
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
File: 11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa (raw, json)
Hash identifier: OK1bvtb0tCuxJeL7r7IM5Z/4Aj6/hAzBkuigWK0XR1U=
Subject key identifier: 23:53:91:8B:D2:00:FA:C7:DE:AA:9E:7C:57:26:B5:3F:04:8A:D0:69
Certificate issuer: /CN=5742dde3-84a3-4488-a01c-525734c4d81b
Certificate serial: 010D0C9F4328584F576821E6FA93AE15F47BDF80
Authority key identifier: 80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
Signing time: Wed 30 Sep 2026 01:00:12 +0000
ROA not before: Wed 30 Sep 2026 01:00:12 +0000
ROA not after: Tue 29 Dec 2026 02:00:12 +0000
asID: 397384
IP address blocks: 2602:fc53:35::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 13 Oct 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:57:68:21:e6:fa:93:ae:15:f4:7b:df:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5742dde3-84a3-4488-a01c-525734c4d81b
Validity
Not Before: Sep 30 01:00:12 2026 GMT
Not After : Dec 29 02:00:12 2026 GMT
Subject: CN=05a9f035-220c-420f-a6e4-f15b8dd9a6db
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:2f:39:8b:51:cc:5c:02:b8:b8:64:52:17:3e:
95:b8:e0:71:99:39:e7:5a:b1:56:90:d0:1c:b6:e6:
b7:72:f7:e8:c0:07:8b:e5:73:b8:27:d9:59:e6:6f:
ea:51:6f:34:06:e1:49:43:6a:bb:26:13:d7:a6:c3:
cf:37:c1:7b:80:62:ee:f7:7b:52:05:83:b6:18:77:
9d:87:ab:6a:d1:2a:ff:23:2b:46:e4:61:f9:7c:39:
ed:7e:bd:bf:7e:62:d4:d7:83:6a:c7:49:fe:70:7e:
f4:41:35:3e:18:14:35:8c:06:31:32:ac:77:ee:ca:
ce:f3:4f:c2:96:26:57:aa:ae:96:1d:94:3c:97:38:
40:81:56:90:88:31:5d:c4:84:ec:d3:c7:e3:5b:ac:
86:1b:29:de:01:b0:4f:3d:ba:a1:ab:bd:d6:e8:c5:
2d:99:c1:76:ae:04:6c:1a:b6:5d:ec:f1:94:a5:1a:
56:8f:27:d6:fe:ca:fd:73:26:08:f0:6b:e2:eb:48:
93:76:1e:85:69:74:e6:b2:d4:87:64:a9:79:ca:0f:
0c:d7:cb:8c:00:38:fa:8a:cb:c9:10:26:fb:cb:bd:
86:17:4a:08:1b:11:1a:37:20:ec:fe:9e:96:6a:49:
f3:d1:c0:ec:70:dd:81:9a:e3:be:12:90:f8:5b:71:
1f:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:53:91:8B:D2:00:FA:C7:DE:AA:9E:7C:57:26:B5:3F:04:8A:D0:69
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/11d48bea-de6c-3fd6-9849-dfce2adf03b7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b/5742dde3-84a3-4488-a01c-525734c4d81b.crl
X509v3 Authority Key Identifier:
keyid:80:F4:AF:44:45:DA:5F:FA:59:CE:9C:A8:4F:96:82:FF:39:43:C6:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/5742dde3-84a3-4488-a01c-525734c4d81b.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc53:35::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
39:71:2c:11:e6:1b:14:4a:9e:95:43:f5:00:ef:43:c1:4f:c4:
f3:db:47:ee:5d:4f:44:4e:c0:a9:77:39:86:49:81:2e:56:dd:
d5:a3:fa:2b:d8:be:0b:64:bf:5e:56:7e:78:0d:ed:db:d7:76:
23:de:de:53:e9:cc:61:a9:d5:92:b1:48:2a:9e:9a:64:07:5e:
bb:12:e5:bd:22:9d:59:5b:e0:07:2b:71:10:94:2a:57:0d:79:
6c:de:92:2d:dc:b8:59:ea:aa:25:a7:4e:ef:30:4b:53:89:a8:
2e:5a:b0:af:d6:9b:95:cb:9a:36:b3:b7:bd:2f:1b:d2:16:06:
fa:3c:30:be:ec:17:cf:8f:72:c4:e4:d7:30:a3:8d:ff:79:5d:
98:1c:aa:63:88:ba:06:4f:e1:1b:5c:6f:25:35:a8:df:90:3c:
9c:91:c7:88:91:09:51:69:25:11:cb:b1:c0:bc:1d:f1:62:cd:
9b:93:94:a3:be:b1:09:73:ce:4b:52:98:8f:ed:0b:90:25:e7:
95:be:8f:29:16:c4:1b:65:c7:c0:90:81:e8:95:7c:f0:6e:76:
0a:3d:fa:f7:3c:d8:64:b2:18:ae:a4:37:05:48:c0:77:3d:09:
73:58:23:8e:2e:d7:60:e2:f8:29:56:b4:75:af:26:31:d7:dd:
23:e6:e5:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 19:52:21 2026 by rpki-client