
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/32108e9a-77ed-35f0-95d7-1039047af86b.roa
File: 32108e9a-77ed-35f0-95d7-1039047af86b.roa (raw, json)
Hash identifier: ukFnKCrNNmYo0+qJlnNDbGSghIeLKSje8rpSBj4NbuQ=
Subject key identifier: F4:46:57:B5:2C:4C:6C:86:F0:37:0A:64:E0:36:2E:6E:FA:05:48:2A
Certificate issuer: /CN=1a767fb3-0911-435a-a3a4-189b82622157
Certificate serial: 010D0C9F4328584D852FCFB45663A433910A0C7F
Authority key identifier: 31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/32108e9a-77ed-35f0-95d7-1039047af86b.roa
Signing time: Thu 16 Apr 2026 01:00:23 +0000
ROA not before: Thu 16 Apr 2026 01:00:23 +0000
ROA not after: Wed 15 Jul 2026 01:00:23 +0000
asID: 400919
IP address blocks: 2602:817:2008::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:85:2f:cf:b4:56:63:a4:33:91:0a:0c:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1a767fb3-0911-435a-a3a4-189b82622157
Validity
Not Before: Apr 16 01:00:23 2026 GMT
Not After : Jul 15 01:00:23 2026 GMT
Subject: CN=b8e56e87-224c-4580-a946-68967c1ad457
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:45:b3:82:87:ed:8a:c4:af:64:fe:06:25:3b:
e2:2a:67:2f:78:ee:83:bf:43:03:bf:a9:97:d9:45:
60:21:64:f1:d0:78:f5:46:60:ef:f6:08:45:22:f2:
96:30:ea:68:60:60:fe:53:c9:b7:e1:67:9b:87:d7:
f8:d5:62:bc:4d:30:08:c0:3b:d6:5e:44:da:b0:a4:
54:13:46:e2:f0:2d:ae:ec:86:32:90:f2:b8:78:45:
39:55:83:e0:d6:f9:4a:7b:c4:52:a1:26:11:60:12:
22:a1:eb:2b:f4:18:2c:41:b9:f9:08:38:e3:1d:57:
13:3a:8e:57:81:45:f6:0f:66:5e:6a:12:ba:ef:5e:
fb:12:a6:c5:f4:06:0b:f9:0e:9a:75:00:45:60:9f:
c0:35:12:f9:27:9c:30:b7:a4:85:8a:17:d7:30:16:
4e:50:97:6a:4f:58:43:e5:52:c0:eb:8a:e9:fa:38:
d2:1b:d1:fe:20:11:08:49:19:76:bc:d0:91:79:3c:
11:91:db:94:ac:5e:7c:83:18:9c:51:5a:50:4f:07:
80:b5:e9:2e:77:71:9a:d3:94:d2:44:9a:2c:4b:a6:
41:49:65:81:e1:28:4f:2f:c1:82:42:ad:0b:da:37:
cc:ab:ab:c4:85:dc:06:4b:a6:b7:37:cd:b3:fc:da:
9e:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:46:57:B5:2C:4C:6C:86:F0:37:0A:64:E0:36:2E:6E:FA:05:48:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/32108e9a-77ed-35f0-95d7-1039047af86b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157/1a767fb3-0911-435a-a3a4-189b82622157.crl
X509v3 Authority Key Identifier:
keyid:31:97:7C:7C:A4:EC:D4:79:62:19:2C:6B:0C:04:24:AF:34:D5:74:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1a767fb3-0911-435a-a3a4-189b82622157.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:817:2008::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
97:ed:06:a7:7a:07:43:78:46:de:e0:5a:f4:ec:e3:e8:3b:a9:
9b:a2:8d:8d:c7:11:ae:67:7e:48:38:4c:c0:a9:27:71:20:39:
53:b7:0f:97:73:5c:95:5c:04:88:54:16:a7:42:89:5f:9f:54:
fa:ea:b1:68:d3:dd:c5:36:4a:ae:86:1c:cb:49:21:a2:2d:83:
02:34:a7:76:6d:00:f0:ae:12:31:62:70:8d:0e:2d:aa:17:ad:
f8:4c:76:3d:47:7d:e8:2d:be:a6:0e:a3:62:c4:f8:d2:43:f8:
75:b5:bd:f0:8d:3d:db:ab:81:8d:b7:98:43:07:47:97:82:eb:
c7:10:b0:2c:64:b7:8d:8f:4f:13:94:37:11:27:41:ab:21:48:
fb:46:7b:af:d0:2d:40:9b:93:e2:2b:74:3c:ab:ef:4f:45:18:
45:6a:c2:cf:b0:09:e7:f4:3c:a5:fb:ea:78:8d:50:ca:8d:2c:
b7:2d:77:7c:6f:04:0c:35:46:6e:e1:70:57:ee:87:9a:b0:87:
87:70:82:93:69:79:b5:eb:ec:e4:c6:10:f5:b0:b0:df:36:71:
08:9e:90:d3:9c:5f:06:5f:70:f6:f7:7f:9b:92:53:ba:40:c7:
fb:e7:4f:e4:24:46:a3:69:0e:d9:6f:b1:81:db:2a:ab:db:1a:
ed:23:08:5b
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2FL8+0VmOkM5EKDH8wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE3NjdmYjMtMDkxMS00MzVhLWEzYTQtMTg5YjgyNjIy
MTU3MB4XDTI2MDQxNjAxMDAyM1oXDTI2MDcxNTAxMDAyM1owLzEtMCsGA1UEAxMk
YjhlNTZlODctMjI0Yy00NTgwLWE5NDYtNjg5NjdjMWFkNDU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0WzgoftisSvZP4GJTviKmcveO6Dv0MDv6mX
2UVgIWTx0Hj1RmDv9ghFIvKWMOpoYGD+U8m34Webh9f41WK8TTAIwDvWXkTasKRU
E0bi8C2u7IYykPK4eEU5VYPg1vlKe8RSoSYRYBIioesr9BgsQbn5CDjjHVcTOo5X
gUX2D2ZeahK67177EqbF9AYL+Q6adQBFYJ/ANRL5J5wwt6SFihfXMBZOUJdqT1hD
5VLA64rp+jjSG9H+IBEISRl2vNCReTwRkduUrF58gxicUVpQTweAtekud3Ga05TS
RJosS6ZBSWWB4ShPL8GCQq0L2jfMq6vEhdwGS6a3N82z/NqezQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFPRGV7UsTGyG8DcKZOA2Lm76BUgqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYTc2
N2ZiMy0wOTExLTQzNWEtYTNhNC0xODliODI2MjIxNTcvMzIxMDhlOWEtNzdlZC0z
NWYwLTk1ZDctMTAzOTA0N2FmODZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWE3NjdmYjMtMDkxMS00MzVhLWEz
YTQtMTg5YjgyNjIyMTU3LzFhNzY3ZmIzLTA5MTEtNDM1YS1hM2E0LTE4OWI4MjYy
MjE1Ny5jcmwwHwYDVR0jBBgwFoAUMZd8fKTs1HliGSxrDAQkrzTVdKEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xYTc2N2ZiMy0wOTExLTQzNWEtYTNhNC0xODli
ODI2MjIxNTcuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgIIFyAI
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJftBqd6B0N4Rt7gWvTs4+g7qZuijY3HEa5nfkg4TMCpJ3EgOVO3
D5dzXJVcBIhUFqdCiV+fVPrqsWjT3cU2Sq6GHMtJIaItgwI0p3ZtAPCuEjFicI0O
LaoXrfhMdj1HfegtvqYOo2LE+NJD+HW1vfCNPdurgY23mEMHR5eC68cQsCxkt42P
TxOUNxEnQashSPtGe6/QLUCbk+IrdDyr709FGEVqws+wCef0PKX76niNUMqNLLct
d3xvBAw1Rm7hcFfuh5qwh4dwgpNpebXr7OTGEPWwsN82cQiekNOcXwZfcPb3f5uS
U7pAx/vnT+QkRqNpDtlvsYHbKqvbGu0jCFs=
-----END CERTIFICATE-----
Generated at Fri Apr 17 21:27:40 2026 by rpki-client