
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/af1208ca-791d-327f-bca9-e0a5a5d98650.roa
File: af1208ca-791d-327f-bca9-e0a5a5d98650.roa (raw, json)
Hash identifier: niDUjmYn5iDfXs8O5+X/fXBLgYa1UB8XLbwj2MXYDyo=
Subject key identifier: 50:55:37:0E:45:2B:5A:75:25:D9:EF:4F:22:6F:E9:9E:A6:F7:64:EE
Certificate issuer: /CN=438dc0e7-cfde-42a3-8d42-dbe8a5100cd9
Certificate serial: 010D0C9F4328584D86CCA4CC18712AAC230C07D3
Authority key identifier: 96:13:B9:CB:40:A9:91:8A:34:0B:1B:A1:DF:28:EE:59:CB:4E:95:C1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/af1208ca-791d-327f-bca9-e0a5a5d98650.roa
Signing time: Thu 16 Apr 2026 14:52:14 +0000
ROA not before: Thu 16 Apr 2026 14:52:14 +0000
ROA not after: Wed 15 Jul 2026 14:52:14 +0000
asID: 24062
IP address blocks: 2602:f3fa::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:86:cc:a4:cc:18:71:2a:ac:23:0c:07:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=438dc0e7-cfde-42a3-8d42-dbe8a5100cd9
Validity
Not Before: Apr 16 14:52:14 2026 GMT
Not After : Jul 15 14:52:14 2026 GMT
Subject: CN=7ab61878-6d36-4833-a8e2-fbb149ac0803
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:03:d3:ce:a4:cc:30:07:8d:49:a7:65:b0:9e:
9b:3a:a3:2f:a0:50:b6:34:79:91:51:b1:97:c0:0b:
43:8e:bb:c8:91:41:a4:36:d8:31:ce:0a:9a:2a:7f:
80:cd:63:4d:61:da:30:6a:f7:04:be:59:6f:b3:62:
f7:78:c5:ef:ca:e9:b3:a8:c8:d9:b1:bb:1d:d4:a2:
59:34:f8:e8:e9:5e:07:a9:34:8c:75:30:c3:c7:48:
bc:77:a1:4f:3f:cd:3d:0b:d7:96:8b:02:55:8e:a6:
b6:c9:bd:ec:77:f4:73:8c:9c:e7:8e:6b:fc:4d:13:
5b:63:a7:36:0c:93:e3:fb:f6:9d:15:97:3c:85:62:
aa:64:aa:00:91:6e:65:66:d2:a2:05:82:fe:96:a3:
24:99:bc:e6:07:86:48:51:56:c0:8e:b4:4a:18:00:
90:13:bb:1a:54:ff:f8:de:ac:9f:0a:61:60:32:7f:
2f:01:d9:0f:af:1a:bd:3e:2a:b0:84:1a:0a:bb:eb:
46:dc:3c:c9:4c:c6:14:cc:aa:65:56:e9:49:69:4a:
88:f6:fb:4f:f3:13:9c:ad:79:6d:c9:74:26:cf:0f:
bf:8c:3e:a6:8a:e0:06:70:3b:b3:bd:68:b6:de:57:
30:98:a5:77:95:f2:dc:52:ea:29:3f:ad:e7:a4:b8:
02:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:55:37:0E:45:2B:5A:75:25:D9:EF:4F:22:6F:E9:9E:A6:F7:64:EE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/af1208ca-791d-327f-bca9-e0a5a5d98650.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.crl
X509v3 Authority Key Identifier:
keyid:96:13:B9:CB:40:A9:91:8A:34:0B:1B:A1:DF:28:EE:59:CB:4E:95:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/438dc0e7-cfde-42a3-8d42-dbe8a5100cd9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f3fa::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:c2:59:00:1e:bf:f4:4d:fb:c5:6f:74:85:c9:a5:0c:2f:02:
56:91:9a:49:cf:3f:a3:5b:cc:ae:d7:42:4d:21:a9:60:08:b5:
bb:4f:ec:db:9c:e8:e1:c1:fa:99:51:79:73:00:0a:b8:33:5d:
76:c9:d4:4d:15:b2:3d:91:9e:28:4f:0b:a4:c3:cf:46:86:99:
d5:9b:41:a1:91:b4:3e:a3:33:fd:eb:97:dc:e4:4a:05:ea:78:
f9:a0:51:73:e2:5b:fd:c2:cf:dd:46:a7:cb:28:7f:4a:8c:25:
bc:45:9a:05:19:ff:09:18:1d:e0:b2:11:18:ca:01:b0:90:e7:
6c:a2:76:b0:80:d4:c9:83:38:8c:f2:a8:70:5f:4b:2d:84:60:
29:63:54:d5:9b:dc:79:64:65:c3:0d:33:d1:d5:37:26:00:4c:
a1:9e:0f:59:81:47:b5:de:96:3c:20:0d:9d:e4:c7:f7:ab:a4:
31:92:f8:92:d3:2d:60:d2:32:c1:83:f2:b5:7d:b4:4e:a9:ba:
cf:81:aa:2a:8c:61:45:59:6b:7a:55:32:3f:b4:91:25:a1:26:
82:7f:ad:11:2b:85:23:58:9b:98:88:4c:71:a6:9b:30:0e:23:
3d:ae:b7:43:f0:88:08:e7:75:c6:4d:49:8e:36:32:02:88:2b:
24:0f:6b:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 06:57:02 2026 by rpki-client