
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa
File: e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa (raw, json)
Hash identifier: ggipuPNRMIW6i7OQGJnQWJCTM1U9MmQzJP6+o93Ktr4=
Subject key identifier: E1:73:E9:74:F1:D5:11:1F:88:3C:7E:F1:84:C2:58:1B:CF:BE:7F:5D
Certificate issuer: /CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Certificate serial: 010D0C9F4328584CCE71FA4BD398D097CB98F900
Authority key identifier: 3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa
Signing time: Mon 09 Feb 2026 14:00:39 +0000
ROA not before: Mon 09 Feb 2026 14:00:39 +0000
ROA not after: Sun 10 May 2026 13:00:39 +0000
asID: 8987
IP address blocks: 2602:f9e7:2c::/47 maxlen: 48
2602:f9e7:30::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ce:71:fa:4b:d3:98:d0:97:cb:98:f9:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ad0865e-7786-4c66-9f91-bc1f46f2c34f
Validity
Not Before: Feb 9 14:00:39 2026 GMT
Not After : May 10 13:00:39 2026 GMT
Subject: CN=6c5fd9b9-95be-4d03-a93a-39b7368bc0c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:64:e0:79:91:64:da:d3:b0:8d:42:77:f8:43:
9f:c1:91:bf:13:89:9e:2c:a2:16:17:46:8f:c7:ae:
cd:6b:f0:11:6f:6d:ad:d5:75:d8:4b:2a:d4:40:4b:
dd:bb:6a:96:3f:92:dd:df:7a:64:d3:4e:34:2c:a7:
2e:44:b9:9a:f0:f1:70:a0:b1:f5:44:25:36:85:5d:
a3:24:a4:56:c4:63:c9:36:b9:ff:85:8a:93:d4:38:
47:d1:91:5d:2b:a9:23:28:36:14:d9:8a:c7:e6:7b:
7b:f4:de:71:83:fa:8e:f3:f6:07:3d:55:ec:57:dc:
df:17:68:0f:47:75:3f:2b:b9:fc:aa:04:82:f8:70:
b7:4c:86:ce:67:eb:1f:60:cd:97:f2:5b:15:a5:6e:
28:d4:3b:1a:d4:f5:00:d0:5b:fb:08:f5:3c:c0:f7:
87:ab:7d:a7:ca:2b:d4:7b:fc:ad:6d:81:ed:02:c6:
8c:54:0b:f9:43:1c:79:d5:73:e4:34:e5:97:31:45:
50:bc:1a:9f:20:4b:ab:12:ec:1c:9b:f6:e9:32:2d:
05:ac:a2:e0:9d:b5:a4:85:6c:d8:9f:56:2b:0f:b1:
f2:c6:14:e3:9b:01:31:8e:46:63:82:40:ac:a2:5b:
0e:87:09:60:78:62:8c:01:63:22:24:f9:59:c4:07:
f8:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:73:E9:74:F1:D5:11:1F:88:3C:7E:F1:84:C2:58:1B:CF:BE:7F:5D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/e9d7dae5-ca36-3ddd-8d8c-f1be2ea052e6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.crl
X509v3 Authority Key Identifier:
keyid:3A:AF:94:EF:9A:DA:A0:89:89:87:5D:CA:E8:60:86:C9:40:E3:0D:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5ad0865e-7786-4c66-9f91-bc1f46f2c34f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9e7:2c::/47
2602:f9e7:30::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4d:5f:db:d3:d5:11:aa:b3:88:02:f1:89:f5:c9:ae:30:99:cf:
0e:ff:4a:dc:42:47:e5:32:b9:70:ff:f3:d2:40:f0:7c:8f:f7:
17:b0:4a:59:c2:40:b9:a2:3b:df:96:85:a3:78:54:08:ee:7b:
aa:77:f9:8e:07:5e:f2:d6:5b:27:08:83:2f:c4:62:ee:1f:01:
22:37:66:89:e3:7d:a2:a8:d4:ed:fe:e5:c7:60:6a:53:e0:db:
c6:a6:4a:99:81:41:dd:f1:2b:c8:12:54:b0:6b:ea:8a:fc:ef:
2b:aa:64:f2:3b:20:3a:87:d6:37:e9:20:08:fe:4c:dc:de:57:
1c:e0:02:2c:f5:a9:7d:d2:fe:fb:85:63:c5:9b:5a:89:38:85:
c4:12:38:37:85:83:c5:58:1d:fe:c9:ab:ef:6c:db:ae:f6:ac:
4a:cd:10:3b:88:1b:a7:da:86:ca:43:e1:97:69:a4:cc:5a:40:
66:b8:63:bb:40:f1:f9:34:6d:aa:fa:90:83:f1:5b:22:0e:39:
b9:e0:0a:e2:a2:8e:51:55:1c:75:54:f2:ac:c4:22:36:c5:a8:
5c:1d:f8:e7:92:49:57:96:73:26:4b:8c:30:23:4f:b6:e5:da:
f4:5c:d5:af:57:e9:fc:8a:ea:d1:60:46:63:e1:7c:e2:b7:9d:
cd:53:4b:41
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEzOcfpL05jQl8uY+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWFkMDg2NWUtNzc4Ni00YzY2LTlmOTEtYmMxZjQ2ZjJj
MzRmMB4XDTI2MDIwOTE0MDAzOVoXDTI2MDUxMDEzMDAzOVowLzEtMCsGA1UEAxMk
NmM1ZmQ5YjktOTViZS00ZDAzLWE5M2EtMzliNzM2OGJjMGM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mTgeZFk2tOwjUJ3+EOfwZG/E4meLKIWF0aP
x67Na/ARb22t1XXYSyrUQEvdu2qWP5Ld33pk0040LKcuRLma8PFwoLH1RCU2hV2j
JKRWxGPJNrn/hYqT1DhH0ZFdK6kjKDYU2YrH5nt79N5xg/qO8/YHPVXsV9zfF2gP
R3U/K7n8qgSC+HC3TIbOZ+sfYM2X8lsVpW4o1Dsa1PUA0Fv7CPU8wPeHq32nyivU
e/ytbYHtAsaMVAv5Qxx51XPkNOWXMUVQvBqfIEurEuwcm/bpMi0FrKLgnbWkhWzY
n1YrD7HyxhTjmwExjkZjgkCsolsOhwlgeGKMAWMiJPlZxAf4cQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFOFz6XTx1REfiDx+8YTCWBvPvn9dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQw
ODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFmNDZmMmMzNGYvZTlkN2RhZTUtY2EzNi0z
ZGRkLThkOGMtZjFiZTJlYTA1MmU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWFkMDg2NWUtNzc4Ni00YzY2LTlm
OTEtYmMxZjQ2ZjJjMzRmLzVhZDA4NjVlLTc3ODYtNGM2Ni05ZjkxLWJjMWY0NmYy
YzM0Zi5jcmwwHwYDVR0jBBgwFoAUOq+U75raoImJh13K6GCGyUDjDbgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81YWQwODY1ZS03Nzg2LTRjNjYtOWY5MS1iYzFm
NDZmMmMzNGYuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAAjASAwcBJgL55wAs
AwcDJgL55wAwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAE1f29PVEaqziALxifXJrjCZzw7/StxCR+UyuXD/
89JA8HyP9xewSlnCQLmiO9+WhaN4VAjue6p3+Y4HXvLWWycIgy/EYu4fASI3Zonj
faKo1O3+5cdgalPg28amSpmBQd3xK8gSVLBr6or87yuqZPI7IDqH1jfpIAj+TNze
VxzgAiz1qX3S/vuFY8WbWok4hcQSODeFg8VYHf7Jq+9s2672rErNEDuIG6fahspD
4ZdppMxaQGa4Y7tA8fk0bar6kIPxWyIOObngCuKijlFVHHVU8qzEIjbFqFwd+OeS
SVeWcyZLjDAjT7bl2vRc1a9X6fyK6tFgRmPhfOK3nc1TS0E=
-----END CERTIFICATE-----
Generated at Mon Mar 2 04:59:36 2026 by rpki-client