
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
File: 401bafbe-03cc-3cac-9a44-36c27387a392.roa (raw, json)
Hash identifier: UIqH/dSh090AX2pkKzk/M+FsQLgSe/68Q//FJFL1cQI=
Subject key identifier: 86:3E:E7:0F:DE:BA:4A:08:1E:61:A0:30:C1:7D:D8:C4:C2:26:82:9E
Certificate issuer: /CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Certificate serial: 010D0C9F4328584D651514568037268C51B55700
Authority key identifier: FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
Signing time: Sat 04 Apr 2026 13:00:29 +0000
ROA not before: Sat 04 Apr 2026 13:00:29 +0000
ROA not after: Fri 03 Jul 2026 13:00:29 +0000
asID: 3384
IP address blocks: 2001:4830:c0c0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:65:15:14:56:80:37:26:8c:51:b5:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ebd609f9-488f-4ccb-b562-f82edd8191dd
Validity
Not Before: Apr 4 13:00:29 2026 GMT
Not After : Jul 3 13:00:29 2026 GMT
Subject: CN=1aaf46ac-3fbf-4fbc-ad09-9cd7ec011dc0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:67:73:8f:c1:d9:f4:cb:0c:b2:a0:1a:bf:e8:
7c:c8:c7:60:88:db:7d:55:45:7b:31:1b:27:66:44:
fc:be:0a:4d:ee:45:53:16:f0:04:1a:55:90:4a:f4:
e7:ce:3c:ab:21:f7:e7:2f:0e:48:35:5c:2c:e3:f6:
b9:a4:ee:35:85:dd:64:0f:15:c0:d3:f0:dc:0e:74:
62:cb:e3:3b:3b:12:5a:5a:80:12:c3:25:2f:f6:0d:
81:ec:24:3b:e9:1b:ee:d7:10:b3:00:76:31:35:d4:
e8:99:41:21:c8:ee:29:6e:4f:34:7a:ef:de:77:43:
44:b0:ef:d1:a8:e9:8b:32:eb:ff:fd:c6:1f:e4:b2:
6c:b0:02:72:a8:a4:4e:8f:f4:18:e7:52:e3:2b:64:
0d:0b:42:9f:80:92:c6:67:17:37:4c:0c:b9:c7:5f:
68:8a:11:bc:cf:99:97:a3:af:03:88:59:46:27:16:
6a:03:e4:39:d3:8a:48:61:5f:17:56:f3:56:8c:03:
82:cb:30:ea:3d:cf:9a:d9:5e:6f:f0:8b:5b:81:e6:
94:1e:bc:7c:2e:a7:d5:12:e6:a0:8a:df:81:7d:da:
77:f1:52:3d:1f:2c:83:50:07:1d:fb:62:55:cb:0b:
63:3a:fc:0a:39:b1:3d:6f:bc:79:7e:dc:f3:d1:9b:
5f:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:3E:E7:0F:DE:BA:4A:08:1E:61:A0:30:C1:7D:D8:C4:C2:26:82:9E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/401bafbe-03cc-3cac-9a44-36c27387a392.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd/ebd609f9-488f-4ccb-b562-f82edd8191dd.crl
X509v3 Authority Key Identifier:
keyid:FF:0A:1B:E6:8C:45:D3:56:2A:30:F0:43:8D:C2:17:72:44:C0:A5:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/ebd609f9-488f-4ccb-b562-f82edd8191dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:4830:c0c0::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
44:3d:27:95:1d:cc:b8:28:21:65:15:c4:50:3a:15:dc:80:10:
26:c0:d8:16:23:43:e9:78:5e:03:42:e7:0b:d9:ad:3f:8d:b3:
42:fc:8a:f2:e6:77:7b:29:46:d7:bf:46:72:2f:db:ad:2f:5a:
14:97:dc:55:06:96:97:27:85:0a:2d:22:20:9a:3f:9d:ca:49:
e5:6e:28:b3:ae:af:bb:2d:cd:c5:78:98:3c:a6:82:d6:28:95:
a7:1a:17:0d:b0:a7:7a:87:21:3e:db:b5:91:d9:4d:3d:d7:19:
e7:94:74:08:66:56:4c:e2:da:4f:9e:a4:47:55:af:0f:24:0f:
b3:f1:38:6b:26:51:0c:57:79:e8:75:bf:28:33:5b:3d:6a:37:
31:ec:07:fc:04:b1:aa:aa:20:97:20:6a:24:ff:c0:cb:48:d0:
dd:76:12:06:a7:3f:5e:71:51:23:ed:c5:2a:9d:22:a8:d3:46:
31:fd:d9:cb:0c:30:76:91:8f:42:13:6c:cb:0d:8e:16:f7:6d:
50:33:34:7c:9e:11:52:e8:f1:10:50:07:56:9b:9f:3c:c0:cb:
2b:8a:c1:5f:c2:b9:8d:41:07:7a:b9:17:4d:7f:a1:48:80:77:
c7:8f:d0:e8:dd:74:3e:bb:21:e6:41:e8:27:4e:33:43:56:8d:
4b:ed:84:a5
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1lFRRWgDcmjFG1VwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWJkNjA5ZjktNDg4Zi00Y2NiLWI1NjItZjgyZWRkODE5
MWRkMB4XDTI2MDQwNDEzMDAyOVoXDTI2MDcwMzEzMDAyOVowLzEtMCsGA1UEAxMk
MWFhZjQ2YWMtM2ZiZi00ZmJjLWFkMDktOWNkN2VjMDExZGMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2mdzj8HZ9MsMsqAav+h8yMdgiNt9VUV7MRsn
ZkT8vgpN7kVTFvAEGlWQSvTnzjyrIffnLw5INVws4/a5pO41hd1kDxXA0/DcDnRi
y+M7OxJaWoASwyUv9g2B7CQ76Rvu1xCzAHYxNdTomUEhyO4pbk80eu/ed0NEsO/R
qOmLMuv//cYf5LJssAJyqKROj/QY51LjK2QNC0KfgJLGZxc3TAy5x19oihG8z5mX
o68DiFlGJxZqA+Q504pIYV8XVvNWjAOCyzDqPc+a2V5v8ItbgeaUHrx8LqfVEuag
it+Bfdp38VI9HyyDUAcd+2JVywtjOvwKObE9b7x5ftzz0Ztf3QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIY+5w/eukoIHmGgMMF92MTCJoKeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2
MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJlZGQ4MTkxZGQvNDAxYmFmYmUtMDNjYy0z
Y2FjLTlhNDQtMzZjMjczODdhMzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZWJkNjA5ZjktNDg4Zi00Y2NiLWI1
NjItZjgyZWRkODE5MWRkL2ViZDYwOWY5LTQ4OGYtNGNjYi1iNTYyLWY4MmVkZDgx
OTFkZC5jcmwwHwYDVR0jBBgwFoAU/wob5oxF01YqMPBDjcIXckTApZQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lYmQ2MDlmOS00ODhmLTRjY2ItYjU2Mi1mODJl
ZGQ4MTkxZGQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEIAFIMMDA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEQ9J5UdzLgoIWUVxFA6FdyAECbA2BYjQ+l4XgNC5wvZrT+Ns0L8
ivLmd3spRte/RnIv260vWhSX3FUGlpcnhQotIiCaP53KSeVuKLOur7stzcV4mDym
gtYolacaFw2wp3qHIT7btZHZTT3XGeeUdAhmVkzi2k+epEdVrw8kD7PxOGsmUQxX
eeh1vygzWz1qNzHsB/wEsaqqIJcgaiT/wMtI0N12EganP15xUSPtxSqdIqjTRjH9
2csMMHaRj0ITbMsNjhb3bVAzNHyeEVLo8RBQB1abnzzAyyuKwV/CuY1BB3q5F01/
oUiAd8eP0OjddD67IeZB6CdOM0NWjUvthKU=
-----END CERTIFICATE-----
Generated at Sat Apr 18 01:42:06 2026 by rpki-client