
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/be9cf155-1465-3de2-b12b-4a1abb4438c3.roa
File: be9cf155-1465-3de2-b12b-4a1abb4438c3.roa (raw, json)
Hash identifier: usnHTLALr3n1FfbCs4q3ut3aHYXs+SvfzNFWtSqXptQ=
Subject key identifier: E2:7B:A2:0B:95:46:2E:D8:80:58:0D:5D:88:DC:68:5C:20:4B:62:6F
Certificate issuer: /CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Certificate serial: 010D0C9F4328584D59EA542A6074BDBA4110B840
Authority key identifier: 64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/be9cf155-1465-3de2-b12b-4a1abb4438c3.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 399728
IP address blocks: 2620:98:e000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:54:2a:60:74:bd:ba:41:10:b8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eda9035-7c9b-45a0-b98b-a45be535f082
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=dcbb4c0d-3093-47fa-9a7e-63c3bd284ebb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:53:67:65:9f:49:a5:eb:06:b7:89:7d:01:ce:
0d:dd:53:23:98:5b:f3:8c:5a:00:e5:07:56:0f:30:
08:5f:88:d7:44:30:24:a7:ac:4a:0d:80:1f:42:a2:
35:fe:44:5c:22:b6:77:1d:85:76:e1:a5:fb:39:a5:
29:71:50:8e:b4:b2:13:fb:d8:f8:a1:90:59:2a:f7:
25:1f:7e:01:4b:86:ce:86:ae:d2:e0:87:85:23:6d:
0a:c3:61:7a:04:7a:e9:4c:56:28:f2:3b:17:b1:5b:
97:cd:fa:41:c7:1b:b6:18:e1:ed:95:40:0b:64:16:
8e:fe:37:69:b9:4f:e2:4f:91:83:b1:b3:b5:66:ee:
21:c4:9a:b0:a7:2b:af:5d:81:e6:77:75:f2:74:56:
95:81:f5:14:bf:09:a9:83:8d:de:fc:12:8b:c2:26:
8f:ac:67:97:99:dc:1f:e5:a3:d0:24:00:67:98:0b:
c5:8a:5d:f0:87:ba:b9:1d:07:bb:57:51:44:5d:3f:
63:2f:6a:40:21:f5:e8:32:09:bf:ad:21:a6:6f:d9:
ea:e9:96:0e:f0:45:e0:8b:45:9e:23:b3:ac:66:f5:
0a:1a:38:ce:03:7a:8d:99:9a:46:27:87:fa:da:49:
82:f0:46:a2:dd:d5:48:77:1a:70:a4:8f:8b:69:57:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7B:A2:0B:95:46:2E:D8:80:58:0D:5D:88:DC:68:5C:20:4B:62:6F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/be9cf155-1465-3de2-b12b-4a1abb4438c3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082/8eda9035-7c9b-45a0-b98b-a45be535f082.crl
X509v3 Authority Key Identifier:
keyid:64:FD:D2:B4:D5:A9:0A:A0:F5:66:68:E4:2B:96:51:54:E7:7A:66:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8eda9035-7c9b-45a0-b98b-a45be535f082.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:98:e000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
61:9e:63:d1:2e:49:82:f9:9f:6c:03:20:c8:78:96:e8:15:89:
0c:2c:42:11:25:a3:b8:3b:72:4e:75:66:bf:d3:66:6d:74:cb:
58:35:45:05:a4:46:fc:7f:b8:a1:6c:e8:a1:fb:9b:04:79:59:
75:00:13:c5:9d:63:e5:7c:f3:9e:da:61:10:e1:9b:73:96:8f:
7b:bc:32:8f:2c:dd:37:a1:a0:a6:59:ff:12:d9:3b:fc:0d:fc:
58:15:a5:f8:4d:31:27:00:c6:99:85:d4:65:cd:6c:4e:ee:e0:
d5:23:61:ab:d7:37:de:67:79:14:1d:e1:9a:90:b7:9c:7d:5a:
a5:c3:c9:31:1a:ed:63:bf:52:14:df:23:90:b8:f3:bd:8a:c5:
ea:30:37:83:41:4d:e7:d9:f3:8d:a8:17:4c:11:32:77:20:50:
3d:e5:9b:da:0b:4a:a1:8f:14:78:99:8d:67:6b:42:31:0f:bb:
f9:53:0a:3b:2c:7e:d9:0f:6f:7b:be:85:15:af:19:63:1e:c5:
ed:89:78:6d:78:af:c6:73:03:cf:bc:19:5c:ed:e7:db:11:f5:
52:74:cb:92:1e:c9:89:e4:2f:e6:fc:71:06:77:81:0b:4d:75:
6b:de:13:64:4e:06:86:9c:f9:5e:4c:16:2e:5b:07:b2:fc:ad:
e3:03:89:1e
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1Z6lQqYHS9ukEQuEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVkYTkwMzUtN2M5Yi00NWEwLWI5OGItYTQ1YmU1MzVm
MDgyMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
ZGNiYjRjMGQtMzA5My00N2ZhLTlhN2UtNjNjM2JkMjg0ZWJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVNnZZ9JpesGt4l9Ac4N3VMjmFvzjFoA5QdW
DzAIX4jXRDAkp6xKDYAfQqI1/kRcIrZ3HYV24aX7OaUpcVCOtLIT+9j4oZBZKvcl
H34BS4bOhq7S4IeFI20Kw2F6BHrpTFYo8jsXsVuXzfpBxxu2GOHtlUALZBaO/jdp
uU/iT5GDsbO1Zu4hxJqwpyuvXYHmd3XydFaVgfUUvwmpg43e/BKLwiaPrGeXmdwf
5aPQJABnmAvFil3wh7q5HQe7V1FEXT9jL2pAIfXoMgm/rSGmb9nq6ZYO8EXgi0We
I7OsZvUKGjjOA3qNmZpGJ4f62kmC8Eai3dVIdxpwpI+LaVeqYwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOJ7oguVRi7YgFgNXYjcaFwgS2JvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRh
OTAzNS03YzliLTQ1YTAtYjk4Yi1hNDViZTUzNWYwODIvYmU5Y2YxNTUtMTQ2NS0z
ZGUyLWIxMmItNGExYWJiNDQzOGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGVkYTkwMzUtN2M5Yi00NWEwLWI5
OGItYTQ1YmU1MzVmMDgyLzhlZGE5MDM1LTdjOWItNDVhMC1iOThiLWE0NWJlNTM1
ZjA4Mi5jcmwwHwYDVR0jBBgwFoAUZP3StNWpCqD1ZmjkK5ZRVOd6ZnMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZWRhOTAzNS03YzliLTQ1YTAtYjk4Yi1hNDVi
ZTUzNWYwODIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAmOAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAGGeY9EuSYL5n2wDIMh4lugViQwsQhElo7g7ck51Zr/TZm10y1g1
RQWkRvx/uKFs6KH7mwR5WXUAE8WdY+V8857aYRDhm3OWj3u8Mo8s3TehoKZZ/xLZ
O/wN/FgVpfhNMScAxpmF1GXNbE7u4NUjYavXN95neRQd4ZqQt5x9WqXDyTEa7WO/
UhTfI5C4872KxeowN4NBTefZ842oF0wRMncgUD3lm9oLSqGPFHiZjWdrQjEPu/lT
CjssftkPb3u+hRWvGWMexe2JeG14r8ZzA8+8GVzt59sR9VJ0y5IeyYnkL+b8cQZ3
gQtNdWveE2ROBoac+V5MFi5bB7L8reMDiR4=
-----END CERTIFICATE-----
Generated at Fri Apr 17 17:53:05 2026 by rpki-client