
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
File: ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa (raw, json)
Hash identifier: r4mleCtPucuvBJY7TXU5HctuLVrVEekTsX3OlgrhCv4=
Subject key identifier: 88:80:42:1A:48:C0:24:95:F1:77:84:6F:29:CA:AF:BD:EC:22:37:A8
Certificate issuer: /CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Certificate serial: 010D0C9F4328584D037D17DCF3B2FBC1478E2680
Authority key identifier: 15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
Signing time: Sat 28 Feb 2026 14:00:40 +0000
ROA not before: Sat 28 Feb 2026 14:00:40 +0000
ROA not after: Fri 29 May 2026 13:00:40 +0000
asID: 40916
IP address blocks: 2602:fcff::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:03:7d:17:dc:f3:b2:fb:c1:47:8e:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aac5406d-4c20-4b08-83ac-a8eafc059fe0
Validity
Not Before: Feb 28 14:00:40 2026 GMT
Not After : May 29 13:00:40 2026 GMT
Subject: CN=14ec623c-d979-4faa-a186-97d0f6b01902
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:74:80:6a:cc:ef:4f:c6:9a:d7:ad:e2:79:55:
73:52:81:4f:90:7d:38:d1:a4:df:f5:41:9e:f3:3a:
ee:b7:ac:78:26:55:db:a9:9a:87:cb:e3:bd:97:4a:
1b:a2:55:2b:3c:fa:27:7c:28:bf:57:2a:aa:59:b2:
6a:80:4c:53:83:c9:c4:35:6b:71:7e:e5:de:d6:a4:
3c:0a:39:b7:8c:0a:25:37:ca:9f:0e:8e:dd:ec:ea:
1c:42:b0:04:45:22:03:ad:c6:b4:79:91:04:19:04:
05:97:30:ca:89:85:f4:57:61:54:6a:99:5e:6b:3a:
f6:55:78:7c:03:35:11:98:98:9a:36:29:c2:c7:0d:
12:b3:ea:fe:f0:c1:19:08:e3:a7:d7:97:bf:c3:67:
49:e7:65:21:6b:51:68:82:78:74:7a:e4:f1:20:d2:
a1:b4:3a:cf:4e:5a:f2:ab:13:b8:af:ce:f1:a2:66:
ff:a1:75:f9:1e:b0:04:40:79:0c:8f:d3:de:86:83:
e5:0a:3f:4f:c0:1d:d3:3f:95:ac:73:5f:26:62:16:
b3:34:59:6f:68:3f:1e:4e:fd:53:5e:30:3c:7a:b5:
f2:cf:44:02:fc:95:35:89:46:a3:7a:2c:7b:d6:27:
97:a9:32:e0:48:e6:85:76:71:74:bf:c6:8f:17:a6:
6b:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:80:42:1A:48:C0:24:95:F1:77:84:6F:29:CA:AF:BD:EC:22:37:A8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/ae3e4a96-006f-3dac-a4b3-65461b2a734e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0/aac5406d-4c20-4b08-83ac-a8eafc059fe0.crl
X509v3 Authority Key Identifier:
keyid:15:A8:78:40:92:99:20:F4:26:07:A5:49:A9:3B:17:59:FE:D3:4A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/aac5406d-4c20-4b08-83ac-a8eafc059fe0.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fcff::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
a4:6c:7e:a0:e6:f2:fd:dd:83:b9:4d:20:49:de:1b:60:39:89:
05:31:cc:95:0c:d2:21:b8:7c:bd:50:8e:c0:b6:e8:08:35:f2:
f1:90:6f:11:35:5f:90:8c:42:3c:67:a6:80:77:6a:2e:00:ef:
66:86:ff:2a:57:75:d9:dd:0d:75:04:05:35:72:5a:7e:9e:87:
ee:da:77:b0:68:94:76:11:aa:fc:48:6b:04:bf:87:1b:d8:d1:
00:57:9e:4e:4c:be:6c:9b:4e:67:e2:ac:6f:5e:5f:89:65:c9:
11:f2:52:2b:39:53:dd:32:3b:cc:62:42:de:b9:18:57:a0:9e:
d9:03:59:b6:87:64:2a:f7:24:49:3e:91:25:49:ce:9b:9a:45:
64:2e:f6:76:ec:83:fc:6c:e8:f4:b3:fc:91:f6:5f:27:8d:b8:
65:97:c5:b7:5c:81:8a:53:dc:e8:32:06:ff:df:b5:b8:77:4c:
88:98:cf:a8:2c:fe:3a:f2:35:94:67:31:41:5a:03:46:44:b5:
be:04:f3:e4:fb:94:d9:1d:6c:65:45:ae:8d:04:02:e6:ea:11:
aa:1d:f0:f9:dd:e0:08:32:b3:dc:09:10:fb:13:de:26:e4:21:
13:35:f6:d4:11:f1:8f:36:a3:c0:b3:03:bd:5b:84:8a:51:c4:
83:22:43:38
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE0DfRfc87L7wUeOJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjNTQwNmQtNGMyMC00YjA4LTgzYWMtYThlYWZjMDU5
ZmUwMB4XDTI2MDIyODE0MDA0MFoXDTI2MDUyOTEzMDA0MFowLzEtMCsGA1UEAxMk
MTRlYzYyM2MtZDk3OS00ZmFhLWExODYtOTdkMGY2YjAxOTAyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0XSAaszvT8aa163ieVVzUoFPkH040aTf9UGe
8zrut6x4JlXbqZqHy+O9l0obolUrPPonfCi/VyqqWbJqgExTg8nENWtxfuXe1qQ8
Cjm3jAolN8qfDo7d7OocQrAERSIDrca0eZEEGQQFlzDKiYX0V2FUapleazr2VXh8
AzURmJiaNinCxw0Ss+r+8MEZCOOn15e/w2dJ52Uha1Fognh0euTxINKhtDrPTlry
qxO4r87xomb/oXX5HrAEQHkMj9PehoPlCj9PwB3TP5Wsc18mYhazNFlvaD8eTv1T
XjA8erXyz0QC/JU1iUajeix71ieXqTLgSOaFdnF0v8aPF6ZrpwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFIiAQhpIwCSV8XeEbynKr73sIjeoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1
NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVhZmMwNTlmZTAvYWUzZTRhOTYtMDA2Zi0z
ZGFjLWE0YjMtNjU0NjFiMmE3MzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWFjNTQwNmQtNGMyMC00YjA4LTgz
YWMtYThlYWZjMDU5ZmUwL2FhYzU0MDZkLTRjMjAtNGIwOC04M2FjLWE4ZWFmYzA1
OWZlMC5jcmwwHwYDVR0jBBgwFoAUFah4QJKZIPQmB6VJqTsXWf7TSscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hYWM1NDA2ZC00YzIwLTRiMDgtODNhYy1hOGVh
ZmMwNTlmZTAuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL8/wAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEApGx+oOby/d2DuU0gSd4bYDmJBTHMlQzSIbh8vVCOwLboCDXy8ZBv
ETVfkIxCPGemgHdqLgDvZob/Kld12d0NdQQFNXJafp6H7tp3sGiUdhGq/EhrBL+H
G9jRAFeeTky+bJtOZ+Ksb15fiWXJEfJSKzlT3TI7zGJC3rkYV6Ce2QNZtodkKvck
ST6RJUnOm5pFZC72duyD/Gzo9LP8kfZfJ424ZZfFt1yBilPc6DIG/9+1uHdMiJjP
qCz+OvI1lGcxQVoDRkS1vgTz5PuU2R1sZUWujQQC5uoRqh3w+d3gCDKz3AkQ+xPe
JuQhEzX21BHxjzajwLMDvVuEilHEgyJDOA==
-----END CERTIFICATE-----
Generated at Mon Mar 2 08:01:39 2026 by rpki-client