
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa
File: 7af8c9c8-844f-3da2-9b51-762505ecd85d.roa (raw, json)
Hash identifier: kIsYLxymPDnTlwvLWmD7SMpperCjZS5gnh4/5GPhmXQ=
Subject key identifier: 36:65:40:45:CE:C2:BA:24:D4:60:24:36:38:6D:E3:52:B1:E3:90:DE
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584C8E3C362A3FD7AD9229D62EC0
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa
Signing time: Sat 17 Jan 2026 14:00:38 +0000
ROA not before: Sat 17 Jan 2026 14:00:38 +0000
ROA not after: Fri 17 Apr 2026 13:00:38 +0000
asID: 20253
IP address blocks: 2606:bc40:f103::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:8e:3c:36:2a:3f:d7:ad:92:29:d6:2e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Jan 17 14:00:38 2026 GMT
Not After : Apr 17 13:00:38 2026 GMT
Subject: CN=4b31afc0-16f9-4b99-b029-c6f3805279c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:89:8a:42:17:ea:23:56:a6:10:2a:a1:83:f5:
92:1e:12:27:0b:93:48:8c:40:2f:27:03:d9:f8:80:
c6:d3:1b:c7:35:c6:92:09:a9:94:de:d1:90:fe:60:
ba:ff:a0:02:af:93:1c:b0:03:d2:6c:17:53:3e:99:
b2:33:4f:f9:54:22:a3:56:02:93:69:ab:98:83:64:
7f:7a:2d:26:e3:a9:f6:1b:43:8a:87:04:0f:22:a7:
ef:bb:d3:69:36:1e:35:57:fd:71:8d:a9:05:a6:e6:
7f:b6:3f:6b:16:3e:36:19:ef:3a:a9:d1:7e:7b:d1:
f6:d0:98:f6:b1:c5:bf:ee:ee:58:22:52:4d:d9:7e:
c8:d1:69:19:de:39:78:5b:cc:ed:26:ca:6d:1d:45:
f3:cd:2c:0b:25:41:6a:11:59:aa:38:23:06:a7:a7:
5e:e8:49:3e:e8:6b:98:2d:6c:ce:40:61:d2:e2:2a:
16:a0:99:ef:7e:e8:85:d2:68:47:cb:ee:60:5c:93:
25:ac:b9:37:50:af:ba:92:4a:c6:04:7e:72:43:34:
ca:21:a1:80:a7:42:91:bb:ab:85:60:fc:3b:65:68:
57:1c:d0:ef:d5:86:af:77:35:ce:b0:bc:92:4c:3a:
07:d6:ed:cc:00:a2:fe:fb:a0:95:8c:12:6f:51:a3:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:65:40:45:CE:C2:BA:24:D4:60:24:36:38:6D:E3:52:B1:E3:90:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/7af8c9c8-844f-3da2-9b51-762505ecd85d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f103::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4f:aa:2b:fd:b5:72:48:f4:0c:87:7f:a8:f4:b8:24:9b:e6:1e:
c8:24:ec:5b:98:ad:b8:ec:d1:d1:93:8a:f0:e5:49:7e:39:bb:
53:5d:ff:19:f0:34:aa:8e:0b:d7:0e:ea:e7:77:e0:7b:58:cb:
92:7a:d3:bb:f7:d6:41:99:ff:de:71:44:0c:59:e0:0b:15:55:
0f:f1:e0:aa:15:1e:e8:4f:a2:07:34:f1:c1:58:b7:7b:0e:6d:
d2:71:6a:87:bc:51:da:70:f2:77:ee:fe:dd:12:68:84:57:fd:
4a:cd:bd:13:0d:fc:70:98:40:c8:74:84:75:a2:8a:95:f4:f1:
b2:ca:5b:64:db:7a:1a:ef:48:e4:c7:a9:2d:46:1d:09:34:bc:
81:f4:c5:de:aa:d5:a0:b1:32:d5:2e:5e:53:5d:c6:aa:50:bc:
e5:33:3c:8f:f1:70:3b:ad:f0:6d:25:f7:44:77:c1:51:67:cc:
16:b1:21:c6:cf:35:ec:36:e3:72:d6:1a:51:2f:82:d0:da:69:
b9:ae:31:d9:48:6b:77:60:6b:fb:1e:1e:a8:09:cf:17:c0:d6:
2f:88:6b:64:50:03:a7:6a:9d:1f:86:cb:dc:8a:69:a9:41:99:
a0:1f:ac:b3:39:50:97:93:f0:04:fd:e6:2b:c8:46:a2:23:3e:
28:6d:fd:bc
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyOPDYqP9etkinWLsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDExNzE0MDAzOFoXDTI2MDQxNzEzMDAzOFowLzEtMCsGA1UEAxMk
NGIzMWFmYzAtMTZmOS00Yjk5LWIwMjktYzZmMzgwNTI3OWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo4mKQhfqI1amECqhg/WSHhInC5NIjEAvJwPZ
+IDG0xvHNcaSCamU3tGQ/mC6/6ACr5McsAPSbBdTPpmyM0/5VCKjVgKTaauYg2R/
ei0m46n2G0OKhwQPIqfvu9NpNh41V/1xjakFpuZ/tj9rFj42Ge86qdF+e9H20Jj2
scW/7u5YIlJN2X7I0WkZ3jl4W8ztJsptHUXzzSwLJUFqEVmqOCMGp6de6Ek+6GuY
LWzOQGHS4ioWoJnvfuiF0mhHy+5gXJMlrLk3UK+6kkrGBH5yQzTKIaGAp0KRu6uF
YPw7ZWhXHNDv1YavdzXOsLySTDoH1u3MAKL++6CVjBJvUaNShQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDZlQEXOwrok1GAkNjht41Kx45DeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvN2FmOGM5YzgtODQ0Zi0z
ZGEyLTliNTEtNzYyNTA1ZWNkODVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QPED
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAE+qK/21ckj0DId/qPS4JJvmHsgk7FuYrbjs0dGTivDlSX45u1Nd
/xnwNKqOC9cO6ud34HtYy5J607v31kGZ/95xRAxZ4AsVVQ/x4KoVHuhPogc08cFY
t3sObdJxaoe8Udpw8nfu/t0SaIRX/UrNvRMN/HCYQMh0hHWiipX08bLKW2Tbehrv
SOTHqS1GHQk0vIH0xd6q1aCxMtUuXlNdxqpQvOUzPI/xcDut8G0l90R3wVFnzBax
IcbPNew243LWGlEvgtDaabmuMdlIa3dga/seHqgJzxfA1i+Ia2RQA6dqnR+Gy9yK
aalBmaAfrLM5UJeT8AT95ivIRqIjPiht/bw=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:04:30 2026 by rpki-client