
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa
File: 497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa (raw, json)
Hash identifier: DiRRfrPSys0NlUfypfugZehZEW+up5UjrxH5SIAUMds=
Subject key identifier: 60:E1:36:8B:64:31:44:F9:B6:6F:22:AF:56:47:62:10:08:21:64:BB
Certificate issuer: /CN=865141a9-b215-47ce-b5f4-0c09bdeaba89
Certificate serial: 010D0C9F4328584F4974DFF693439964C63B08C0
Authority key identifier: EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 20473
IP address blocks: 2604:28e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 29 Sep 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:df:f6:93:43:99:64:c6:3b:08:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=865141a9-b215-47ce-b5f4-0c09bdeaba89
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=b881b077-0162-42f7-8f61-411d42c67770
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:3f:f1:49:dc:53:1d:50:87:3a:aa:42:13:27:
7c:69:61:3a:2d:34:2a:c6:a9:12:52:76:8a:3e:b7:
fb:f6:8e:83:41:09:e1:5b:2e:65:a9:94:12:34:2e:
93:90:ff:d3:22:59:0f:b9:0b:a0:b0:0b:8c:43:2e:
9a:48:e3:06:31:dc:99:fc:c3:36:75:ce:00:8a:b8:
58:24:76:76:42:2b:31:c5:21:80:2d:ec:95:2d:8f:
cd:41:e2:37:83:ff:cc:dc:8b:2b:90:64:0f:5e:f3:
67:8e:e5:c7:69:00:17:46:a8:ba:21:43:1d:32:06:
ad:5d:88:13:cb:65:7c:12:3b:c9:a4:c2:af:21:93:
d3:0d:cc:26:53:bc:6b:57:5e:e0:7c:c0:aa:29:e0:
40:db:f0:39:30:fd:ba:5d:14:86:d0:5d:c6:02:6d:
18:2a:64:06:ee:e1:f3:fa:b3:af:c9:52:9c:b3:72:
f0:87:80:8a:06:a1:26:cf:33:5a:d0:11:77:3f:a4:
89:a6:8b:16:a9:91:99:e8:2a:ef:1b:91:d1:72:ff:
ee:76:ff:49:ee:45:42:1a:f7:ac:81:27:a4:c8:d5:
1c:78:5b:f5:15:0c:26:90:df:87:31:6f:89:00:ac:
bb:3f:3a:f2:80:fd:8f:08:f8:a2:b9:70:02:ab:1d:
dc:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:E1:36:8B:64:31:44:F9:B6:6F:22:AF:56:47:62:10:08:21:64:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/497874de-9d28-39e0-8ffe-69cba0dcf6d1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89/865141a9-b215-47ce-b5f4-0c09bdeaba89.crl
X509v3 Authority Key Identifier:
keyid:EC:FB:9E:9B:A9:F8:FF:84:73:A2:2B:01:26:69:32:AA:F2:4D:67:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/865141a9-b215-47ce-b5f4-0c09bdeaba89.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:28e0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
59:13:52:af:35:9f:f0:07:c5:b3:6e:df:46:04:b3:8a:d2:a9:
0c:c0:3b:1f:93:3a:5d:1b:7a:b2:ad:ce:2c:ad:c9:08:00:d9:
69:3e:5e:24:42:80:7e:d5:d9:ac:79:0a:3d:84:10:47:06:a0:
76:2a:43:ca:b9:97:99:14:30:04:04:ad:7f:a3:b4:92:74:b9:
1e:d4:62:dc:a7:1c:07:49:35:bf:b8:1c:27:65:15:4d:9c:5f:
bd:2c:cf:27:0b:28:4e:ba:4a:ce:3b:95:d5:66:b9:f4:fc:33:
c6:0c:36:0f:87:11:76:04:54:cd:25:9b:11:2a:7f:90:17:5e:
61:09:92:8e:5c:0e:f3:32:86:17:c3:28:95:67:0c:5c:0b:7a:
30:ed:46:b2:70:bd:53:7f:37:86:b5:d2:80:ff:c6:5a:98:4d:
5b:2e:54:a4:11:a4:32:d6:c8:2f:43:1c:6a:3a:6f:f5:4f:99:
82:12:2f:d7:9b:fb:1c:e0:3f:ad:24:d2:df:7d:cd:2c:d8:a3:
2a:3f:4d:1e:d4:91:51:8e:25:7b:97:ea:5d:9c:b6:a5:3d:b0:
43:ed:80:f1:1c:8c:3b:c8:70:33:12:15:cb:92:b5:fb:53:a5:
63:f9:56:54:00:d2:8f:57:e0:14:8c:89:14:1f:7a:b2:ed:60:
d2:23:e9:12
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE9JdN/2k0OZZMY7CMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODY1MTQxYTktYjIxNS00N2NlLWI1ZjQtMGMwOWJkZWFi
YTg5MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
Yjg4MWIwNzctMDE2Mi00MmY3LThmNjEtNDExZDQyYzY3NzcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlT/xSdxTHVCHOqpCEyd8aWE6LTQqxqkSUnaK
Prf79o6DQQnhWy5lqZQSNC6TkP/TIlkPuQugsAuMQy6aSOMGMdyZ/MM2dc4AirhY
JHZ2QisxxSGALeyVLY/NQeI3g//M3IsrkGQPXvNnjuXHaQAXRqi6IUMdMgatXYgT
y2V8EjvJpMKvIZPTDcwmU7xrV17gfMCqKeBA2/A5MP26XRSG0F3GAm0YKmQG7uHz
+rOvyVKcs3Lwh4CKBqEmzzNa0BF3P6SJposWqZGZ6CrvG5HRcv/udv9J7kVCGves
gSekyNUceFv1FQwmkN+HMW+JAKy7PzrygP2PCPiiuXACqx3cdwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFGDhNotkMUT5tm8ir1ZHYhAIIWS7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi84NjUx
NDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5YmRlYWJhODkvNDk3ODc0ZGUtOWQyOC0z
OWUwLThmZmUtNjljYmEwZGNmNmQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvODY1MTQxYTktYjIxNS00N2NlLWI1
ZjQtMGMwOWJkZWFiYTg5Lzg2NTE0MWE5LWIyMTUtNDdjZS1iNWY0LTBjMDliZGVh
YmE4OS5jcmwwHwYDVR0jBBgwFoAU7Puem6n4/4RzoisBJmkyqvJNZ+owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi84NjUxNDFhOS1iMjE1LTQ3Y2UtYjVmNC0wYzA5
YmRlYWJhODkuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgQo4DBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBZE1KvNZ/wB8Wzbt9GBLOK0qkMwDsfkzpdG3qyrc4srckIANlpPl4k
QoB+1dmseQo9hBBHBqB2KkPKuZeZFDAEBK1/o7SSdLke1GLcpxwHSTW/uBwnZRVN
nF+9LM8nCyhOukrOO5XVZrn0/DPGDDYPhxF2BFTNJZsRKn+QF15hCZKOXA7zMoYX
wyiVZwxcC3ow7UaycL1TfzeGtdKA/8ZamE1bLlSkEaQy1sgvQxxqOm/1T5mCEi/X
m/sc4D+tJNLffc0s2KMqP00e1JFRjiV7l+pdnLalPbBD7YDxHIw7yHAzEhXLkrX7
U6Vj+VZUANKPV+AUjIkUH3qy7WDSI+kS
-----END CERTIFICATE-----
Generated at Mon Sep 28 19:51:42 2026 by rpki-client