
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
File: a26963c2-c1dd-33b2-942d-0b6b92224b05.roa (raw, json)
Hash identifier: 7iYK9SSDRVFX0/Y23uv7RXCKyuXZsSG0HYaTKHUxY2s=
Subject key identifier: 75:F8:6A:06:EA:25:27:9F:4C:BB:55:EF:B3:86:E5:49:38:A6:8B:4E
Certificate issuer: /CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Certificate serial: 010D0C9F4328584F2EED13F74C00CC5F8FC81AB0
Authority key identifier: 35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
Signing time: Tue 15 Sep 2026 13:00:12 +0000
ROA not before: Tue 15 Sep 2026 13:00:12 +0000
ROA not after: Mon 14 Dec 2026 14:00:12 +0000
asID: 16509
IP address blocks: 2631:2000::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2e:ed:13:f7:4c:00:cc:5f:8f:c8:1a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7fd25a2-3041-431d-a6a9-c409b42835a1
Validity
Not Before: Sep 15 13:00:12 2026 GMT
Not After : Dec 14 14:00:12 2026 GMT
Subject: CN=3d6d785d-22e9-4b4d-8870-271795157a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:69:bf:11:bc:48:92:1c:a5:96:ab:90:ae:1e:
25:ef:b2:1b:5f:65:0e:7c:ee:d5:51:88:a2:a6:be:
b4:2b:02:ae:97:18:f5:be:f1:41:47:96:ab:a0:58:
8b:20:e1:89:d2:30:95:69:09:6b:44:f8:de:f8:33:
bc:df:b4:f4:93:ec:04:35:c0:33:37:4e:cd:95:23:
7e:23:e4:ee:65:9b:cb:33:55:09:b6:2a:9b:2b:01:
1d:d4:65:fa:26:7e:08:c4:d8:8a:0a:49:5c:50:46:
b7:39:33:0a:c5:4c:61:29:58:01:de:5b:db:a1:ca:
25:dc:33:9b:24:c0:9d:40:f3:b1:1d:df:fa:b6:24:
8b:db:6e:aa:e0:49:63:5a:79:1b:4e:ac:ed:e5:98:
90:3b:58:24:e4:88:5b:6d:57:ac:24:b1:7f:59:d3:
b0:33:e2:92:82:d8:4a:33:79:bb:d2:2e:76:00:bb:
3e:b5:a5:13:29:3e:c6:32:00:46:3a:37:06:73:71:
c8:34:38:6f:a5:3d:92:75:ee:c9:ae:ac:e6:de:d2:
26:38:e6:01:da:9f:30:7a:b8:6d:96:75:e8:ac:a8:
0d:18:d7:7e:aa:9a:f2:19:77:b2:91:b0:7d:f1:90:
1a:3a:d4:24:7c:3b:74:54:c6:30:18:73:6d:83:4d:
ed:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:F8:6A:06:EA:25:27:9F:4C:BB:55:EF:B3:86:E5:49:38:A6:8B:4E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/a26963c2-c1dd-33b2-942d-0b6b92224b05.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1/c7fd25a2-3041-431d-a6a9-c409b42835a1.crl
X509v3 Authority Key Identifier:
keyid:35:71:0A:C3:D7:71:79:A1:73:83:DE:67:0A:48:A8:E0:20:EF:E8:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c7fd25a2-3041-431d-a6a9-c409b42835a1.cer
sbgp-ipAddrBlock: critical
IPv6:
2631:2000::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
38:ba:ed:51:d9:c1:f9:e8:13:82:c1:4c:bc:fe:28:e5:07:94:
3e:1c:a9:92:af:3b:5c:63:fa:6c:31:65:41:af:93:32:e6:02:
92:9b:b3:56:a3:cf:c7:66:cd:6a:6a:39:a5:64:80:3c:75:98:
d4:10:59:e6:a6:1b:05:72:19:ac:ec:87:ef:49:88:69:7a:b4:
2b:57:1d:bb:82:62:74:ed:6f:aa:0f:02:07:cc:af:48:77:b4:
12:9a:dd:5a:bb:43:74:4e:75:48:80:6d:d0:79:99:0a:57:b9:
9a:56:b8:9a:f7:af:20:64:b6:8b:ba:db:ff:52:86:f4:25:bc:
98:e3:19:ff:56:6b:f1:20:30:0f:b0:1a:16:ea:1a:9a:6d:a2:
d9:d3:ef:7e:1e:ab:92:1f:5f:a8:7b:97:4a:07:90:1e:66:81:
84:a5:7c:8b:af:42:44:aa:b6:58:c1:29:39:b5:93:22:14:30:
71:11:f2:6a:e5:e5:52:f6:fb:d9:4b:84:12:59:15:a8:0f:72:
ea:b3:c8:8c:22:ae:e4:50:ac:77:33:0d:30:6c:85:29:0a:3b:
ff:2f:d7:b3:17:e4:5c:b8:fe:36:3b:9e:87:44:4b:27:77:b1:
50:e7:b4:52:a6:5b:57:f0:7c:5a:b1:7b:f7:a7:96:a5:f5:96:
af:0a:04:19
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE8u7RP3TADMX4/IGrAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdmZDI1YTItMzA0MS00MzFkLWE2YTktYzQwOWI0Mjgz
NWExMB4XDTI2MDkxNTEzMDAxMloXDTI2MTIxNDE0MDAxMlowLzEtMCsGA1UEAxMk
M2Q2ZDc4NWQtMjJlOS00YjRkLTg4NzAtMjcxNzk1MTU3YTBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Gm/EbxIkhyllquQrh4l77IbX2UOfO7VUYii
pr60KwKulxj1vvFBR5aroFiLIOGJ0jCVaQlrRPje+DO837T0k+wENcAzN07NlSN+
I+TuZZvLM1UJtiqbKwEd1GX6Jn4IxNiKCklcUEa3OTMKxUxhKVgB3lvbocol3DOb
JMCdQPOxHd/6tiSL226q4EljWnkbTqzt5ZiQO1gk5IhbbVesJLF/WdOwM+KSgthK
M3m70i52ALs+taUTKT7GMgBGOjcGc3HINDhvpT2Sde7Jrqzm3tImOOYB2p8werht
lnXorKgNGNd+qpryGXeykbB98ZAaOtQkfDt0VMYwGHNtg03tHwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHX4agbqJSefTLtV77OG5Uk4potOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jN2Zk
MjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5YjQyODM1YTEvYTI2OTYzYzItYzFkZC0z
M2IyLTk0MmQtMGI2YjkyMjI0YjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzdmZDI1YTItMzA0MS00MzFkLWE2
YTktYzQwOWI0MjgzNWExL2M3ZmQyNWEyLTMwNDEtNDMxZC1hNmE5LWM0MDliNDI4
MzVhMS5jcmwwHwYDVR0jBBgwFoAUNXEKw9dxeaFzg95nCkio4CDv6IUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jN2ZkMjVhMi0zMDQxLTQzMWQtYTZhOS1jNDA5
YjQyODM1YTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJjEgADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQA4uu1R2cH56BOCwUy8/ijlB5Q+HKmSrztcY/psMWVBr5My5gKSm7NW
o8/HZs1qajmlZIA8dZjUEFnmphsFchms7IfvSYhperQrVx27gmJ07W+qDwIHzK9I
d7QSmt1au0N0TnVIgG3QeZkKV7maVria968gZLaLutv/Uob0JbyY4xn/VmvxIDAP
sBoW6hqabaLZ0+9+HquSH1+oe5dKB5AeZoGEpXyLr0JEqrZYwSk5tZMiFDBxEfJq
5eVS9vvZS4QSWRWoD3Lqs8iMIq7kUKx3Mw0wbIUpCjv/L9ezF+RcuP42O56HREsn
d7FQ57RSpltX8HxasXv3p5al9ZavCgQZ
-----END CERTIFICATE-----
Generated at Mon Sep 21 06:33:49 2026 by rpki-client