
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd2ba575-da9f-3381-b89f-543085e3f477.roa
File: cd2ba575-da9f-3381-b89f-543085e3f477.roa (raw, json)
Hash identifier: wQi1+02CdCYduFc+Bgd6lZxEur0Vybsf9EXhvpgpxt4=
Subject key identifier: 6A:20:50:47:57:56:E2:6B:AD:9E:CE:45:CB:FF:3A:B8:FF:E9:29:07
Certificate issuer: /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial: 010D0C9F4328584CF587B141127E9A89BE621080
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd2ba575-da9f-3381-b89f-543085e3f477.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 13335
IP address blocks: 2606:4700:111::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:b1:41:12:7e:9a:89:be:62:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=edf0918a-fd3e-4d09-b7a6-f4fc7185306b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:de:f2:ff:44:d7:c0:00:9a:ff:e5:db:80:7a:
d2:7b:ed:30:2e:e9:36:d9:e6:2d:77:cf:da:bf:53:
33:d8:17:dd:37:ee:fc:bb:50:38:f4:4c:57:21:07:
48:bb:bd:bf:cc:35:87:8b:13:d0:6c:fd:18:23:92:
29:9e:28:b2:e5:34:89:97:2e:37:40:52:a9:2d:f7:
01:5e:86:fc:0e:19:13:de:c8:9a:65:a9:17:e6:c2:
bd:f3:a3:07:c9:88:0c:e4:15:5b:89:a6:60:a2:e8:
fa:bd:f5:88:26:30:ca:ce:5a:54:33:28:9e:61:a9:
b3:e0:e6:f6:44:12:e6:d1:fb:3f:a8:62:f8:39:51:
95:9a:a1:4c:ab:f6:f4:39:28:3a:b2:4b:66:49:0d:
93:b5:c1:f2:79:0e:65:82:8c:7f:5e:53:69:a2:46:
57:96:0d:19:31:43:93:e6:33:66:c1:32:e0:c2:5f:
03:3d:18:31:ac:b9:0d:5a:37:24:ff:3e:52:1f:cd:
25:40:d3:cc:f5:f1:63:fd:11:50:a3:99:03:a5:59:
26:a0:4d:29:2c:d2:82:1f:91:fb:e8:18:5a:b7:16:
0f:c4:ae:7c:3a:da:74:c2:13:ba:b7:a7:f6:2e:0a:
9e:88:a4:88:c1:86:ba:49:a2:c7:ce:64:a3:43:12:
05:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:20:50:47:57:56:E2:6B:AD:9E:CE:45:CB:FF:3A:B8:FF:E9:29:07
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/cd2ba575-da9f-3381-b89f-543085e3f477.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
X509v3 Authority Key Identifier:
keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:4700:111::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
02:99:c1:ae:33:cd:5a:b9:4d:55:54:80:7c:58:5f:6e:60:b2:
93:f2:1d:bb:71:85:be:61:6c:53:73:b0:25:25:bf:2f:89:d8:
43:07:a2:1e:36:d6:1c:12:59:31:f8:a6:d4:ac:9e:97:78:2f:
1d:e7:b4:c2:18:d7:0f:38:31:1e:4c:30:c9:97:2d:34:e3:63:
da:b6:10:6d:92:f8:b8:30:a2:46:5c:3c:27:b1:83:ab:42:d1:
db:81:f1:77:3a:d8:3b:25:e9:26:e1:d4:d1:bb:b7:6c:d4:b8:
47:04:1f:8b:43:0e:90:8e:5d:e3:32:db:09:8e:a7:fe:b8:98:
80:b4:3b:6f:57:35:ed:68:35:60:d0:28:70:27:54:2d:4a:de:
74:01:16:42:b6:76:34:44:14:f7:a5:cc:78:79:fd:e4:c0:ca:
f1:02:a2:a6:8d:4b:ce:03:0d:52:fd:15:91:e0:30:7c:6e:93:
03:2a:fa:0e:7b:fa:b2:a6:be:c8:ca:d3:4d:5e:9a:b5:c3:16:
7b:bc:41:86:a6:63:a6:2b:49:d0:82:db:36:6d:d3:44:6f:2d:
a9:ce:c3:76:32:3f:40:f4:01:15:49:f2:f2:15:45:b6:a2:58:
22:c8:d8:d3:d4:c7:f6:ed:10:43:0b:dd:2c:8d:64:e4:c3:0e:
6e:ac:49:14
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWEz1h7FBEn6aib5iEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI2MDIyMzE0MDA0MVoXDTI2MDUyNDEzMDA0MVowLzEtMCsGA1UEAxMk
ZWRmMDkxOGEtZmQzZS00ZDA5LWI3YTYtZjRmYzcxODUzMDZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAit7y/0TXwACa/+XbgHrSe+0wLuk22eYtd8/a
v1Mz2BfdN+78u1A49ExXIQdIu72/zDWHixPQbP0YI5Ipniiy5TSJly43QFKpLfcB
Xob8DhkT3siaZakX5sK986MHyYgM5BVbiaZgouj6vfWIJjDKzlpUMyieYamz4Ob2
RBLm0fs/qGL4OVGVmqFMq/b0OSg6sktmSQ2TtcHyeQ5lgox/XlNpokZXlg0ZMUOT
5jNmwTLgwl8DPRgxrLkNWjck/z5SH80lQNPM9fFj/RFQo5kDpVkmoE0pLNKCH5H7
6BhatxYPxK58Otp0whO6t6f2LgqeiKSIwYa6SaLHzmSjQxIFjQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFGogUEdXVuJrrZ7ORcv/Orj/6SkHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvY2QyYmE1NzUtZGE5Zi0z
MzgxLWI4OWYtNTQzMDg1ZTNmNDc3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgZHAAER
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAKZwa4zzVq5TVVUgHxYX25gspPyHbtxhb5hbFNzsCUlvy+J2EMH
oh421hwSWTH4ptSsnpd4Lx3ntMIY1w84MR5MMMmXLTTjY9q2EG2S+LgwokZcPCex
g6tC0duB8Xc62Dsl6Sbh1NG7t2zUuEcEH4tDDpCOXeMy2wmOp/64mIC0O29XNe1o
NWDQKHAnVC1K3nQBFkK2djREFPelzHh5/eTAyvECoqaNS84DDVL9FZHgMHxukwMq
+g57+rKmvsjK001emrXDFnu8QYamY6YrSdCC2zZt00RvLanOw3YyP0D0ARVJ8vIV
RbaiWCLI2NPUx/btEEML3SyNZOTDDm6sSRQ=
-----END CERTIFICATE-----
Generated at Sun Mar 1 19:14:23 2026 by rpki-client