
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2409b151-6b7c-3161-818e-022ec619f608.roa
File: 2409b151-6b7c-3161-818e-022ec619f608.roa (raw, json)
Hash identifier: eLMUYQ+s6xAxeWZK+IGzhcFVPOsd54ZuKy2e5IWzT0I=
Subject key identifier: 84:A4:5E:17:82:0E:D7:E3:DC:1C:4B:77:6D:79:41:EE:4C:84:92:1C
Certificate issuer: /CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Certificate serial: 010D0C9F4328584EA79A05E8C90B98BDAB6EFB00
Authority key identifier: 50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2409b151-6b7c-3161-818e-022ec619f608.roa
Signing time: Wed 29 Jul 2026 01:00:12 +0000
ROA not before: Wed 29 Jul 2026 01:00:12 +0000
ROA not after: Tue 27 Oct 2026 01:00:12 +0000
asID: 206804
IP address blocks: 2604:ea80:6200::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 30 Jul 2026 10:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:a7:9a:05:e8:c9:0b:98:bd:ab:6e:fb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ab2447c-9735-4548-ac30-fc578e8e36ba
Validity
Not Before: Jul 29 01:00:12 2026 GMT
Not After : Oct 27 01:00:12 2026 GMT
Subject: CN=9b1e9526-a74e-414f-8b4f-71e1fb00fec7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:9a:c5:e7:5c:d2:a7:6e:73:60:f1:50:2e:7b:
d5:4c:39:3a:c0:10:85:fe:c1:4a:2d:4a:70:4e:c1:
52:7f:38:d9:b3:25:70:ef:1d:1b:50:36:ca:ef:f2:
a8:e8:95:ba:af:6c:8e:ef:65:32:55:23:e8:24:3c:
75:ef:66:d3:fb:20:40:2c:1b:9c:9a:19:67:66:a2:
a8:c5:f3:a4:27:7e:fb:54:f6:ed:cb:0e:02:ea:cc:
ed:88:e6:b9:de:10:28:5d:20:38:67:dc:04:01:a0:
7e:6c:88:56:5f:61:d9:67:38:22:4b:53:a2:5a:0b:
74:75:c5:30:dd:68:55:8a:8a:f3:bc:01:33:3d:02:
56:59:27:32:26:95:a6:4a:f6:91:1a:2a:0c:f0:7a:
21:a0:60:12:af:89:df:e4:c6:6f:cd:84:ea:68:46:
c3:e0:e8:12:d5:d2:ed:35:17:27:f3:46:68:ea:f5:
12:d9:47:df:91:ce:c5:90:09:94:4e:ef:a7:78:60:
cb:1f:5e:c9:b8:94:76:52:f8:94:bd:2f:95:f7:d4:
91:c9:6e:1f:c5:76:c1:8f:34:0f:73:4b:b3:cd:bf:
db:d9:1b:31:19:df:8d:b9:66:05:66:28:de:16:f5:
a7:1f:41:f6:88:30:fc:72:70:fc:5e:26:15:75:2f:
a2:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:A4:5E:17:82:0E:D7:E3:DC:1C:4B:77:6D:79:41:EE:4C:84:92:1C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/2409b151-6b7c-3161-818e-022ec619f608.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba/0ab2447c-9735-4548-ac30-fc578e8e36ba.crl
X509v3 Authority Key Identifier:
keyid:50:1A:13:32:60:6C:E8:3D:0D:71:EF:D8:32:F1:6F:1E:A4:73:DB:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0ab2447c-9735-4548-ac30-fc578e8e36ba.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:ea80:6200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
68:a8:b7:4f:c9:00:3a:d5:76:c8:27:0e:93:9d:29:b1:d0:84:
5d:20:73:f5:fd:4a:95:c9:68:ec:e0:d1:1f:63:b3:bf:6b:48:
6c:4e:9a:d2:65:3b:48:35:40:1e:bf:da:c8:92:f9:96:08:7d:
e2:9a:44:21:4d:2a:b3:59:a3:c0:ab:7b:17:06:4f:2d:8f:63:
c6:5e:e1:85:71:e5:52:da:cb:c7:36:90:a1:6e:69:9d:c5:e7:
db:f0:b2:b3:12:24:4b:33:6d:ba:74:14:77:ae:41:97:96:3f:
8e:ca:92:94:67:54:fd:ef:56:f5:1c:b0:73:55:b3:50:d8:86:
19:2b:5d:88:de:bc:5e:fe:5b:9f:a2:9d:27:6a:21:a6:7d:90:
55:d0:2e:18:81:0e:84:61:79:3d:53:c4:f9:85:39:be:7b:d1:
ff:e9:74:ed:7c:dc:e9:d6:89:ca:05:45:52:f0:bf:b6:75:29:
44:21:15:a2:ee:31:d2:b0:34:4b:ee:a0:c7:de:77:f2:4e:4b:
81:f2:62:2b:dc:1d:c8:ee:f8:1a:1f:31:c9:60:f3:f1:01:18:
47:ac:a6:c9:ff:77:ec:53:a0:e2:94:d1:01:98:e6:81:99:6f:
a7:d4:1e:3b:4f:81:12:f9:ee:2e:4f:8d:90:d0:e5:0e:70:0e:
33:61:ca:3c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE6nmgXoyQuYvatu+wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFiMjQ0N2MtOTczNS00NTQ4LWFjMzAtZmM1NzhlOGUz
NmJhMB4XDTI2MDcyOTAxMDAxMloXDTI2MTAyNzAxMDAxMlowLzEtMCsGA1UEAxMk
OWIxZTk1MjYtYTc0ZS00MTRmLThiNGYtNzFlMWZiMDBmZWM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApJrF51zSp25zYPFQLnvVTDk6wBCF/sFKLUpw
TsFSfzjZsyVw7x0bUDbK7/Ko6JW6r2yO72UyVSPoJDx172bT+yBALBucmhlnZqKo
xfOkJ377VPbtyw4C6sztiOa53hAoXSA4Z9wEAaB+bIhWX2HZZzgiS1OiWgt0dcUw
3WhViorzvAEzPQJWWScyJpWmSvaRGioM8HohoGASr4nf5MZvzYTqaEbD4OgS1dLt
NRcn80Zo6vUS2Uffkc7FkAmUTu+neGDLH17JuJR2UviUvS+V99SRyW4fxXbBjzQP
c0uzzb/b2RsxGd+NuWYFZijeFvWnH0H2iDD8cnD8XiYVdS+ihwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFISkXheCDtfj3BxLd215Qe5MhJIcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIy
NDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3OGU4ZTM2YmEvMjQwOWIxNTEtNmI3Yy0z
MTYxLTgxOGUtMDIyZWM2MTlmNjA4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGFiMjQ0N2MtOTczNS00NTQ4LWFj
MzAtZmM1NzhlOGUzNmJhLzBhYjI0NDdjLTk3MzUtNDU0OC1hYzMwLWZjNTc4ZThl
MzZiYS5jcmwwHwYDVR0jBBgwFoAUUBoTMmBs6D0Nce/YMvFvHqRz25QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wYWIyNDQ3Yy05NzM1LTQ1NDgtYWMzMC1mYzU3
OGU4ZTM2YmEuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgTqgGIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAaKi3T8kAOtV2yCcOk50psdCEXSBz9f1Klclo7ODRH2Ozv2tIbE6a
0mU7SDVAHr/ayJL5lgh94ppEIU0qs1mjwKt7FwZPLY9jxl7hhXHlUtrLxzaQoW5p
ncXn2/CysxIkSzNtunQUd65Bl5Y/jsqSlGdU/e9W9Rywc1WzUNiGGStdiN68Xv5b
n6KdJ2ohpn2QVdAuGIEOhGF5PVPE+YU5vnvR/+l07Xzc6daJygVFUvC/tnUpRCEV
ou4x0rA0S+6gx9538k5LgfJiK9wdyO74Gh8xyWDz8QEYR6ymyf937FOg4pTRAZjm
gZlvp9QeO0+BEvnuLk+NkNDlDnAOM2HKPA==
-----END CERTIFICATE-----
Generated at Wed Jul 29 11:03:38 2026 by rpki-client