
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa
File: 9a44da26-443b-3b94-bfa2-f0caa697019f.roa (raw, json)
Hash identifier: vS8SsweLiwgcpOJ+qj+fT8VFqkV1u0p0UiARuuVJuEQ=
Subject key identifier: 42:3C:C7:32:97:BE:3C:2E:30:6E:72:B7:B1:82:8C:AA:6E:65:35:37
Certificate issuer: /CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
Certificate serial: 010D0C9F4328584CD99CD83413E61FB7F5E23F00
Authority key identifier: ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa
Signing time: Fri 13 Feb 2026 14:00:41 +0000
ROA not before: Fri 13 Feb 2026 14:00:41 +0000
ROA not after: Thu 14 May 2026 13:00:41 +0000
asID: 19415
IP address blocks: 2602:f9d3::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:d9:9c:d8:34:13:e6:1f:b7:f5:e2:3f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5
Validity
Not Before: Feb 13 14:00:41 2026 GMT
Not After : May 14 13:00:41 2026 GMT
Subject: CN=33a971a7-dca2-4c0d-ae61-4ace3c0d04b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:01:19:24:53:12:4f:2a:f7:46:1a:e8:01:da:
35:73:fe:e3:d9:50:66:69:67:78:fa:04:73:3a:5d:
12:f9:c7:77:3d:f5:36:17:62:ab:b5:0d:a3:e1:d0:
b9:ae:86:9f:68:73:d5:94:62:0d:e9:c8:0f:93:d3:
43:b6:a8:1a:b3:31:9b:be:e2:09:eb:3e:d1:1a:23:
8a:6f:17:82:12:27:69:48:68:27:dd:6e:ed:7b:a9:
71:88:c1:9f:59:f2:a6:b8:29:b3:95:40:f7:63:3f:
76:2e:4a:f5:d7:d6:c3:12:fe:41:15:ca:40:84:16:
01:9e:40:58:4c:fa:bb:b8:13:ce:31:9c:94:ed:ac:
ae:a4:53:35:90:14:13:ef:22:28:c0:e9:3e:0f:cb:
ae:72:33:92:f5:a5:d9:64:a9:c8:fc:cb:33:57:bc:
6e:64:23:35:71:d7:b3:81:e8:8f:51:a6:f4:7c:67:
20:09:a9:c1:6d:70:9e:75:c2:2b:fb:d0:81:bd:ee:
5c:74:c4:7e:73:1d:b6:66:c9:73:98:cd:88:51:8b:
dd:52:df:c2:c8:fb:b5:85:b0:60:fa:79:99:05:9f:
30:fd:30:44:2c:ab:a7:8e:de:19:ba:54:92:69:3c:
1d:db:2e:b7:b3:d9:48:a6:3d:dd:f6:a3:99:d4:0c:
c2:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:3C:C7:32:97:BE:3C:2E:30:6E:72:B7:B1:82:8C:AA:6E:65:35:37
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/9a44da26-443b-3b94-bfa2-f0caa697019f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.crl
X509v3 Authority Key Identifier:
keyid:ED:7E:CD:7E:EF:AE:EC:A6:4C:F5:ED:B0:44:CA:C4:02:FD:DA:43:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8f6b23b1-c197-4db2-b4d4-a81adcd6f0e5.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9d3::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
32:27:2c:d1:3a:bd:4f:5f:d4:ef:09:85:42:82:bb:6b:76:0b:
17:cd:dd:74:55:2f:d6:d4:76:97:ec:34:27:76:e4:cf:20:e8:
c4:87:7c:9c:0e:e1:53:2b:0d:b8:f2:c1:5b:74:ec:d1:59:04:
44:12:f0:23:61:0d:cc:1d:59:bb:25:61:b4:22:81:b2:84:bf:
0c:fd:e3:9d:00:21:74:09:ff:c8:cf:21:1f:3a:cb:c8:b2:63:
cd:51:4e:0d:52:f6:53:b1:ff:8f:94:e0:0b:2c:70:96:9e:be:
1f:20:0a:6b:bb:bd:f9:99:a8:6b:d0:ca:cc:15:b2:a3:8e:cd:
48:df:51:b1:91:bd:ec:cd:99:6d:3c:7c:0d:0d:99:44:c4:ab:
85:14:ee:df:77:68:18:c9:54:e0:98:d1:e9:f4:fe:81:fe:17:
27:0b:1d:43:1a:82:14:0f:a3:eb:4b:17:a7:48:5a:ec:28:29:
27:97:1d:b0:72:cd:94:6d:2c:7b:8b:9d:2e:83:45:88:d3:e8:
41:43:c9:a2:66:91:6d:fd:90:6f:64:bd:b6:cf:17:9c:99:d6:
f1:3d:6f:02:eb:2a:49:da:00:1a:16:fb:7f:00:9b:3a:55:d9:
68:64:38:27:de:47:c1:bd:2e:a4:d4:26:ef:0e:6e:89:c2:cf:
8c:02:65:71
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWEzZnNg0E+Yft/XiPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGY2YjIzYjEtYzE5Ny00ZGIyLWI0ZDQtYTgxYWRjZDZm
MGU1MB4XDTI2MDIxMzE0MDA0MVoXDTI2MDUxNDEzMDA0MVowLzEtMCsGA1UEAxMk
MzNhOTcxYTctZGNhMi00YzBkLWFlNjEtNGFjZTNjMGQwNGIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwgEZJFMSTyr3RhroAdo1c/7j2VBmaWd4+gRz
Ol0S+cd3PfU2F2KrtQ2j4dC5roafaHPVlGIN6cgPk9NDtqgaszGbvuIJ6z7RGiOK
bxeCEidpSGgn3W7te6lxiMGfWfKmuCmzlUD3Yz92Lkr119bDEv5BFcpAhBYBnkBY
TPq7uBPOMZyU7ayupFM1kBQT7yIowOk+D8uucjOS9aXZZKnI/MszV7xuZCM1cdez
geiPUab0fGcgCanBbXCedcIr+9CBve5cdMR+cx22ZslzmM2IUYvdUt/CyPu1hbBg
+nmZBZ8w/TBELKunjt4ZulSSaTwd2y63s9lIpj3d9qOZ1AzCEQIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFEI8xzKXvjwuMG5yt7GCjKpuZTU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZi
MjNiMS1jMTk3LTRkYjItYjRkNC1hODFhZGNkNmYwZTUvOWE0NGRhMjYtNDQzYi0z
Yjk0LWJmYTItZjBjYWE2OTcwMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOGY2YjIzYjEtYzE5Ny00ZGIyLWI0
ZDQtYTgxYWRjZDZmMGU1LzhmNmIyM2IxLWMxOTctNGRiMi1iNGQ0LWE4MWFkY2Q2
ZjBlNS5jcmwwHwYDVR0jBBgwFoAU7X7Nfu+u7KZM9e2wRMrEAv3aQ8EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy84ZjZiMjNiMS1jMTk3LTRkYjItYjRkNC1hODFh
ZGNkNmYwZTUuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL50wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAMics0Tq9T1/U7wmFQoK7a3YLF83ddFUv1tR2l+w0J3bkzyDoxId8
nA7hUysNuPLBW3Ts0VkERBLwI2ENzB1ZuyVhtCKBsoS/DP3jnQAhdAn/yM8hHzrL
yLJjzVFODVL2U7H/j5TgCyxwlp6+HyAKa7u9+Zmoa9DKzBWyo47NSN9RsZG97M2Z
bTx8DQ2ZRMSrhRTu33doGMlU4JjR6fT+gf4XJwsdQxqCFA+j60sXp0ha7CgpJ5cd
sHLNlG0se4udLoNFiNPoQUPJomaRbf2Qb2S9ts8XnJnW8T1vAusqSdoAGhb7fwCb
OlXZaGQ4J95Hwb0upNQm7w5uicLPjAJlcQ==
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:22:32 2026 by rpki-client