
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa
File: b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa (raw, json)
Hash identifier: pNUGWzSdWnU6EHU6TILe3AD1OwnuHWjgpjOghycuhKE=
Subject key identifier: 53:81:B4:11:05:C2:09:61:41:4C:C6:53:C6:D0:67:F8:91:EA:23:7D
Certificate issuer: /CN=0a9d33e4-ed4d-4b47-b363-b42110f88557
Certificate serial: 010D0C9F4328584F119CF7FFCA3B0EC6CD552490
Authority key identifier: 8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa
Signing time: Sat 05 Sep 2026 01:00:12 +0000
ROA not before: Sat 05 Sep 2026 01:00:12 +0000
ROA not after: Fri 04 Dec 2026 02:00:12 +0000
asID: 395214
IP address blocks: 2602:ff3d::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 04 Oct 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:11:9c:f7:ff:ca:3b:0e:c6:cd:55:24:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0a9d33e4-ed4d-4b47-b363-b42110f88557
Validity
Not Before: Sep 5 01:00:12 2026 GMT
Not After : Dec 4 02:00:12 2026 GMT
Subject: CN=68816a1d-038b-4f1a-9e59-e0e4c28c3b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:b3:f8:dd:cf:46:67:32:86:d7:cb:4f:7d:1b:
cf:77:df:c4:2d:b0:55:7c:dc:85:50:0d:34:90:66:
72:d1:92:85:59:4a:d3:6c:f6:23:a6:6a:61:71:0e:
d3:9d:3b:b5:fb:27:2e:9d:5d:35:c0:83:01:6f:28:
ff:25:4a:f5:60:87:ed:78:70:b3:9a:68:14:41:b6:
69:4a:03:42:48:14:a7:a1:95:96:b1:13:00:f6:fb:
9b:d4:ae:f5:e1:a0:32:5a:04:90:ed:1f:fc:5a:65:
6d:3f:8a:10:91:40:03:62:70:bd:a7:d5:5d:01:6f:
70:12:5d:43:02:9c:23:30:3b:8c:cd:bc:d8:cb:69:
ae:2d:8f:c1:db:8b:f2:40:56:80:05:77:f1:5b:d4:
1a:04:c6:1e:88:3f:aa:17:b5:89:7d:35:37:89:21:
97:60:50:13:9b:e3:86:5b:aa:74:9f:a2:57:0c:3b:
58:ae:99:bc:f4:2e:66:ff:de:0a:51:ca:af:61:9a:
77:3e:06:c5:f7:53:ca:7a:31:9e:1c:8e:54:ca:9f:
a8:c8:fc:97:98:2d:ee:5a:44:91:93:c4:a8:bd:13:
cc:fb:47:55:da:f6:d4:f7:54:a0:75:19:7d:64:8f:
2c:e0:ba:68:de:80:88:39:a1:7f:9e:f0:fd:a1:6a:
64:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:81:B4:11:05:C2:09:61:41:4C:C6:53:C6:D0:67:F8:91:EA:23:7D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/b1d7a38e-1c90-3f83-91c8-ae777a795e58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557/0a9d33e4-ed4d-4b47-b363-b42110f88557.crl
X509v3 Authority Key Identifier:
keyid:8B:65:0F:A5:8E:C3:A9:0D:82:74:8D:DA:2E:95:21:E2:D7:FD:DA:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0a9d33e4-ed4d-4b47-b363-b42110f88557.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:ff3d::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bb:3c:4e:0f:96:76:32:1b:7c:f0:08:65:10:76:fc:61:85:bc:
89:69:34:20:9b:ff:d2:eb:19:5b:66:99:ad:aa:fc:93:e9:e1:
9b:16:15:1c:e8:b6:a1:3c:de:19:84:68:81:3f:c4:dc:9c:ea:
66:fc:71:66:7e:c0:bd:27:f8:ba:64:a0:90:7b:4e:93:5e:e9:
45:d0:f9:61:27:a0:12:29:ad:7f:1f:8f:04:7f:84:f7:4d:24:
53:c1:b4:be:6d:3b:16:c3:f5:78:9e:c7:d1:2f:22:9e:34:ed:
78:cf:43:63:3f:46:dd:a1:ae:ea:4b:0b:a3:ac:2d:72:8b:c9:
d1:b7:92:87:63:82:6d:a3:b2:a9:3e:f4:b9:68:d4:b9:98:be:
95:a5:4e:03:89:79:0b:b7:04:98:02:e8:f5:8a:32:37:7c:93:
8c:4d:5d:2c:7c:45:a2:37:bf:f6:f1:06:3a:07:f5:24:cd:b7:
52:51:69:5f:82:4b:10:31:39:e5:67:68:28:3c:88:20:f7:72:
8a:24:d2:97:38:1e:f9:59:fa:df:93:e1:7f:62:87:dc:7e:b4:
16:9b:9c:f5:60:c1:45:fa:2d:fa:ad:4b:ba:35:66:eb:bb:2c:
f7:29:94:0c:31:b6:a0:cf:23:ca:39:ef:e1:ff:9a:3d:1b:a2:
20:77:26:fa
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE8RnPf/yjsOxs1VJJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIzNjMtYjQyMTEwZjg4
NTU3MB4XDTI2MDkwNTAxMDAxMloXDTI2MTIwNDAyMDAxMlowLzEtMCsGA1UEAxMk
Njg4MTZhMWQtMDM4Yi00ZjFhLTllNTktZTBlNGMyOGMzYjI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh7P43c9GZzKG18tPfRvPd9/ELbBVfNyFUA00
kGZy0ZKFWUrTbPYjpmphcQ7TnTu1+ycunV01wIMBbyj/JUr1YIfteHCzmmgUQbZp
SgNCSBSnoZWWsRMA9vub1K714aAyWgSQ7R/8WmVtP4oQkUADYnC9p9VdAW9wEl1D
ApwjMDuMzbzYy2muLY/B24vyQFaABXfxW9QaBMYeiD+qF7WJfTU3iSGXYFATm+OG
W6p0n6JXDDtYrpm89C5m/94KUcqvYZp3PgbF91PKejGeHI5Uyp+oyPyXmC3uWkSR
k8SovRPM+0dV2vbU91SgdRl9ZI8s4Lpo3oCIOaF/nvD9oWpk6QIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFFOBtBEFwglhQUzGU8bQZ/iR6iN9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlk
MzNlNC1lZDRkLTRiNDctYjM2My1iNDIxMTBmODg1NTcvYjFkN2EzOGUtMWM5MC0z
ZjgzLTkxYzgtYWU3NzdhNzk1ZTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGE5ZDMzZTQtZWQ0ZC00YjQ3LWIz
NjMtYjQyMTEwZjg4NTU3LzBhOWQzM2U0LWVkNGQtNGI0Ny1iMzYzLWI0MjExMGY4
ODU1Ny5jcmwwHwYDVR0jBBgwFoAUi2UPpY7DqQ2CdI3aLpUh4tf92n4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYTlkMzNlNC1lZDRkLTRiNDctYjM2My1iNDIx
MTBmODg1NTcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL/PQAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAuzxOD5Z2Mht88AhlEHb8YYW8iWk0IJv/0usZW2aZrar8k+nhmxYV
HOi2oTzeGYRogT/E3JzqZvxxZn7AvSf4umSgkHtOk17pRdD5YSegEimtfx+PBH+E
900kU8G0vm07FsP1eJ7H0S8injTteM9DYz9G3aGu6ksLo6wtcovJ0beSh2OCbaOy
qT70uWjUuZi+laVOA4l5C7cEmALo9YoyN3yTjE1dLHxFoje/9vEGOgf1JM23UlFp
X4JLEDE55WdoKDyIIPdyiiTSlzge+Vn635Phf2KH3H60Fpuc9WDBRfot+q1LujVm
67ss9ymUDDG2oM8jyjnv4f+aPRuiIHcm+g==
-----END CERTIFICATE-----
Generated at Sat Oct 3 14:07:26 2026 by rpki-client