd8Z0ZnQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPMOWDt0BNOttCNhWqkpNvUR6VpIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGQ1
M2Q5ZS0zODJkLTRmMTYtYjlkNC0wODA2N2Q1OThkODEvNWFlMmE0MjYtMzlmMC0z
NzYwLTkzNzctNTkyYWYwYWZiNmNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNWRkNTNkOWUtMzgyZC00ZjE2LWI5
ZDQtMDgwNjdkNTk4ZDgxLzVkZDUzZDllLTM4MmQtNGYxNi1iOWQ0LTA4MDY3ZDU5
OGQ4MS5jcmwwHwYDVR0jBBgwFoAUjO0Z4oLcMQ2dpk83ULsDjVLj7i4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81ZGQ1M2Q5ZS0zODJkLTRmMTYtYjlkNC0wODA2
N2Q1OThkODEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJiABCbAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAMMYLYa1/wUAMI25/IO68IddDVSNcC2exTmNFSaGYALMPe0yomjY
Irxx1b93UmMS7UMJj5soZW70sPMxHLoRApn/WTidZabtZSvvRDSE8taGcNBGZ6L0
mCYHHCk9VZaWQDbUhuaRseOU5FZBiYIr5nexosVBqmxhnyJViv4VweqDDFh7esGH
qhLaXSBZFpC0dR0eRP0NPYf8sQCpNa7k/mrrYFx4bChAuh4BxOban/aZNWT3lPEu
jqfQ43axZaz+5GL6znJuJKOFRxKmBFDtiud2XUced/WYsOYKvd8qHJ8JFqCAdJt+
cMRndcEs/xRDwpzrWkGa1Q0RoapOyWDZSWg=
-----END CERTIFICATE-----
Generated at Sat Jun 13 20:29:44 2026 by rpki-client