
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/da6d3278-630b-3d7c-bfef-e933738ebf00.roa
File: da6d3278-630b-3d7c-bfef-e933738ebf00.roa (raw, json)
Hash identifier: rcRrFJyPGiMU/HB86UWWh6zmLMpo7RmO6kfKHrJQXew=
Subject key identifier: C5:AD:FD:48:41:E9:6E:03:FD:5C:31:16:E2:45:3A:FA:FA:63:28:30
Certificate issuer: /CN=2b478b8e-451b-4ff9-be29-b8e2c5620737
Certificate serial: 010D0C9F4328584F4989067CA85EA162783D9940
Authority key identifier: CF:63:99:31:20:1C:76:2F:99:C4:03:8C:3D:D1:80:A1:3E:89:5A:A7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/da6d3278-630b-3d7c-bfef-e933738ebf00.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 395308
IP address blocks: 2602:f3cc::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/2b478b8e-451b-4ff9-be29-b8e2c5620737.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/2b478b8e-451b-4ff9-be29-b8e2c5620737.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 28 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:89:06:7c:a8:5e:a1:62:78:3d:99:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2b478b8e-451b-4ff9-be29-b8e2c5620737
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=904df403-1058-4b89-83af-1303de9ed772
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:66:69:f7:e8:75:91:ec:e2:84:33:cf:d5:2a:
c8:02:80:69:ac:80:dd:24:ff:9a:04:4d:38:94:41:
96:e5:1d:93:e3:a2:ac:4a:e0:6e:d5:31:b9:b1:0d:
43:c7:a5:b5:58:d4:33:05:87:8f:77:00:93:4c:a8:
e1:f8:0b:45:72:97:34:b7:18:86:79:8c:6a:ea:b8:
4a:bb:46:c7:50:6b:5e:ef:4c:ab:f6:6a:e8:4c:52:
48:52:9d:b0:76:87:71:ab:9a:e5:8e:ef:c2:6d:5b:
1d:41:a8:cd:57:94:dc:fc:28:57:19:bb:c5:10:1e:
5b:79:09:6f:f7:d9:e0:81:16:3e:96:3f:80:bf:22:
97:86:fd:87:45:2f:9a:40:be:d7:ae:e5:45:f8:94:
3d:51:90:80:37:33:81:6a:9f:eb:fc:3f:07:2e:44:
1b:84:e5:b1:eb:21:85:88:a3:d3:44:ce:99:c9:0c:
bc:f5:3b:a0:65:29:31:01:7a:67:c0:00:b0:aa:68:
d1:02:31:7b:3b:a8:08:b6:76:03:3d:5c:6d:81:86:
58:3b:06:85:14:dc:05:cb:05:5d:91:09:2a:cc:e3:
42:fe:59:3a:bd:67:3a:46:01:43:3b:3c:f8:65:5f:
cc:aa:d1:94:69:d1:53:91:3c:a2:6c:fa:f0:ea:f8:
a9:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:AD:FD:48:41:E9:6E:03:FD:5C:31:16:E2:45:3A:FA:FA:63:28:30
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/da6d3278-630b-3d7c-bfef-e933738ebf00.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737/2b478b8e-451b-4ff9-be29-b8e2c5620737.crl
X509v3 Authority Key Identifier:
keyid:CF:63:99:31:20:1C:76:2F:99:C4:03:8C:3D:D1:80:A1:3E:89:5A:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2b478b8e-451b-4ff9-be29-b8e2c5620737.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f3cc::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:f5:45:74:6d:75:ac:86:d7:ce:a0:3f:c6:32:48:f9:a5:30:
7c:e4:75:95:55:f2:93:a6:5c:fd:2b:e6:2d:f1:c0:46:94:e0:
14:02:fc:68:64:26:5f:aa:18:72:83:41:c6:9f:2e:fb:74:b8:
fb:7d:88:a9:55:06:8e:ed:1e:92:11:a9:b9:04:38:05:d4:83:
6e:49:15:5f:c7:5b:13:d3:3e:80:47:07:2d:29:78:06:53:73:
e4:68:bd:07:4f:01:bd:b7:48:c2:35:a0:6d:6f:5c:e3:23:b0:
24:d5:f1:56:8a:d0:89:d1:a3:ff:a8:89:a2:c5:99:e9:ea:26:
a6:bb:ae:26:da:27:80:5d:50:68:be:30:bf:79:84:8e:1c:3a:
e4:a2:2e:e3:f8:2d:38:e2:71:b3:af:06:7b:3c:0e:05:cb:97:
51:87:8a:3e:97:4f:a0:fe:41:13:87:66:80:84:a7:71:8a:87:
aa:30:0d:90:27:8d:43:fb:61:f6:9e:b8:3c:ef:a7:c3:02:e1:
88:df:76:61:45:2c:1b:81:e2:9b:e4:4d:7a:63:20:59:7d:00:
ff:bc:e1:be:4a:ed:95:b2:06:a6:ae:bb:38:51:69:73:c7:01:
e9:d7:42:8c:ad:6f:f6:e4:24:2c:48:f0:61:d2:26:11:61:4d:
59:72:a1:de
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JiQZ8qF6hYng9mUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI0NzhiOGUtNDUxYi00ZmY5LWJlMjktYjhlMmM1NjIw
NzM3MB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
OTA0ZGY0MDMtMTA1OC00Yjg5LTgzYWYtMTMwM2RlOWVkNzcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGZp9+h1kezihDPP1SrIAoBprIDdJP+aBE04
lEGW5R2T46KsSuBu1TG5sQ1Dx6W1WNQzBYePdwCTTKjh+AtFcpc0txiGeYxq6rhK
u0bHUGte70yr9mroTFJIUp2wdodxq5rlju/CbVsdQajNV5Tc/ChXGbvFEB5beQlv
99nggRY+lj+AvyKXhv2HRS+aQL7XruVF+JQ9UZCANzOBap/r/D8HLkQbhOWx6yGF
iKPTRM6ZyQy89TugZSkxAXpnwACwqmjRAjF7O6gItnYDPVxtgYZYOwaFFNwFywVd
kQkqzONC/lk6vWc6RgFDOzz4ZV/MqtGUadFTkTyibPrw6vipdwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMWt/UhB6W4D/VwxFuJFOvr6YygwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yYjQ3
OGI4ZS00NTFiLTRmZjktYmUyOS1iOGUyYzU2MjA3MzcvZGE2ZDMyNzgtNjMwYi0z
ZDdjLWJmZWYtZTkzMzczOGViZjAwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmI0NzhiOGUtNDUxYi00ZmY5LWJl
MjktYjhlMmM1NjIwNzM3LzJiNDc4YjhlLTQ1MWItNGZmOS1iZTI5LWI4ZTJjNTYy
MDczNy5jcmwwHwYDVR0jBBgwFoAUz2OZMSAcdi+ZxAOMPdGAoT6JWqcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yYjQ3OGI4ZS00NTFiLTRmZjktYmUyOS1iOGUy
YzU2MjA3MzcuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgLzzAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAM/VFdG11rIbXzqA/xjJI+aUwfOR1lVXyk6Zc/SvmLfHARpTgFAL8
aGQmX6oYcoNBxp8u+3S4+32IqVUGju0ekhGpuQQ4BdSDbkkVX8dbE9M+gEcHLSl4
BlNz5Gi9B08BvbdIwjWgbW9c4yOwJNXxVorQidGj/6iJosWZ6eompruuJtongF1Q
aL4wv3mEjhw65KIu4/gtOOJxs68GezwOBcuXUYeKPpdPoP5BE4dmgISncYqHqjAN
kCeNQ/th9p64PO+nwwLhiN92YUUsG4Him+RNemMgWX0A/7zhvkrtlbIGpq67OFFp
c8cB6ddCjK1v9uQkLEjwYdImEWFNWXKh3g==
-----END CERTIFICATE-----
Generated at Sat Sep 26 13:15:39 2026 by rpki-client