
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa
File: da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa (raw, json)
Hash identifier: JZJs9Nj6yLHa66zY2lmfUBkbmd9wLTyyCzuN4dgE3Oc=
Subject key identifier: 61:33:24:FA:96:71:42:82:BE:FD:4D:D7:61:7D:A7:6E:08:93:68:94
Certificate issuer: /CN=04efd7cc-0d91-448d-bd9a-256355cac421
Certificate serial: 010D0C9F4328584EA5AA9A2A34B80F740557BF00
Authority key identifier: 2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa
Signing time: Tue 28 Jul 2026 09:00:11 +0000
ROA not before: Tue 28 Jul 2026 09:00:11 +0000
ROA not after: Mon 26 Oct 2026 09:00:11 +0000
asID: 9304
IP address blocks: 2602:f3d9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a5:aa:9a:2a:34:b8:0f:74:05:57:bf:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=04efd7cc-0d91-448d-bd9a-256355cac421
Validity
Not Before: Jul 28 09:00:11 2026 GMT
Not After : Oct 26 09:00:11 2026 GMT
Subject: CN=01751a52-8049-40b1-90fd-7d69700c5098
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:04:66:30:b1:13:b7:2b:4d:a7:62:57:3b:bf:
1a:d8:45:fa:3a:74:c8:cb:f1:d4:d0:31:9b:4d:bf:
23:bc:cc:47:8c:e7:38:02:d3:a9:20:de:b9:ab:ca:
0d:18:d6:04:5c:49:e2:26:ae:5e:b8:17:cd:c0:7a:
f5:92:13:8e:a5:ed:fd:ee:e8:87:6e:9a:d4:4c:32:
75:e1:d1:dd:de:a9:4c:fc:bd:04:e1:1e:59:9a:9b:
84:c8:61:f9:b3:1b:ee:e1:1d:46:2c:6c:be:3a:7e:
d2:60:74:cf:5e:25:60:64:13:6d:d5:c7:7a:94:55:
c7:7e:36:23:31:59:8c:64:d6:b6:4d:87:b7:2e:e6:
88:b7:65:14:ce:68:a1:c7:5d:98:5b:9a:65:b6:e3:
a0:44:55:ba:70:c0:7e:1a:42:59:b5:1b:70:67:71:
11:20:97:46:84:b6:09:08:08:8b:ee:21:a0:db:cf:
63:86:fb:bb:86:82:a4:79:d9:f5:e9:a5:04:40:5c:
31:e8:5c:00:9a:fb:93:49:f2:23:69:bb:a7:ac:66:
87:e9:21:b3:30:a4:6e:ae:01:7d:1c:ea:11:fb:6a:
fe:41:5d:36:4f:46:c0:8e:eb:01:40:48:43:5c:50:
7c:1f:18:d5:6b:ec:0c:7b:92:5e:d3:5a:c7:06:5e:
7e:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:33:24:FA:96:71:42:82:BE:FD:4D:D7:61:7D:A7:6E:08:93:68:94
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/da2a649a-ac6f-3d71-8e8b-c98c4bef3f7a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421/04efd7cc-0d91-448d-bd9a-256355cac421.crl
X509v3 Authority Key Identifier:
keyid:2C:AF:48:10:50:AB:80:1B:43:FC:88:46:91:F1:4E:9A:B6:BA:A8:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/04efd7cc-0d91-448d-bd9a-256355cac421.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f3d9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3c:23:df:59:60:fb:95:30:c3:68:03:1f:a9:3f:53:ac:f0:83:
63:87:ab:0f:1d:cc:71:d5:0c:31:de:bf:cf:bb:0e:73:7a:03:
5e:48:9b:7c:9a:1c:50:e1:73:a3:11:96:c1:12:85:1e:4f:69:
3b:3f:93:11:f0:ec:df:89:eb:02:c1:e8:5f:88:de:16:bd:c7:
81:ad:ab:c2:dc:46:d0:1b:4e:80:1d:9b:a8:46:f3:09:ad:05:
3e:94:f1:4d:60:75:64:7c:40:b6:eb:48:ee:fc:7b:c8:3a:fa:
f2:e4:6e:a0:e2:df:f7:b9:9d:87:7a:64:a1:a3:7d:d8:69:9c:
fa:0c:fa:5a:f1:87:e2:d0:d2:5f:b6:ac:f7:e7:3d:d5:1b:10:
28:7d:4d:91:08:82:9c:ad:f3:0c:2b:9f:15:25:20:e6:ed:d3:
98:96:b8:df:1d:ac:0a:c5:18:f9:6b:0f:e1:f4:b2:b5:37:d5:
62:fa:76:09:2b:35:0e:cb:78:9c:d4:01:12:22:f2:0c:71:66:
6c:4f:30:63:1f:4c:81:fa:15:f0:86:b7:41:91:b3:a1:ef:5f:
9b:19:d5:39:92:51:0e:74:85:fa:62:63:13:1c:57:1b:ce:20:
13:62:3e:a2:42:68:cf:81:a6:8d:63:80:dd:c5:b0:6a:7c:65:
39:c8:ef:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 29 03:28:57 2026 by rpki-client