
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
File: f33be0ff-24c5-33cf-975f-4f33a85de390.roa (raw, json)
Hash identifier: RFU0jExJMTwHtcsZmCVqt4YRxPd9UwzFjuEeSXFEns0=
Subject key identifier: 5C:4F:34:8D:3B:D3:CF:F4:F5:1E:40:EA:02:90:65:83:48:4F:E1:B6
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584CFF4CD6089501093B1E929680
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
Signing time: Fri 27 Feb 2026 02:00:31 +0000
ROA not before: Fri 27 Feb 2026 02:00:31 +0000
ROA not after: Thu 28 May 2026 01:00:31 +0000
asID: 9009
IP address blocks: 2607:740:62::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ff:4c:d6:08:95:01:09:3b:1e:92:96:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Feb 27 02:00:31 2026 GMT
Not After : May 28 01:00:31 2026 GMT
Subject: CN=4f49b7de-a38f-4218-9443-b79335fca381
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b4:78:1e:5b:c0:a0:47:23:2d:18:2e:c7:32:
62:f2:4a:dd:b7:42:db:cb:fb:00:73:5c:79:74:fe:
68:73:02:b3:32:c1:96:d3:17:52:5c:b3:95:e7:db:
3e:f5:48:9a:04:ee:c7:0c:d7:94:88:af:87:14:ee:
e1:0b:2e:34:41:20:0a:56:1e:3e:9b:9b:9b:17:fc:
46:92:dc:2a:ea:2b:11:62:10:67:37:05:4e:c2:e1:
78:f5:d2:8f:2c:1a:66:80:f9:28:37:63:aa:53:66:
b7:a6:9a:af:2e:67:28:45:33:44:ce:9e:99:a1:3c:
3a:36:86:05:20:3b:21:9e:1b:e0:34:3b:75:53:61:
8c:63:5e:04:05:91:2f:db:ab:95:a7:6f:c4:24:cf:
e7:2f:56:fa:fa:70:55:a9:63:73:c0:5d:04:41:9b:
9d:2b:48:96:a8:bb:1d:35:eb:48:11:79:0a:e3:9e:
76:8c:f9:89:72:bc:02:1c:a5:d3:b0:a0:f7:bb:0a:
1e:6a:79:b4:67:1a:d9:73:fb:f5:29:83:b5:53:64:
02:bd:0e:64:ca:74:05:8d:4f:80:31:8e:8e:98:5b:
b1:00:0f:20:f7:f9:e1:49:87:e9:ab:d4:c5:26:3c:
69:6d:a8:88:9a:4e:5e:e4:6a:27:93:47:f4:24:c3:
50:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:4F:34:8D:3B:D3:CF:F4:F5:1E:40:EA:02:90:65:83:48:4F:E1:B6
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/f33be0ff-24c5-33cf-975f-4f33a85de390.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:62::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7f:bb:ad:e6:c5:47:80:65:ab:86:64:26:05:27:29:0f:03:c0:
99:59:b5:8d:5c:ed:49:7d:48:c6:c7:f3:94:64:65:06:24:62:
cb:e8:da:11:ff:37:b2:8c:1b:79:34:53:78:b9:4a:b3:98:8c:
35:ff:e8:6a:ad:44:49:a4:f2:3b:a7:f6:d7:03:96:79:f2:a6:
46:34:cc:7d:89:2f:0c:62:9a:6c:b1:ad:ed:82:cb:83:38:ec:
a8:61:3b:84:5f:80:c9:5f:14:7e:51:f6:aa:12:dd:0f:f4:b6:
37:70:07:2a:fd:ac:ab:fc:24:dc:ba:2c:b1:6c:8f:21:69:57:
f9:87:46:7b:08:a9:02:4a:7c:8d:eb:30:8e:54:1b:a4:25:c3:
13:6f:be:f3:bd:25:91:d8:bf:52:cf:be:c4:6c:7b:a7:73:6c:
d8:3f:e5:a1:c8:8b:fb:f9:1d:55:3f:ee:a9:44:d8:32:eb:2d:
fc:d4:0f:e7:b7:6b:92:18:fc:d2:87:9c:2b:62:4a:b8:1b:a6:
7a:d7:48:8a:e8:d6:0e:41:30:0b:50:f9:74:5c:aa:ec:f9:5c:
1e:8b:bf:d4:42:c0:f0:9b:3b:cd:22:78:bb:78:9c:30:3e:69:
f9:81:cf:dc:e6:c7:9e:13:61:80:d3:9c:9a:76:18:dd:72:4e:
86:71:c1:47
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz/TNYIlQEJOx6SloAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzVlOTllZWItOTBlMy00YTNlLWI4NjYtMzkyOTRiNDM3
ZDNkMB4XDTI2MDIyNzAyMDAzMVoXDTI2MDUyODAxMDAzMVowLzEtMCsGA1UEAxMk
NGY0OWI3ZGUtYTM4Zi00MjE4LTk0NDMtYjc5MzM1ZmNhMzgxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLR4HlvAoEcjLRguxzJi8krdt0Lby/sAc1x5
dP5ocwKzMsGW0xdSXLOV59s+9UiaBO7HDNeUiK+HFO7hCy40QSAKVh4+m5ubF/xG
ktwq6isRYhBnNwVOwuF49dKPLBpmgPkoN2OqU2a3ppqvLmcoRTNEzp6ZoTw6NoYF
IDshnhvgNDt1U2GMY14EBZEv26uVp2/EJM/nL1b6+nBVqWNzwF0EQZudK0iWqLsd
NetIEXkK4552jPmJcrwCHKXTsKD3uwoeanm0ZxrZc/v1KYO1U2QCvQ5kynQFjU+A
MY6OmFuxAA8g9/nhSYfpq9TFJjxpbaiImk5e5Gonk0f0JMNQtwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFxPNI0708/09R5A6gKQZYNIT+G2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5
OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5NGI0MzdkM2QvZjMzYmUwZmYtMjRjNS0z
M2NmLTk3NWYtNGYzM2E4NWRlMzkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMzVlOTllZWItOTBlMy00YTNlLWI4
NjYtMzkyOTRiNDM3ZDNkLzM1ZTk5ZWViLTkwZTMtNGEzZS1iODY2LTM5Mjk0YjQz
N2QzZC5jcmwwHwYDVR0jBBgwFoAU5VugAlf5YLwgW63Ks+7Q6icqmQcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8zNWU5OWVlYi05MGUzLTRhM2UtYjg2Ni0zOTI5
NGI0MzdkM2QuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgcHQABi
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAH+7rebFR4Blq4ZkJgUnKQ8DwJlZtY1c7Ul9SMbH85RkZQYkYsvo
2hH/N7KMG3k0U3i5SrOYjDX/6GqtREmk8jun9tcDlnnypkY0zH2JLwximmyxre2C
y4M47KhhO4RfgMlfFH5R9qoS3Q/0tjdwByr9rKv8JNy6LLFsjyFpV/mHRnsIqQJK
fI3rMI5UG6QlwxNvvvO9JZHYv1LPvsRse6dzbNg/5aHIi/v5HVU/7qlE2DLrLfzU
D+e3a5IY/NKHnCtiSrgbpnrXSIro1g5BMAtQ+XRcquz5XB6Lv9RCwPCbO80ieLt4
nDA+afmBz9zmx54TYYDTnJp2GN1yToZxwUc=
-----END CERTIFICATE-----
Generated at Sun Mar 1 23:02:03 2026 by rpki-client