
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d99bd456-dc63-3529-a913-40ad313108bb.roa
File: d99bd456-dc63-3529-a913-40ad313108bb.roa (raw, json)
Hash identifier: SdWSimIVf73PX3iSvlu4kYbSl4e4EEs55nxCxA14zxc=
Subject key identifier: 43:B6:36:26:7F:32:36:CA:DE:C7:7A:60:29:0B:D4:A6:05:A5:C8:33
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F4328584CC6121237C4C1C63403B37BA0
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d99bd456-dc63-3529-a913-40ad313108bb.roa
Signing time: Fri 06 Feb 2026 14:00:40 +0000
ROA not before: Fri 06 Feb 2026 14:00:40 +0000
ROA not after: Thu 07 May 2026 13:00:40 +0000
asID: 13778
IP address blocks: 2602:281::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:c6:12:12:37:c4:c1:c6:34:03:b3:7b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Feb 6 14:00:40 2026 GMT
Not After : May 7 13:00:40 2026 GMT
Subject: CN=5fb47a4f-d4ef-4828-94ec-52e155946d35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:ce:83:84:78:5b:c2:b0:aa:82:dc:a9:75:61:
57:41:68:05:c2:ea:ff:c5:63:b0:94:ed:b1:1b:35:
b6:fa:5e:5f:ab:73:08:bf:2a:14:fa:74:66:eb:11:
2e:89:1b:95:a0:52:03:96:51:68:c5:cd:e5:35:5b:
e9:5c:b9:df:8a:cd:f5:ea:0a:bc:80:94:18:56:75:
3c:e7:95:2a:24:a1:92:68:e4:87:17:0d:60:c1:a0:
56:3e:e1:9c:b4:03:6e:74:7a:cf:64:fc:bf:b1:d4:
ca:e9:e0:9f:19:85:56:50:79:b5:45:1a:39:b8:2d:
b1:6d:13:41:56:29:10:7b:9e:81:b3:09:ab:2c:c0:
35:3e:58:98:38:a1:b5:11:5b:9e:d6:66:12:e2:9a:
b1:ba:c5:b0:aa:6c:94:20:a8:88:33:98:05:82:3d:
f4:e5:3f:55:01:38:6a:0e:a7:46:ab:12:7b:68:71:
67:d8:97:5c:1e:43:2b:7c:6b:6e:c8:d2:80:be:7f:
41:4a:8c:f5:43:10:0b:5d:82:12:d0:1d:ea:5c:99:
9f:07:29:3b:cc:d8:73:9b:67:46:57:f9:46:9b:b9:
30:f6:90:29:a1:97:1b:b7:87:f8:bf:60:8a:fa:05:
ed:17:60:f3:bf:43:f7:76:83:6f:a3:b4:43:f6:10:
ef:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B6:36:26:7F:32:36:CA:DE:C7:7A:60:29:0B:D4:A6:05:A5:C8:33
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/d99bd456-dc63-3529-a913-40ad313108bb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:281::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:17:e9:4b:d7:6b:66:a8:b9:11:18:67:bb:21:07:a9:58:98:
d1:f1:c0:ad:74:e5:a7:61:64:52:57:71:67:e3:8b:98:7e:3d:
73:0c:c9:42:52:b4:19:3b:37:c3:c8:63:84:16:e0:22:59:c1:
52:b3:95:04:3e:c5:6e:77:29:b4:6c:78:69:35:e5:ea:00:0a:
79:a4:25:56:2c:f1:25:64:15:5d:87:d7:9a:d3:25:65:68:77:
93:16:9f:c7:d8:7d:c7:12:e9:88:3c:ff:78:b8:22:cc:19:f6:
d5:13:f8:0a:67:d9:50:55:7b:1c:0d:8e:e3:79:47:f3:ea:28:
5e:6f:8a:c8:15:d7:2f:96:31:20:96:7b:71:43:0c:16:cf:ba:
a0:f6:8f:04:bc:6f:c3:d4:3a:14:44:58:4d:ec:92:ce:2e:d7:
d0:16:21:2c:e8:18:86:77:5a:2b:32:a6:93:44:26:6c:8f:d8:
a6:e4:30:93:15:1a:fc:8b:1b:59:77:7b:ed:dc:b8:52:d2:db:
44:f7:ff:2c:8b:d8:15:a8:89:72:b7:49:d4:23:07:9c:75:dc:
e6:0a:9a:5d:72:bb:6d:2d:a1:71:5b:2e:9a:55:20:d2:07:69:
36:9d:24:92:32:c5:45:72:6c:28:a5:13:1c:b0:4c:4f:21:5b:
d8:b1:65:44
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEzGEhI3xMHGNAOze6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDIwNjE0MDA0MFoXDTI2MDUwNzEzMDA0MFowLzEtMCsGA1UEAxMk
NWZiNDdhNGYtZDRlZi00ODI4LTk0ZWMtNTJlMTU1OTQ2ZDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuc6DhHhbwrCqgtypdWFXQWgFwur/xWOwlO2x
GzW2+l5fq3MIvyoU+nRm6xEuiRuVoFIDllFoxc3lNVvpXLnfis316gq8gJQYVnU8
55UqJKGSaOSHFw1gwaBWPuGctANudHrPZPy/sdTK6eCfGYVWUHm1RRo5uC2xbRNB
VikQe56BswmrLMA1PliYOKG1EVue1mYS4pqxusWwqmyUIKiIM5gFgj305T9VAThq
DqdGqxJ7aHFn2JdcHkMrfGtuyNKAvn9BSoz1QxALXYIS0B3qXJmfByk7zNhzm2dG
V/lGm7kw9pApoZcbt4f4v2CK+gXtF2Dzv0P3doNvo7RD9hDvVwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFEO2NiZ/MjbK3sd6YCkL1KYFpcgzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvZDk5YmQ0NTYtZGM2My0z
NTI5LWE5MTMtNDBhZDMxMzEwOGJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgICgTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBCF+lL12tmqLkRGGe7IQepWJjR8cCtdOWnYWRSV3Fn44uYfj1zDMlC
UrQZOzfDyGOEFuAiWcFSs5UEPsVudym0bHhpNeXqAAp5pCVWLPElZBVdh9ea0yVl
aHeTFp/H2H3HEumIPP94uCLMGfbVE/gKZ9lQVXscDY7jeUfz6iheb4rIFdcvljEg
lntxQwwWz7qg9o8EvG/D1DoURFhN7JLOLtfQFiEs6BiGd1orMqaTRCZsj9im5DCT
FRr8ixtZd3vt3LhS0ttE9/8si9gVqIlyt0nUIwecddzmCppdcrttLaFxWy6aVSDS
B2k2nSSSMsVFcmwopRMcsExPIVvYsWVE
-----END CERTIFICATE-----
Generated at Mon Mar 2 19:30:32 2026 by rpki-client