
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa
File: aaa241b2-0e20-3965-af75-6d9f126290e3.roa (raw, json)
Hash identifier: U2XYSDHr7DxTZU9ol+gamMWheWgdDguyc80RDcxLNtc=
Subject key identifier: 5C:3B:67:A9:8D:0C:ED:E7:51:6C:1B:94:A5:BF:78:DF:7B:DE:35:65
Certificate issuer: /CN=01586a37-c709-480e-ac0d-b07d855c615b
Certificate serial: 010D0C9F4328584C751C2D0EC42D6A5A66CFD000
Authority key identifier: 40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa
Signing time: Thu 08 Jan 2026 14:00:39 +0000
ROA not before: Thu 08 Jan 2026 14:00:39 +0000
ROA not after: Wed 08 Apr 2026 13:00:39 +0000
asID: 207990
IP address blocks: 2600:2900::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:75:1c:2d:0e:c4:2d:6a:5a:66:cf:d0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01586a37-c709-480e-ac0d-b07d855c615b
Validity
Not Before: Jan 8 14:00:39 2026 GMT
Not After : Apr 8 13:00:39 2026 GMT
Subject: CN=0a007c9e-04c2-4a75-81b7-cc5850be7c55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:2e:57:dc:ba:b7:03:02:53:70:e1:d7:cc:19:
c5:c7:da:91:f7:2c:e2:18:55:27:63:ae:e9:3e:08:
79:ac:d2:b3:9d:cc:20:ef:78:5f:dd:c1:de:c0:e5:
84:08:fc:02:da:bb:4a:49:44:c9:af:a8:78:77:7e:
68:9c:fb:cf:53:63:56:a0:94:61:9f:f3:cf:0e:99:
af:6f:c3:2c:05:07:6b:00:68:4c:f9:0b:f0:ae:43:
c2:c3:a7:2b:d7:85:94:67:3b:9e:15:da:54:f6:34:
d7:1f:a5:fd:26:25:8a:d4:65:9c:e5:f3:a1:99:5e:
ec:ff:bc:6a:d5:bc:e6:38:95:30:d9:cb:d7:c2:e6:
94:78:c0:6e:72:da:ac:e8:3a:9a:a3:83:ff:86:0b:
c0:b6:dd:4c:44:a1:a4:5f:c1:cb:e1:4e:5d:a0:85:
cb:2d:8c:66:c5:39:81:c4:cf:fa:81:05:92:8d:ce:
2b:db:63:b0:11:19:4e:e0:76:7f:6b:46:a7:ae:7f:
5f:bc:50:aa:d9:a1:98:73:1f:3f:ef:47:36:51:7a:
58:4e:d8:4e:3e:8e:1a:a6:f4:ab:49:fd:5e:a3:53:
d5:1b:69:c6:dd:fc:0b:ae:00:e7:b1:b0:52:69:6e:
dd:45:52:f0:6c:53:22:87:bd:9b:4b:ed:d8:06:46:
3a:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3B:67:A9:8D:0C:ED:E7:51:6C:1B:94:A5:BF:78:DF:7B:DE:35:65
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/aaa241b2-0e20-3965-af75-6d9f126290e3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b/01586a37-c709-480e-ac0d-b07d855c615b.crl
X509v3 Authority Key Identifier:
keyid:40:B8:69:3F:C9:14:9F:5C:2B:7B:FA:88:B8:C7:FF:62:32:EB:9B:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/01586a37-c709-480e-ac0d-b07d855c615b.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:2900::/30
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8b:c5:ba:68:fd:8c:df:68:c3:f2:a6:36:0b:ad:d1:68:5b:08:
0f:59:b5:cd:fe:9c:e2:18:70:22:dc:40:c7:b6:49:2e:9b:10:
62:0d:f2:f9:65:e4:d6:8a:89:5d:8b:fe:79:66:f1:33:56:6f:
4e:6b:37:86:41:39:f7:e9:17:85:24:eb:9d:c5:5f:a8:53:41:
c3:ea:a4:0f:65:34:8d:b8:f6:7c:3b:95:31:c1:7c:9f:ae:b6:
a2:d9:6a:4c:7d:d6:db:0c:88:cf:03:dd:77:30:3b:29:38:5d:
ba:c3:5e:99:b1:9c:ba:ab:73:f4:07:a5:df:67:ab:c8:f7:d8:
9e:ac:e8:75:aa:9b:47:ef:31:0c:3c:3f:7f:d9:dc:7c:52:af:
dc:28:53:20:93:92:3d:36:c5:a9:de:9e:0f:e4:38:13:66:5b:
58:da:b8:f4:de:b9:f3:01:f8:50:7a:22:c5:2d:1b:e9:9b:cc:
50:97:ed:ab:3b:7c:b6:6e:b0:88:ef:92:ce:d6:51:9f:ed:d7:
9c:fc:bc:78:95:18:5f:66:49:f5:26:41:1c:44:31:56:be:f9:
e3:25:ea:93:d7:f1:47:ca:c8:04:38:b3:d8:f7:9a:29:c8:ac:
72:dc:1a:c2:12:e2:c2:bf:82:05:e4:e1:d1:ca:16:40:74:64:
29:c5:40:eb
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEx1HC0OxC1qWmbP0AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE1ODZhMzctYzcwOS00ODBlLWFjMGQtYjA3ZDg1NWM2
MTViMB4XDTI2MDEwODE0MDAzOVoXDTI2MDQwODEzMDAzOVowLzEtMCsGA1UEAxMk
MGEwMDdjOWUtMDRjMi00YTc1LTgxYjctY2M1ODUwYmU3YzU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhC5X3Lq3AwJTcOHXzBnFx9qR9yziGFUnY67p
Pgh5rNKzncwg73hf3cHewOWECPwC2rtKSUTJr6h4d35onPvPU2NWoJRhn/PPDpmv
b8MsBQdrAGhM+QvwrkPCw6cr14WUZzueFdpU9jTXH6X9JiWK1GWc5fOhmV7s/7xq
1bzmOJUw2cvXwuaUeMBuctqs6Dqao4P/hgvAtt1MRKGkX8HL4U5doIXLLYxmxTmB
xM/6gQWSjc4r22OwERlO4HZ/a0anrn9fvFCq2aGYcx8/70c2UXpYTthOPo4apvSr
Sf1eo1PVG2nG3fwLrgDnsbBSaW7dRVLwbFMih72bS+3YBkY6wQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFFw7Z6mNDO3nUWwblKW/eN973jVlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4
NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdkODU1YzYxNWIvYWFhMjQxYjItMGUyMC0z
OTY1LWFmNzUtNmQ5ZjEyNjI5MGUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDE1ODZhMzctYzcwOS00ODBlLWFj
MGQtYjA3ZDg1NWM2MTViLzAxNTg2YTM3LWM3MDktNDgwZS1hYzBkLWIwN2Q4NTVj
NjE1Yi5jcmwwHwYDVR0jBBgwFoAUQLhpP8kUn1wre/qIuMf/YjLrm6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wMTU4NmEzNy1jNzA5LTQ4MGUtYWMwZC1iMDdk
ODU1YzYxNWIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUCJgApADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQCLxbpo/YzfaMPypjYLrdFoWwgPWbXN/pziGHAi3EDHtkkumxBiDfL5
ZeTWioldi/55ZvEzVm9OazeGQTn36ReFJOudxV+oU0HD6qQPZTSNuPZ8O5UxwXyf
rrai2WpMfdbbDIjPA913MDspOF26w16ZsZy6q3P0B6XfZ6vI99ierOh1qptH7zEM
PD9/2dx8Uq/cKFMgk5I9NsWp3p4P5DgTZltY2rj03rnzAfhQeiLFLRvpm8xQl+2r
O3y2brCI75LO1lGf7dec/Lx4lRhfZkn1JkEcRDFWvvnjJeqT1/FHysgEOLPY95op
yKxy3BrCEuLCv4IF5OHRyhZAdGQpxUDr
-----END CERTIFICATE-----
Generated at Mon Mar 2 11:39:51 2026 by rpki-client