
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa
File: 30adc210-0124-3859-98d4-f0e66af7da0a.roa (raw, json)
Hash identifier: ynKiGlUmO/L6vXyd/0ygaIUFC0qOIMcOZ6VRVOAMK3U=
Subject key identifier: C6:8F:45:77:BF:C3:E6:39:6B:2E:16:36:7B:6D:75:C3:5F:DC:B1:50
Certificate issuer: /CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Certificate serial: 010D0C9F4328584D7A05285CFBF68BCD5B14D280
Authority key identifier: 8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 1225
IP address blocks: 2001:418:0:7000::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:28:5c:fb:f6:8b:cd:5b:14:d2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b433f23f-334b-4db9-9fe1-bef76714d97f
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=fba8a2ae-d0b4-4bae-ae48-b7815ac17e5e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:b5:ed:cf:f7:39:3d:38:02:7f:ec:53:fe:3d:
7f:ea:38:09:54:35:bb:cd:78:a2:f5:b2:47:5c:d3:
f0:90:a9:54:30:5f:e1:dd:a8:60:3b:63:ee:3b:09:
1b:c4:ee:95:96:57:78:23:ec:cb:06:a9:83:46:e2:
6f:d5:0d:96:a2:08:db:d3:15:0d:c3:b7:d7:92:fd:
c0:7e:91:7e:66:5c:5f:7e:e4:b6:fa:52:25:f8:ee:
7e:49:17:c9:05:a3:8c:39:57:a5:ce:f7:78:f5:e7:
98:fe:7b:54:88:bd:b9:80:51:96:39:08:7d:3f:e2:
bd:75:c3:99:72:1a:42:b5:db:06:32:db:29:07:e5:
11:a5:d4:58:6a:3b:42:ce:c4:34:c1:59:57:23:26:
86:93:1d:6d:15:18:03:49:cf:2b:2c:28:62:f7:94:
bb:46:02:01:7b:8d:ca:0d:b0:4b:06:cd:50:cf:0d:
ad:ed:6a:b8:a1:ba:a7:c6:77:12:c3:5a:7b:20:84:
87:3a:b8:6d:10:f6:52:fa:54:54:08:44:75:ba:21:
a1:ed:4c:30:89:f5:8f:0f:a5:ee:7c:7d:12:47:c9:
b7:6b:22:24:0f:b4:10:65:56:3e:4b:18:03:7c:c0:
68:05:f1:29:c5:ca:61:85:ad:70:ae:f5:b3:7b:5e:
01:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:8F:45:77:BF:C3:E6:39:6B:2E:16:36:7B:6D:75:C3:5F:DC:B1:50
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/30adc210-0124-3859-98d4-f0e66af7da0a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f/b433f23f-334b-4db9-9fe1-bef76714d97f.crl
X509v3 Authority Key Identifier:
keyid:8C:AB:5D:C7:32:C2:D8:F3:E5:93:61:6A:EE:B8:B5:20:B2:F9:13:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b433f23f-334b-4db9-9fe1-bef76714d97f.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:418:0:7000::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
54:cc:ff:ef:97:9b:6e:4d:09:2d:18:30:34:67:89:29:14:00:
40:25:d6:43:85:8a:2a:ab:2a:0a:bd:35:ed:ce:8e:d7:98:dc:
48:ba:be:c0:3a:ce:cf:05:88:0a:17:c3:2e:da:91:ad:2b:4d:
f5:16:a0:fb:30:0f:b5:fc:bb:8f:88:07:de:d6:58:42:70:db:
49:97:92:2b:2e:8d:71:b1:89:7e:64:b0:3d:b5:90:1d:a9:cf:
27:e6:31:41:c2:12:e6:9e:9e:f3:4a:92:0f:0c:f7:e7:2b:28:
f2:bc:45:66:b8:fa:33:95:ad:6b:cb:e0:6c:70:c3:b1:f1:b2:
17:63:98:8a:d4:7b:8a:77:a4:fd:37:63:4e:76:c2:30:96:28:
f7:a5:69:e6:d6:f4:19:a9:f0:b1:79:fc:3e:c6:06:7d:39:ec:
54:6e:d0:09:d0:89:17:c6:58:62:ac:5d:c6:70:f8:d9:0c:2b:
60:a7:09:c3:51:40:d6:58:33:af:f1:01:57:01:8b:b3:29:a1:
88:34:e8:48:4b:6c:4f:b8:b7:16:da:0f:f4:6b:a1:50:54:59:
6c:a0:6a:e0:8b:91:c4:44:69:ff:77:69:3b:58:9e:d4:0e:d5:
ae:11:54:a8:ab:6c:df:66:50:fb:8d:64:22:60:93:7b:a7:b1:
a2:e8:fa:64
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE16BShc+/aLzVsU0oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQzM2YyM2YtMzM0Yi00ZGI5LTlmZTEtYmVmNzY3MTRk
OTdmMB4XDTI2MDQxMjAxMDAyNFoXDTI2MDcxMTAxMDAyNFowLzEtMCsGA1UEAxMk
ZmJhOGEyYWUtZDBiNC00YmFlLWFlNDgtYjc4MTVhYzE3ZTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjbXtz/c5PTgCf+xT/j1/6jgJVDW7zXii9bJH
XNPwkKlUMF/h3ahgO2PuOwkbxO6Vlld4I+zLBqmDRuJv1Q2Wogjb0xUNw7fXkv3A
fpF+ZlxffuS2+lIl+O5+SRfJBaOMOVelzvd49eeY/ntUiL25gFGWOQh9P+K9dcOZ
chpCtdsGMtspB+URpdRYajtCzsQ0wVlXIyaGkx1tFRgDSc8rLChi95S7RgIBe43K
DbBLBs1Qzw2t7Wq4obqnxncSw1p7IISHOrhtEPZS+lRUCER1uiGh7UwwifWPD6Xu
fH0SR8m3ayIkD7QQZVY+SxgDfMBoBfEpxcphha1wrvWze14BVwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFMaPRXe/w+Y5ay4WNnttdcNf3LFQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMz
ZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3NjcxNGQ5N2YvMzBhZGMyMTAtMDEyNC0z
ODU5LTk4ZDQtZjBlNjZhZjdkYTBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjQzM2YyM2YtMzM0Yi00ZGI5LTlm
ZTEtYmVmNzY3MTRkOTdmL2I0MzNmMjNmLTMzNGItNGRiOS05ZmUxLWJlZjc2NzE0
ZDk3Zi5jcmwwHwYDVR0jBBgwFoAUjKtdxzLC2PPlk2Fq7ri1ILL5E7owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iNDMzZjIzZi0zMzRiLTRkYjktOWZlMS1iZWY3
NjcxNGQ5N2YuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAIAEEGAAA
cAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAVMz/75ebbk0JLRgwNGeJKRQAQCXWQ4WKKqsqCr017c6O15jc
SLq+wDrOzwWIChfDLtqRrStN9Rag+zAPtfy7j4gH3tZYQnDbSZeSKy6NcbGJfmSw
PbWQHanPJ+YxQcIS5p6e80qSDwz35yso8rxFZrj6M5Wta8vgbHDDsfGyF2OYitR7
inek/TdjTnbCMJYo96Vp5tb0GanwsXn8PsYGfTnsVG7QCdCJF8ZYYqxdxnD42Qwr
YKcJw1FA1lgzr/EBVwGLsymhiDToSEtsT7i3FtoP9GuhUFRZbKBq4IuRxERp/3dp
O1ie1A7VrhFUqKts32ZQ+41kImCTe6exouj6ZA==
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:47:58 2026 by rpki-client