
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa
File: dd906173-242b-3137-a918-86b3c41a58d9.roa (raw, json)
Hash identifier: RryqJq8sVLi4IY7tjqIqjsjqFD1ypvBel1OKj21ETfM=
Subject key identifier: 29:C0:9A:B6:3E:9D:D5:CD:C9:81:D5:A9:AD:6C:15:85:7A:25:0C:72
Certificate issuer: /CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Certificate serial: 010D0C9F4328584CA32C7113E099B1FDC4D11680
Authority key identifier: AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa
Signing time: Sun 25 Jan 2026 02:00:31 +0000
ROA not before: Sun 25 Jan 2026 02:00:31 +0000
ROA not after: Sat 25 Apr 2026 01:00:31 +0000
asID: 20253
IP address blocks: 2606:bc40:f20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:a3:2c:71:13:e0:99:b1:fd:c4:d1:16:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9c12cf4e-517b-405e-bbe4-0198086f3a07
Validity
Not Before: Jan 25 02:00:31 2026 GMT
Not After : Apr 25 01:00:31 2026 GMT
Subject: CN=8cabbedf-a925-4e93-9244-ba72fcbca615
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:71:85:58:4e:ae:0f:d5:08:a1:6c:be:36:d6:
6a:d0:65:ae:7b:18:29:58:10:b4:c6:06:b4:8e:11:
a6:0e:d8:ed:d3:55:7c:f7:01:86:12:8f:24:0c:9d:
37:61:2d:c4:c9:e9:9f:82:3b:ec:5a:36:93:1e:45:
07:88:30:03:6a:72:fc:fe:d9:1d:83:29:45:12:70:
fb:f4:8b:be:26:67:e1:aa:ff:c1:13:aa:21:6f:f9:
6d:1d:56:f3:a5:ce:ac:ea:f0:66:11:d3:cb:f6:47:
99:6a:50:79:48:43:b6:0a:5d:e8:29:60:18:ef:77:
cf:96:f5:09:ed:ed:9e:8f:76:8a:33:a0:1e:9a:8c:
92:7c:de:45:4d:c2:71:d8:0f:28:12:eb:65:ca:fb:
f6:f6:1a:a5:07:39:58:a4:06:07:4d:b9:23:cf:5c:
83:a6:d4:54:5c:aa:ac:88:30:95:76:4b:56:d1:3f:
b4:d9:d4:92:88:63:9b:36:16:1a:87:75:bb:b1:52:
eb:4e:8c:47:e5:af:26:b6:ee:ab:a4:49:cc:1f:c2:
49:0a:23:e9:fb:d2:b6:de:63:e5:aa:1e:0c:f0:e0:
dd:9a:75:2a:a4:05:34:c8:fc:d0:b3:cc:c6:be:ac:
a3:70:59:ae:0b:4d:0b:0a:3e:ec:9b:b6:77:77:61:
a5:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:C0:9A:B6:3E:9D:D5:CD:C9:81:D5:A9:AD:6C:15:85:7A:25:0C:72
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/dd906173-242b-3137-a918-86b3c41a58d9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07/9c12cf4e-517b-405e-bbe4-0198086f3a07.crl
X509v3 Authority Key Identifier:
keyid:AD:B1:00:01:3E:A7:71:F4:6A:3D:65:46:F7:A0:D5:7B:E2:ED:23:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9c12cf4e-517b-405e-bbe4-0198086f3a07.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:bc40:f20::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b2:ab:76:93:b0:0d:58:27:6b:82:1a:36:3c:96:ee:4f:4b:b1:
b5:9a:7a:49:a7:fd:fe:7b:ab:c6:0b:5f:7f:fd:de:d5:c3:69:
4d:87:e4:eb:7d:65:48:6f:02:dd:7b:65:70:92:9b:8b:e2:e4:
e2:ea:83:1e:2b:df:68:b5:c1:ae:fd:cd:f5:d2:26:c8:e1:99:
64:aa:e6:37:b5:cb:f3:e8:24:a5:9e:b3:a8:0c:fe:bf:97:8f:
b2:d1:34:99:00:ed:0e:51:6a:c4:4e:20:64:24:21:6c:82:15:
10:33:1a:17:7a:ec:79:3f:98:21:dc:3b:64:3b:7a:b4:d3:f2:
36:ec:e2:4e:25:84:11:dc:0d:d7:86:bf:12:51:dd:62:f0:8c:
f9:c9:03:28:1b:94:93:0f:e2:b5:54:cf:4e:ad:37:a4:17:cc:
2d:ce:e2:75:ef:ee:e4:cd:8a:4e:a0:30:8a:99:9d:70:9a:05:
b2:95:aa:7c:03:11:40:16:d6:68:3c:b3:3a:85:3f:a0:fe:65:
74:5a:8f:23:4c:3f:89:73:ca:cd:ca:47:43:e5:da:42:a2:2c:
3a:44:68:f1:f2:f2:b0:e1:80:71:3d:6e:3f:f9:1c:53:ba:0a:
f4:11:f4:e5:c9:c6:44:f2:13:6b:45:bd:f8:34:e4:f7:fd:6e:
79:a9:1a:fa
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEyjLHET4Jmx/cTRFoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWMxMmNmNGUtNTE3Yi00MDVlLWJiZTQtMDE5ODA4NmYz
YTA3MB4XDTI2MDEyNTAyMDAzMVoXDTI2MDQyNTAxMDAzMVowLzEtMCsGA1UEAxMk
OGNhYmJlZGYtYTkyNS00ZTkzLTkyNDQtYmE3MmZjYmNhNjE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHGFWE6uD9UIoWy+NtZq0GWuexgpWBC0xga0
jhGmDtjt01V89wGGEo8kDJ03YS3EyemfgjvsWjaTHkUHiDADanL8/tkdgylFEnD7
9Iu+Jmfhqv/BE6ohb/ltHVbzpc6s6vBmEdPL9keZalB5SEO2Cl3oKWAY73fPlvUJ
7e2ej3aKM6AemoySfN5FTcJx2A8oEutlyvv29hqlBzlYpAYHTbkjz1yDptRUXKqs
iDCVdktW0T+02dSSiGObNhYah3W7sVLrToxH5a8mtu6rpEnMH8JJCiPp+9K23mPl
qh4M8ODdmnUqpAU0yPzQs8zGvqyjcFmuC00LCj7sm7Z3d2GlEwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCnAmrY+ndXNyYHVqa1sFYV6JQxyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85YzEy
Y2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4MDg2ZjNhMDcvZGQ5MDYxNzMtMjQyYi0z
MTM3LWE5MTgtODZiM2M0MWE1OGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWMxMmNmNGUtNTE3Yi00MDVlLWJi
ZTQtMDE5ODA4NmYzYTA3LzljMTJjZjRlLTUxN2ItNDA1ZS1iYmU0LTAxOTgwODZm
M2EwNy5jcmwwHwYDVR0jBBgwFoAUrbEAAT6ncfRqPWVG96DVe+LtIwgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85YzEyY2Y0ZS01MTdiLTQwNWUtYmJlNC0wMTk4
MDg2ZjNhMDcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJga8QA8g
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBALKrdpOwDVgna4IaNjyW7k9LsbWaekmn/f57q8YLX3/93tXDaU2H
5Ot9ZUhvAt17ZXCSm4vi5OLqgx4r32i1wa79zfXSJsjhmWSq5je1y/PoJKWes6gM
/r+Xj7LRNJkA7Q5RasROIGQkIWyCFRAzGhd67Hk/mCHcO2Q7erTT8jbs4k4lhBHc
DdeGvxJR3WLwjPnJAygblJMP4rVUz06tN6QXzC3O4nXv7uTNik6gMIqZnXCaBbKV
qnwDEUAW1mg8szqFP6D+ZXRajyNMP4lzys3KR0Pl2kKiLDpEaPHy8rDhgHE9bj/5
HFO6CvQR9OXJxkTyE2tFvfg05Pf9bnmpGvo=
-----END CERTIFICATE-----
Generated at Mon Mar 2 10:39:36 2026 by rpki-client