
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa
File: 5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa (raw, json)
Hash identifier: TV+/XLfml5ql44rSPryResNfg/tdfJODiPfOQpSH5ZY=
Subject key identifier: 5C:AA:65:E4:FC:39:2B:DA:50:F3:11:9E:35:C1:6F:86:DD:5F:84:C7
Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial: 010D0C9F4328584F5E62AF79FD0EB2B548CCF820
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa
Signing time: Fri 02 Oct 2026 13:00:13 +0000
ROA not before: Fri 02 Oct 2026 13:00:13 +0000
ROA not after: Thu 31 Dec 2026 14:00:13 +0000
asID: 5744
IP address blocks: 2610:20:5011::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:5e:62:af:79:fd:0e:b2:b5:48:cc:f8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
Validity
Not Before: Oct 2 13:00:13 2026 GMT
Not After : Dec 31 14:00:13 2026 GMT
Subject: CN=c9b0d96b-5cc1-4cb3-a588-43238cb9cfe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:4c:9a:2f:e5:fc:ff:ab:1e:8b:72:83:70:e8:
7b:14:8f:a6:cf:14:78:f2:41:ee:f0:b0:27:20:23:
fe:ec:77:34:93:9d:bb:51:35:96:5d:08:6d:26:62:
15:ab:ef:11:f9:52:d6:6e:86:c7:1c:24:d7:68:49:
56:d3:01:49:ec:18:05:fe:2f:55:50:b2:fe:18:37:
e1:6d:39:37:d3:a6:fb:b9:06:6a:dc:64:ce:9e:20:
89:63:6c:73:8d:8c:c0:78:d2:2f:f8:e9:1d:95:c1:
b8:f4:15:29:3e:69:ba:0c:b7:c1:9c:de:61:dc:68:
3a:cb:3e:46:7c:8c:b2:e4:f9:27:46:8c:2b:cd:d7:
99:32:9c:b9:fa:0f:f2:96:9f:d9:08:91:b9:c6:cc:
2b:48:c6:eb:a5:ac:57:b0:20:0f:e1:f1:f0:9a:77:
bc:65:0b:53:c2:7c:8e:30:59:c1:83:22:ac:f1:2e:
d5:e4:2d:59:8a:d8:2d:a1:cb:b7:27:b0:46:a1:4b:
6d:8e:f2:41:cf:45:b9:1c:20:7e:0e:f2:cd:f4:6b:
65:cf:e1:d7:45:42:1e:51:65:a1:f7:1e:3c:d6:68:
3b:66:47:c5:1f:08:57:1a:8b:b2:88:7a:fa:a4:85:
be:d0:ac:4d:bd:56:b8:13:aa:0d:11:c3:f3:4f:d9:
a2:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:AA:65:E4:FC:39:2B:DA:50:F3:11:9E:35:C1:6F:86:DD:5F:84:C7
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/5a5f0437-5aec-387b-aa4c-0992a33b5a94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
X509v3 Authority Key Identifier:
keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:5011::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
22:8e:10:54:5c:a5:a1:a9:4c:f2:a0:80:64:7a:4a:f0:9e:c1:
7b:3d:18:91:28:c7:1b:ae:f0:fd:1e:fa:04:73:16:be:9c:32:
4d:6f:70:e1:20:42:a4:2d:2e:0d:e8:01:ae:75:79:18:b6:20:
38:a5:1b:62:90:4c:0e:e3:65:d1:d0:4c:2d:c6:b2:6b:1f:fa:
5d:15:44:78:44:8c:ac:28:81:52:e3:dc:a6:1f:31:89:60:92:
42:23:3f:1d:bc:5d:55:97:05:29:58:22:26:e6:b7:2c:30:13:
4f:ab:f9:28:bc:84:8c:4b:16:b4:7c:bd:e0:96:5a:06:f7:57:
60:87:73:b3:e2:6f:81:fa:99:e0:38:47:74:6a:be:cc:2e:f6:
2c:3d:d6:6d:6e:dd:7d:0a:37:78:45:92:41:57:26:53:6e:d7:
5c:3e:7c:ee:33:41:82:e1:69:81:c3:3e:28:2d:a3:84:11:55:
66:f4:99:a1:8c:6e:c8:f2:42:b7:09:8c:b0:ec:09:60:dc:ed:
ab:35:11:c4:fc:c7:39:3e:87:85:7c:54:97:7d:1e:8e:8a:01:
0b:c4:ca:da:36:12:b6:4c:87:70:f6:fb:62:bb:d1:32:0d:26:
ba:65:2a:c1:7c:55:6d:58:b5:44:56:bc:33:0e:90:8d:c1:fb:
9d:d8:1c:73
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9eYq95/Q6ytUjM+CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzA2ZDRmMDAtZmE4OS00YjIyLTg2ODQtYjk2OGQ1Nzdm
YWI3MB4XDTI2MTAwMjEzMDAxM1oXDTI2MTIzMTE0MDAxM1owLzEtMCsGA1UEAxMk
YzliMGQ5NmItNWNjMS00Y2IzLWE1ODgtNDMyMzhjYjljZmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0yaL+X8/6sei3KDcOh7FI+mzxR48kHu8LAn
ICP+7Hc0k527UTWWXQhtJmIVq+8R+VLWbobHHCTXaElW0wFJ7BgF/i9VULL+GDfh
bTk306b7uQZq3GTOniCJY2xzjYzAeNIv+OkdlcG49BUpPmm6DLfBnN5h3Gg6yz5G
fIyy5PknRowrzdeZMpy5+g/ylp/ZCJG5xswrSMbrpaxXsCAP4fHwmne8ZQtTwnyO
MFnBgyKs8S7V5C1Zitgtocu3J7BGoUttjvJBz0W5HCB+DvLN9Gtlz+HXRUIeUWWh
9x481mg7ZkfFHwhXGouyiHr6pIW+0KxNvVa4E6oNEcPzT9mi1QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFFyqZeT8OSvaUPMRnjXBb4bdX4THMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZk
NGYwMC1mYTg5LTRiMjItODY4NC1iOTY4ZDU3N2ZhYjcvNWE1ZjA0MzctNWFlYy0z
ODdiLWFhNGMtMDk5MmEzM2I1YTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNzA2ZDRmMDAtZmE4OS00YjIyLTg2
ODQtYjk2OGQ1NzdmYWI3LzcwNmQ0ZjAwLWZhODktNGIyMi04Njg0LWI5NjhkNTc3
ZmFiNy5jcmwwHwYDVR0jBBgwFoAUKM0iEnwvGdgbZE9UHxIn+yLJ5AUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy83MDZkNGYwMC1mYTg5LTRiMjItODY4NC1iOTY4
ZDU3N2ZhYjcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJhAAIFAR
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBACKOEFRcpaGpTPKggGR6SvCewXs9GJEoxxuu8P0e+gRzFr6cMk1v
cOEgQqQtLg3oAa51eRi2IDilG2KQTA7jZdHQTC3Gsmsf+l0VRHhEjKwogVLj3KYf
MYlgkkIjPx28XVWXBSlYIibmtywwE0+r+Si8hIxLFrR8veCWWgb3V2CHc7Pib4H6
meA4R3Rqvswu9iw91m1u3X0KN3hFkkFXJlNu11w+fO4zQYLhaYHDPigto4QRVWb0
maGMbsjyQrcJjLDsCWDc7as1EcT8xzk+h4V8VJd9Ho6KAQvEyto2ErZMh3D2+2K7
0TINJrplKsF8VW1YtURWvDMOkI3B+53YHHM=
-----END CERTIFICATE-----
Generated at Sun Oct 11 22:31:47 2026 by rpki-client