
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa
File: dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa (raw, json)
Hash identifier: +FDmHrHJnn+1szKRnctyAG6AqW9bHvLKb3tqFFvEeMk=
Subject key identifier: EC:25:7F:F6:14:FF:8A:27:75:5B:68:C3:41:96:54:7E:CF:AC:F8:59
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584C6E217DB27E6F7BAF95FE1D00
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa
Signing time: Tue 06 Jan 2026 02:00:31 +0000
ROA not before: Tue 06 Jan 2026 02:00:31 +0000
ROA not after: Mon 06 Apr 2026 01:00:31 +0000
asID: 20253
IP address blocks: 2606:bc40:23::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:6e:21:7d:b2:7e:6f:7b:af:95:fe:1d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Jan 6 02:00:31 2026 GMT
Not After : Apr 6 01:00:31 2026 GMT
Subject: CN=8d22538d-ff56-4436-b57c-84c433293c4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b8:7a:78:98:ac:0a:3b:6c:f5:18:45:39:11:
c9:6b:0a:cb:8c:de:5e:9e:2a:b6:e4:ea:63:f4:d5:
16:e4:9a:92:86:3c:6e:84:70:41:d8:91:17:31:7e:
83:43:d1:f6:b8:0d:ce:c1:ef:de:14:88:b9:03:91:
8c:1b:5f:c0:9b:53:eb:dc:e6:25:87:c7:3b:49:cc:
52:90:4c:3d:a0:17:9b:0f:90:75:c1:a9:7b:8a:08:
60:3e:1a:ba:92:73:1d:00:74:84:8d:c8:24:24:71:
37:65:19:c9:92:c9:f5:5c:0a:bb:78:a2:fc:e0:19:
6e:f1:88:1f:6a:29:38:8a:7a:c8:3f:eb:b3:d1:1c:
7e:3b:46:55:b6:bc:f3:fc:be:d2:55:ca:0d:f1:a8:
27:b0:24:0f:a2:33:00:c2:0e:c2:24:d6:34:d9:4b:
06:77:94:be:30:3b:98:30:a8:a1:de:28:92:a1:4b:
f6:04:f6:d4:13:c6:d3:7b:e3:64:8f:df:b0:a7:fc:
03:a2:b6:d8:c0:03:b6:71:45:81:e2:26:c8:6f:24:
93:42:75:ba:f6:48:e1:33:c9:27:0c:06:d0:dd:45:
01:d0:ca:c4:e5:2c:c2:65:00:70:6d:7f:f5:77:45:
f3:cf:8f:99:2a:16:a1:0f:63:33:62:13:b8:ed:38:
d6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:25:7F:F6:14:FF:8A:27:75:5B:68:C3:41:96:54:7E:CF:AC:F8:59
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dbf5bff9-818a-3eaa-8a8f-cc27270151b1.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:23::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:17:0f:eb:37:06:c1:62:03:45:55:ac:6c:e6:29:6e:e0:db:
ba:f6:10:b2:88:31:65:22:2a:e6:f9:ff:63:a0:22:0b:ed:24:
b8:70:af:33:67:62:64:d9:9a:5b:b9:cb:16:3d:cf:52:de:6e:
26:7b:8f:4d:c4:df:c2:c2:17:1a:09:3a:9e:dd:9c:f1:1d:c0:
d7:b0:30:05:fe:a4:27:09:8f:6a:dc:16:4c:94:2f:f4:d9:33:
db:f3:4e:0f:3d:b7:0a:04:76:81:d8:b3:e0:65:55:b3:27:e1:
b3:d8:f8:db:c1:86:e4:f1:52:0b:3e:95:92:21:4d:8d:64:b4:
1d:a3:77:a4:08:d1:46:92:b8:30:39:70:ea:2b:84:91:dd:c8:
ce:8f:57:23:df:26:c5:10:80:c1:67:d9:6e:4f:e5:d5:13:1b:
46:3c:82:d7:12:4f:94:06:2f:86:61:0c:47:85:9c:59:49:78:
a7:00:d6:46:e3:f1:03:c0:e8:9f:d9:46:3a:c8:46:ca:a0:ab:
97:2d:30:f5:53:e8:0b:de:b9:78:d8:ec:d3:4d:d3:0d:8d:35:
28:d4:67:83:ce:16:f3:b5:cd:6e:83:37:82:9b:23:86:5c:9d:
03:3d:ce:ac:86:26:6f:38:65:21:c5:6c:38:1c:9e:cc:b6:f4:
b1:f6:66:df
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWExuIX2yfm97r5X+HQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDEwNjAyMDAzMVoXDTI2MDQwNjAxMDAzMVowLzEtMCsGA1UEAxMk
OGQyMjUzOGQtZmY1Ni00NDM2LWI1N2MtODRjNDMzMjkzYzRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7h6eJisCjts9RhFORHJawrLjN5eniq25Opj
9NUW5JqShjxuhHBB2JEXMX6DQ9H2uA3Owe/eFIi5A5GMG1/Am1Pr3OYlh8c7ScxS
kEw9oBebD5B1wal7ighgPhq6knMdAHSEjcgkJHE3ZRnJksn1XAq7eKL84Blu8Ygf
aik4inrIP+uz0Rx+O0ZVtrzz/L7SVcoN8agnsCQPojMAwg7CJNY02UsGd5S+MDuY
MKih3iiSoUv2BPbUE8bTe+Nkj9+wp/wDorbYwAO2cUWB4ibIbySTQnW69kjhM8kn
DAbQ3UUB0MrE5SzCZQBwbX/1d0Xzz4+ZKhahD2MzYhO47TjWOwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFOwlf/YU/4ondVtow0GWVH7PrPhZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGJmNWJmZjktODE4YS0z
ZWFhLThhOGYtY2MyNzI3MDE1MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QAAj
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIsXD+s3BsFiA0VVrGzmKW7g27r2ELKIMWUiKub5/2OgIgvtJLhw
rzNnYmTZmlu5yxY9z1LebiZ7j03E38LCFxoJOp7dnPEdwNewMAX+pCcJj2rcFkyU
L/TZM9vzTg89twoEdoHYs+BlVbMn4bPY+NvBhuTxUgs+lZIhTY1ktB2jd6QI0UaS
uDA5cOorhJHdyM6PVyPfJsUQgMFn2W5P5dUTG0Y8gtcST5QGL4ZhDEeFnFlJeKcA
1kbj8QPA6J/ZRjrIRsqgq5ctMPVT6AveuXjY7NNN0w2NNSjUZ4POFvO1zW6DN4Kb
I4ZcnQM9zqyGJm84ZSHFbDgcnsy29LH2Zt8=
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:06:29 2026 by rpki-client