
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa
File: cee35c70-6697-3a13-b65e-c14e4a0fe342.roa (raw, json)
Hash identifier: FWCbr52DAH0YcrseGB/+12PxPIZtlAblUIMJCQjFzKM=
Subject key identifier: 0F:EF:3F:D2:95:31:7E:83:63:B5:C2:6E:7F:47:46:49:41:93:53:92
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584C99673CDE9F48C90E4C7298A0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa
Signing time: Wed 21 Jan 2026 14:00:38 +0000
ROA not before: Wed 21 Jan 2026 14:00:38 +0000
ROA not after: Tue 21 Apr 2026 13:00:38 +0000
asID: 46925
IP address blocks: 2607:f750:7100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:99:67:3c:de:9f:48:c9:0e:4c:72:98:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Jan 21 14:00:38 2026 GMT
Not After : Apr 21 13:00:38 2026 GMT
Subject: CN=3d4bbb1b-1baf-47bd-961e-7d8efb73c950
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:85:68:1d:80:40:46:27:ca:cb:4c:2c:59:
1f:39:03:a0:49:61:0a:c0:46:17:8a:b3:15:d5:2b:
c7:57:5a:d0:d6:61:fa:7f:c9:1c:d9:ef:31:6c:3b:
b6:4f:49:ad:48:8c:1e:9d:5b:ff:dc:e0:7b:bc:90:
6f:e2:d2:71:39:fe:ad:dd:39:62:8c:af:e5:b9:c1:
95:e9:87:54:66:ce:bd:b5:30:c8:49:ce:8e:70:63:
db:63:8e:7b:d0:e8:97:77:6b:7b:dc:e4:5b:2d:a1:
c7:30:6f:3b:67:6d:90:c0:59:61:a8:ac:0e:1c:68:
a6:b8:34:80:38:a2:04:01:d3:e6:7a:f1:68:53:6b:
e2:29:c5:73:c1:a7:46:e4:f1:2b:91:29:2b:45:37:
ed:e2:c6:32:ef:8c:cb:2e:22:24:f1:89:1a:f5:0e:
5d:05:f7:1e:f0:d0:bb:08:c3:de:e7:07:a5:96:12:
9c:e1:47:97:79:e8:6b:00:4b:a9:54:c5:92:c2:24:
55:ab:fb:b6:bd:7a:46:87:e6:d2:e9:e1:85:e1:6b:
55:ff:8b:d5:31:af:9f:fd:8f:f7:65:27:ba:a2:c9:
08:66:8c:ba:cc:77:4c:eb:b8:36:0d:39:88:88:84:
15:7b:01:6e:c6:35:dc:af:6e:ca:49:77:a4:9c:91:
12:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:EF:3F:D2:95:31:7E:83:63:B5:C2:6E:7F:47:46:49:41:93:53:92
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/cee35c70-6697-3a13-b65e-c14e4a0fe342.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f750:7100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:37:91:85:e0:d3:e2:ee:1e:2e:98:72:35:cc:30:c9:e7:7c:
d0:d2:1e:f7:43:06:91:4a:04:3f:e7:6a:3b:6e:27:38:20:2b:
7d:c5:99:eb:30:d6:dd:6e:4b:fb:f9:ab:10:e2:15:1f:70:da:
1f:60:63:11:55:33:9e:ba:ed:ca:71:fa:07:19:83:d1:ae:3f:
5a:3c:aa:26:a7:eb:81:e1:8c:12:df:14:53:ec:a0:f0:a5:05:
12:0d:34:d7:cc:ff:96:35:9a:03:79:c0:56:44:5c:49:73:94:
7f:cb:1d:a1:4c:bc:97:76:00:e9:d5:7d:5d:66:3e:e8:38:bd:
2f:bf:a0:04:b9:83:2d:14:1d:4b:94:37:79:e2:6d:1f:ad:f9:
0b:47:cb:52:68:8d:cd:9d:9c:bf:fe:c9:cd:59:62:d1:36:72:
6e:60:79:11:49:29:f5:68:d9:5f:fe:85:e4:91:5b:1d:9e:31:
55:91:0f:18:89:86:4c:13:f5:14:62:2b:e7:70:a4:df:47:d8:
bd:2e:33:ae:3a:59:1d:09:60:d1:90:d5:69:73:e1:ff:01:1c:
ab:c6:df:13:4e:15:28:62:d1:02:3c:fa:b8:24:e3:2b:7c:4e:
bd:17:29:d2:6d:51:16:29:99:a9:e9:d2:34:ef:29:2f:ef:25:
9b:90:fa:28
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEyZZzzen0jJDkxymKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg3OTA3ZDktZWRkNC00MzcwLTk2ODYtN2I0YWY3ZDBm
ZTJhMB4XDTI2MDEyMTE0MDAzOFoXDTI2MDQyMTEzMDAzOFowLzEtMCsGA1UEAxMk
M2Q0YmJiMWItMWJhZi00N2JkLTk2MWUtN2Q4ZWZiNzNjOTUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS2FaB2AQEYnystMLFkfOQOgSWEKwEYXirMV
1SvHV1rQ1mH6f8kc2e8xbDu2T0mtSIwenVv/3OB7vJBv4tJxOf6t3TlijK/lucGV
6YdUZs69tTDISc6OcGPbY4570OiXd2t73ORbLaHHMG87Z22QwFlhqKwOHGimuDSA
OKIEAdPmevFoU2viKcVzwadG5PErkSkrRTft4sYy74zLLiIk8Yka9Q5dBfce8NC7
CMPe5wellhKc4UeXeehrAEupVMWSwiRVq/u2vXpGh+bS6eGF4WtV/4vVMa+f/Y/3
ZSe6oskIZoy6zHdM67g2DTmIiIQVewFuxjXcr27KSXeknJES8wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFA/vP9KVMX6DY7XCbn9HRklBk1OSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5
MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRhZjdkMGZlMmEvY2VlMzVjNzAtNjY5Ny0z
YTEzLWI2NWUtYzE0ZTRhMGZlMzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYjg3OTA3ZDktZWRkNC00MzcwLTk2
ODYtN2I0YWY3ZDBmZTJhL2I4NzkwN2Q5LWVkZDQtNDM3MC05Njg2LTdiNGFmN2Qw
ZmUyYS5jcmwwHwYDVR0jBBgwFoAUSeuontRyxdkVdL3IoQaqOX35i9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9iODc5MDdkOS1lZGQ0LTQzNzAtOTY4Ni03YjRh
ZjdkMGZlMmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgf3UHEw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAEzeRheDT4u4eLphyNcwwyed80NIe90MGkUoEP+dqO24nOCArfcWZ
6zDW3W5L+/mrEOIVH3DaH2BjEVUznrrtynH6BxmD0a4/WjyqJqfrgeGMEt8UU+yg
8KUFEg0018z/ljWaA3nAVkRcSXOUf8sdoUy8l3YA6dV9XWY+6Di9L7+gBLmDLRQd
S5Q3eeJtH635C0fLUmiNzZ2cv/7JzVli0TZybmB5EUkp9WjZX/6F5JFbHZ4xVZEP
GImGTBP1FGIr53Ck30fYvS4zrjpZHQlg0ZDVaXPh/wEcq8bfE04VKGLRAjz6uCTj
K3xOvRcp0m1RFimZqenSNO8pL+8lm5D6KA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 07:45:48 2026 by rpki-client