
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa
File: 519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa (raw, json)
Hash identifier: dWqoC3jHtIGxffjQ6VObGG8NEBzF8WccRmQnTjawcsY=
Subject key identifier: 9E:BE:0B:CF:4E:EB:A9:72:C1:19:0E:AE:38:4D:2B:0F:77:63:BA:52
Certificate issuer: /CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
Certificate serial: 010D0C9F4328584EA79428B2277A6F27053CA880
Authority key identifier: 45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 399844
IP address blocks: 2620:68:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:94:28:b2:27:7a:6f:27:05:3c:a8:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95a39d1-400d-423a-89c4-37f7f1a145f2
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=67ca0de6-4c9c-430b-bf76-431afab09b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d3:5f:3b:51:23:2f:40:9e:34:01:b0:5b:69:
9a:ec:eb:6c:20:dd:49:ae:53:8f:99:55:6c:e5:5b:
2e:0d:e5:1a:72:97:8c:f0:27:3e:1c:ca:a1:d1:59:
bf:f8:b8:79:83:25:ac:51:78:0b:bc:86:8f:0a:1b:
cd:de:37:06:fc:c7:7b:e1:ee:51:9d:f2:94:50:23:
2c:66:2f:97:86:45:1c:27:70:30:7a:83:4b:f9:8a:
9e:4d:aa:f2:75:95:bb:f1:0c:19:c8:fd:9d:d9:64:
92:7f:0c:3e:48:bc:42:00:a4:86:fe:8d:9c:47:63:
cf:22:0e:25:40:3a:13:f9:67:78:68:aa:f6:02:ea:
c3:53:22:72:01:2e:17:51:dc:b3:ff:42:cf:a7:96:
e1:58:63:9b:92:a7:a9:d4:e7:41:f5:b1:12:e8:81:
0d:3f:d2:7f:36:72:75:85:ec:e3:23:a9:8f:9f:50:
38:10:97:19:00:ac:9e:25:7d:cf:24:3e:74:f3:fe:
3b:6e:c8:f0:77:11:a2:84:3d:b4:c3:71:8f:d1:22:
80:e6:d8:91:ea:b0:c1:e5:0b:ad:23:8c:f7:58:3d:
40:cf:e1:60:e0:c4:7e:ae:b6:cd:55:92:97:db:ff:
14:c2:e4:bb:6f:90:b9:6c:72:93:2a:f1:8c:3f:af:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:BE:0B:CF:4E:EB:A9:72:C1:19:0E:AE:38:4D:2B:0F:77:63:BA:52
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/519ed1cf-da7c-3f80-abd1-d8e4ad9d8789.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2/f95a39d1-400d-423a-89c4-37f7f1a145f2.crl
X509v3 Authority Key Identifier:
keyid:45:8E:89:B4:32:05:8D:58:19:8A:7F:23:01:4B:F6:1F:1D:CD:44:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f95a39d1-400d-423a-89c4-37f7f1a145f2.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:68:2000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
23:c2:88:cb:4c:4f:e0:10:8b:30:04:de:91:fa:d2:14:91:b6:
58:6b:2c:e6:9d:33:a8:de:a9:a6:e3:0f:bc:72:4d:50:95:7c:
35:39:a1:5c:f8:86:39:42:93:e8:cc:ea:61:63:cb:10:fa:25:
7a:41:e5:6c:74:d7:66:97:12:74:2b:a2:68:bf:c6:c5:31:0b:
8f:f5:88:b3:00:7e:9d:67:fd:fc:41:c7:4a:1d:dd:07:15:8e:
ca:8f:56:9a:e8:70:e3:2a:85:19:b6:74:1f:8e:1e:ef:31:ea:
35:96:c1:01:21:a2:c8:76:bd:05:11:b1:3d:9d:5a:95:23:03:
ec:83:11:36:ac:76:08:ce:03:3b:72:7c:a8:3d:c8:88:ae:ec:
59:b4:13:c6:50:5e:bb:e2:eb:a0:3f:87:45:29:40:d9:33:2e:
f8:5a:09:c6:9b:d8:56:d3:21:d7:1c:2d:3b:1c:77:66:5a:a2:
bd:c8:a9:5a:df:58:41:6e:af:13:58:03:db:4d:7c:63:16:07:
df:98:7d:d7:41:eb:59:45:e1:ef:a6:d1:61:b8:06:4e:73:12:
09:59:b7:3f:b6:d0:4a:8d:28:33:8a:97:6d:d6:56:0c:fa:58:
a4:b1:8d:91:3d:9f:d7:80:ec:01:7f:42:9a:49:39:44:f1:da:
18:fa:67:08
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6nlCiyJ3pvJwU8qIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1YTM5ZDEtNDAwZC00MjNhLTg5YzQtMzdmN2YxYTE0
NWYyMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
NjdjYTBkZTYtNGM5Yy00MzBiLWJmNzYtNDMxYWZhYjA5YjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNNfO1EjL0CeNAGwW2ma7OtsIN1JrlOPmVVs
5VsuDeUacpeM8Cc+HMqh0Vm/+Lh5gyWsUXgLvIaPChvN3jcG/Md74e5RnfKUUCMs
Zi+XhkUcJ3AweoNL+YqeTarydZW78QwZyP2d2WSSfww+SLxCAKSG/o2cR2PPIg4l
QDoT+Wd4aKr2AurDUyJyAS4XUdyz/0LPp5bhWGObkqep1OdB9bES6IENP9J/NnJ1
hezjI6mPn1A4EJcZAKyeJX3PJD508/47bsjwdxGihD20w3GP0SKA5tiR6rDB5Qut
I4z3WD1Az+Fg4MR+rrbNVZKX2/8UwuS7b5C5bHKTKvGMP6/HywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJ6+C89O66lywRkOrjhNKw93Y7pSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVh
MzlkMS00MDBkLTQyM2EtODljNC0zN2Y3ZjFhMTQ1ZjIvNTE5ZWQxY2YtZGE3Yy0z
ZjgwLWFiZDEtZDhlNGFkOWQ4Nzg5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1YTM5ZDEtNDAwZC00MjNhLTg5
YzQtMzdmN2YxYTE0NWYyL2Y5NWEzOWQxLTQwMGQtNDIzYS04OWM0LTM3ZjdmMWEx
NDVmMi5jcmwwHwYDVR0jBBgwFoAURY6JtDIFjVgZin8jAUv2Hx3NRHUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTVhMzlkMS00MDBkLTQyM2EtODljNC0zN2Y3
ZjFhMTQ1ZjIuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAaCAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACPCiMtMT+AQizAE3pH60hSRtlhrLOadM6jeqabjD7xyTVCVfDU5
oVz4hjlCk+jM6mFjyxD6JXpB5Wx012aXEnQromi/xsUxC4/1iLMAfp1n/fxBx0od
3QcVjsqPVprocOMqhRm2dB+OHu8x6jWWwQEhosh2vQURsT2dWpUjA+yDETasdgjO
AztyfKg9yIiu7Fm0E8ZQXrvi66A/h0UpQNkzLvhaCcab2FbTIdccLTscd2Zaor3I
qVrfWEFurxNYA9tNfGMWB9+YfddB61lF4e+m0WG4Bk5zEglZtz+20EqNKDOKl23W
Vgz6WKSxjZE9n9eA7AF/QppJOUTx2hj6Zwg=
-----END CERTIFICATE-----
Generated at Wed Jul 29 08:17:31 2026 by rpki-client