
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
File: 1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa (raw, json)
Hash identifier: POJwNta97bVx76ELyDALhvLaEH+EeoAZfEBvKredoB8=
Subject key identifier: 03:FE:D7:1B:88:39:04:2D:15:F0:B7:3B:99:2E:44:4A:2C:59:F9:0B
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F4328584CC6121609B92AABA525E6F7A0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 16509
IP address blocks: 2620:147:c42::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:12:16:09:b9:2a:ab:a5:25:e6:f7:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=61cd7233-0c90-42db-b387-8384df849ef7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:23:09:98:89:f8:8b:db:62:06:3b:30:8e:bb:
65:ef:14:ab:a6:9b:16:68:00:5b:ca:83:5a:cd:68:
25:30:f9:ee:cc:18:a5:5d:52:2c:4d:19:f1:a7:38:
9f:9a:f0:3d:c6:cc:88:56:2f:b6:71:49:85:68:2d:
ab:2d:b3:a0:dd:46:8f:0d:69:c6:03:51:66:0a:79:
c6:a1:75:c8:64:ce:c4:ec:7b:7a:d6:2e:16:00:44:
27:d7:05:f8:0e:1d:e2:7e:52:ea:da:66:e2:25:41:
1a:68:56:9d:a4:dc:38:53:31:be:e4:f4:30:0e:95:
fd:6c:c7:77:49:94:a4:0e:f8:b1:51:de:b4:37:8b:
3c:a1:de:af:5d:e9:2f:a7:bb:7a:7a:d1:01:f5:51:
9e:e0:9e:82:d5:8c:48:58:1a:61:94:5e:62:93:86:
47:7e:8c:4b:e3:60:99:7e:19:af:48:44:f1:49:ba:
89:d3:41:b5:a1:46:75:3d:d8:28:d8:68:b2:57:85:
6a:5b:c7:91:4d:76:e5:fd:1e:b6:89:cd:16:2d:76:
cb:e8:38:a1:29:18:c7:1e:7f:16:e9:07:eb:5a:17:
bb:fa:3f:67:ad:5c:4e:50:5d:64:43:f7:15:18:4a:
a3:87:03:7b:26:3c:de:e3:10:15:ab:b0:cf:5e:a7:
37:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:FE:D7:1B:88:39:04:2D:15:F0:B7:3B:99:2E:44:4A:2C:59:F9:0B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/1cc96c0b-226d-324d-9d1a-d28b7ef1f240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:147:c42::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:e3:f5:16:49:93:39:6d:ee:ce:fd:35:d9:7a:34:52:bc:75:
15:52:f5:cc:0c:2b:86:86:4b:3f:a5:c6:53:1d:2b:d7:f4:dc:
43:e8:93:3d:32:d8:15:7a:43:79:90:5e:c9:29:7e:69:c9:95:
5d:37:46:c2:ba:be:40:17:5c:36:63:9d:f5:82:8e:f6:a9:b3:
1f:7a:c6:b7:28:40:77:af:70:62:21:b2:1d:54:4b:2f:a6:64:
fa:57:d0:02:25:52:67:c1:27:a5:88:84:ad:6e:ce:5b:31:af:
a1:8c:14:32:f3:02:98:5f:08:89:d6:8a:5c:7d:84:e3:95:3a:
cc:72:11:2f:7a:15:50:12:8a:b9:cf:2d:8b:10:93:0e:d7:13:
ef:3c:04:b6:30:00:5b:3e:8e:fa:a1:4c:78:5b:a6:fa:90:0f:
d0:17:d7:0b:7e:4b:d1:57:c3:0a:39:7a:7c:d6:8d:88:b2:79:
25:0c:01:e0:05:7a:2d:e5:5b:60:4f:02:a0:8d:ad:d6:a5:6a:
c3:18:69:a9:97:e9:58:25:6a:2d:80:b1:f4:49:c2:3f:13:cd:
94:07:fe:61:13:15:40:7d:77:95:db:73:2a:66:6e:6d:52:a5:
62:ce:4b:23:dc:b5:77:33:9e:b2:a9:cd:4e:f9:10:26:58:94:
54:38:f7:97
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEzGEhYJuSqrpSXm96AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
NjFjZDcyMzMtMGM5MC00MmRiLWIzODctODM4NGRmODQ5ZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviMJmIn4i9tiBjswjrtl7xSrppsWaABbyoNa
zWglMPnuzBilXVIsTRnxpzifmvA9xsyIVi+2cUmFaC2rLbOg3UaPDWnGA1FmCnnG
oXXIZM7E7Ht61i4WAEQn1wX4Dh3iflLq2mbiJUEaaFadpNw4UzG+5PQwDpX9bMd3
SZSkDvixUd60N4s8od6vXekvp7t6etEB9VGe4J6C1YxIWBphlF5ik4ZHfoxL42CZ
fhmvSETxSbqJ00G1oUZ1Pdgo2GiyV4VqW8eRTXbl/R62ic0WLXbL6DihKRjHHn8W
6QfrWhe7+j9nrVxOUF1kQ/cVGEqjhwN7Jjze4xAVq7DPXqc3yQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAP+1xuIOQQtFfC3O5kuREosWfkLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvMWNjOTZjMGItMjI2ZC0z
MjRkLTlkMWEtZDI4YjdlZjFmMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiABRwxC
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAB3j9RZJkzlt7s79Ndl6NFK8dRVS9cwMK4aGSz+lxlMdK9f03EPo
kz0y2BV6Q3mQXskpfmnJlV03RsK6vkAXXDZjnfWCjvapsx96xrcoQHevcGIhsh1U
Sy+mZPpX0AIlUmfBJ6WIhK1uzlsxr6GMFDLzAphfCInWilx9hOOVOsxyES96FVAS
irnPLYsQkw7XE+88BLYwAFs+jvqhTHhbpvqQD9AX1wt+S9FXwwo5enzWjYiyeSUM
AeAFei3lW2BPAqCNrdalasMYaamX6Vglai2AsfRJwj8TzZQH/mETFUB9d5Xbcypm
bm1SpWLOSyPctXcznrKpzU75ECZYlFQ495c=
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:44:24 2026 by rpki-client