
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa
File: 2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa (raw, json)
Hash identifier: rmMEchu2VKOHG7c0pJcwiNuUr91gG398Z9IlzK2eXoM=
Subject key identifier: B1:D7:C8:20:0B:A8:47:47:D9:B2:5A:11:01:EC:74:A5:2E:73:3E:BD
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584D4D5A75ACEF04476448BBAD80
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 20253
IP address blocks: 2606:bc40:201::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:75:ac:ef:04:47:64:48:bb:ad:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=4c46a695-0946-434f-8abd-f6db84696235
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:49:1d:8b:b3:ca:b5:2d:e9:fe:65:56:db:c8:
53:db:54:2c:68:cd:4b:e4:95:da:72:73:59:3a:9a:
5f:9f:92:3e:6f:4d:ff:a2:5f:e1:f9:58:4d:13:58:
75:ac:f4:f2:2a:c4:76:47:fb:4b:d2:5d:bb:e7:7b:
7b:1d:d6:1f:27:b5:28:7b:bf:c3:c6:82:c1:dc:c8:
80:d6:eb:44:f9:49:74:97:62:47:7c:58:86:2d:2f:
ce:de:59:c1:4c:4a:54:5e:b4:f1:de:f7:9b:9f:72:
a9:a8:d5:47:c7:a5:e7:61:de:cc:ee:f3:99:24:a6:
fe:18:ad:f9:c7:5b:ef:0f:73:99:d4:74:c8:e5:80:
26:86:87:be:6a:ee:fe:73:5c:18:ab:28:73:47:e8:
2f:f5:be:97:7b:aa:43:1f:5a:7d:85:85:9f:50:f0:
5b:3e:bb:89:e2:6a:b2:e1:5e:56:13:f4:04:1f:b1:
d0:73:df:e0:b4:79:79:38:45:b2:02:bb:f8:96:e5:
a3:e5:76:fe:3a:10:09:fc:2e:03:6e:d7:44:a0:03:
cb:5d:16:26:df:3d:53:2a:dc:1c:e0:58:1d:2e:3e:
58:34:55:71:80:ef:4b:47:d4:90:7d:07:36:c6:95:
18:7d:da:d6:33:e0:01:62:a3:f2:3b:07:8e:f0:24:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D7:C8:20:0B:A8:47:47:D9:B2:5A:11:01:EC:74:A5:2E:73:3E:BD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/2d4c0f88-b589-3e00-aa9d-3cd6f52fe79a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:201::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:d2:8c:1a:b8:e9:1e:87:53:c3:e0:f5:de:b5:09:d1:13:91:
c5:55:ac:64:44:52:d5:e6:28:a3:cc:c7:ba:0e:ca:41:2d:7d:
94:31:28:6a:50:2f:5f:9e:8f:1f:cb:08:91:df:d0:84:ef:54:
89:de:db:19:09:91:49:2b:58:46:b2:a8:e9:6e:49:9e:91:40:
10:22:dc:f1:d0:c0:63:d1:43:2b:2f:a6:ba:7b:f8:f8:8c:60:
ce:96:00:f5:01:6d:e1:3d:5b:d8:73:34:86:be:04:86:20:4f:
f1:47:f0:03:40:d7:8a:0a:61:d8:f7:ea:68:b9:63:a5:9d:35:
67:20:a6:8e:cf:cf:14:56:95:61:f2:44:26:4a:b9:57:fa:c3:
b2:ce:22:bb:fd:22:b7:ce:2a:e4:70:3d:21:5d:25:59:cd:cd:
b0:b5:cc:c2:75:3f:d0:c9:af:8d:1d:ff:5b:b9:5c:6c:ce:a1:
6b:69:28:86:84:7d:42:22:e2:6e:8f:ce:22:5e:9c:88:8d:38:
2e:b1:7c:12:83:38:a9:df:be:a2:3c:20:55:7c:9d:26:d4:f6:
11:b0:1c:c8:af:94:50:b0:88:14:17:b2:02:c3:89:e8:43:55:
23:26:82:27:08:1e:36:ba:f0:8b:09:b7:0d:93:53:1b:03:53:
46:e3:41:cf
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1NWnWs7wRHZEi7rYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDMyNzAxMDAzMVoXDTI2MDYyNTAxMDAzMVowLzEtMCsGA1UEAxMk
NGM0NmE2OTUtMDk0Ni00MzRmLThhYmQtZjZkYjg0Njk2MjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi0kdi7PKtS3p/mVW28hT21QsaM1L5JXacnNZ
Oppfn5I+b03/ol/h+VhNE1h1rPTyKsR2R/tL0l2753t7HdYfJ7Uoe7/DxoLB3MiA
1utE+Ul0l2JHfFiGLS/O3lnBTEpUXrTx3vebn3KpqNVHx6XnYd7M7vOZJKb+GK35
x1vvD3OZ1HTI5YAmhoe+au7+c1wYqyhzR+gv9b6Xe6pDH1p9hYWfUPBbPruJ4mqy
4V5WE/QEH7HQc9/gtHl5OEWyArv4luWj5Xb+OhAJ/C4DbtdEoAPLXRYm3z1TKtwc
4FgdLj5YNFVxgO9LR9SQfQc2xpUYfdrWM+ABYqPyOweO8CTkdwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFLHXyCALqEdH2bJaEQHsdKUucz69MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvMmQ0YzBmODgtYjU4OS0z
ZTAwLWFhOWQtM2NkNmY1MmZlNzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAIB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACnSjBq46R6HU8Pg9d61CdETkcVVrGREUtXmKKPMx7oOykEtfZQx
KGpQL1+ejx/LCJHf0ITvVIne2xkJkUkrWEayqOluSZ6RQBAi3PHQwGPRQysvprp7
+PiMYM6WAPUBbeE9W9hzNIa+BIYgT/FH8ANA14oKYdj36mi5Y6WdNWcgpo7PzxRW
lWHyRCZKuVf6w7LOIrv9IrfOKuRwPSFdJVnNzbC1zMJ1P9DJr40d/1u5XGzOoWtp
KIaEfUIi4m6PziJenIiNOC6xfBKDOKnfvqI8IFV8nSbU9hGwHMivlFCwiBQXsgLD
iehDVSMmgicIHja68IsJtw2TUxsDU0bjQc8=
-----END CERTIFICATE-----
Generated at Fri Apr 17 16:32:42 2026 by rpki-client