
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa
File: 04e7a50e-fdc0-3566-ac52-d12172993b6b.roa (raw, json)
Hash identifier: QzJ/8LpORtKV/dr/2pEZXxyo5v0ryJ85fUAk5iyckNU=
Subject key identifier: DB:BC:86:0A:3F:7F:2B:43:70:DE:DA:36:D7:3A:71:F8:5F:13:83:F2
Certificate issuer: /CN=5e6c5242-5ff7-40a8-b144-1f151915227e
Certificate serial: 010D0C9F4328584D80FFE33B891F88FCF36E3480
Authority key identifier: BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa
Signing time: Tue 14 Apr 2026 13:00:30 +0000
ROA not before: Tue 14 Apr 2026 13:00:30 +0000
ROA not after: Mon 13 Jul 2026 13:00:30 +0000
asID: 8987
IP address blocks: 2602:fd3a:228::/45 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:80:ff:e3:3b:89:1f:88:fc:f3:6e:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e6c5242-5ff7-40a8-b144-1f151915227e
Validity
Not Before: Apr 14 13:00:30 2026 GMT
Not After : Jul 13 13:00:30 2026 GMT
Subject: CN=66e9e88e-3932-4400-9c43-0607f76144f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:82:58:ef:bf:5a:ea:5a:ae:1a:40:a0:cb:55:
73:58:7d:15:55:3c:9a:68:a6:e3:cb:da:c3:f7:9c:
1d:47:cf:fa:de:6e:eb:2a:20:06:bd:7f:fd:df:d0:
76:7a:b9:d3:d6:e7:d0:14:37:30:05:f4:61:b5:81:
ea:a7:41:d8:f2:f1:16:6d:6c:f8:8e:b8:22:31:10:
bf:bd:d6:0f:20:53:80:8e:c4:82:1c:84:8c:39:48:
23:a4:68:46:f0:28:94:0a:70:8d:e5:e4:3a:3b:2c:
42:6e:4f:e9:15:a2:41:0d:de:64:cc:96:64:6c:0a:
03:6f:86:1c:b4:1f:0c:12:46:d1:91:30:9d:76:db:
47:80:81:8d:d6:2f:1e:24:8e:53:bd:c4:88:3b:e4:
b9:a5:6c:14:86:8b:54:8f:4c:67:9c:d7:b0:20:40:
1d:50:28:99:bd:8f:65:2a:4c:75:8e:ab:c7:e3:01:
96:48:6c:79:1d:4e:ae:2f:4b:88:10:ca:b4:a2:8d:
c8:a4:7f:5f:2a:0c:f2:cd:6f:d7:6c:f1:47:f6:e9:
7b:2c:2e:eb:52:97:d4:62:47:49:a0:d6:b9:f0:72:
ce:f0:99:ee:03:af:c5:ab:71:95:66:1f:81:53:5c:
c9:c7:90:71:11:9c:46:f2:12:f8:4e:b1:50:b3:46:
07:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:BC:86:0A:3F:7F:2B:43:70:DE:DA:36:D7:3A:71:F8:5F:13:83:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/04e7a50e-fdc0-3566-ac52-d12172993b6b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e/5e6c5242-5ff7-40a8-b144-1f151915227e.crl
X509v3 Authority Key Identifier:
keyid:BF:7E:0B:08:D0:1C:22:F8:E0:C5:D4:7E:63:D7:3B:56:D5:B8:D7:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5e6c5242-5ff7-40a8-b144-1f151915227e.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd3a:228::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
15:73:ed:34:59:4d:ce:a9:58:04:89:1d:fe:6f:60:33:e1:3e:
5f:45:d1:8b:d9:31:6f:37:cf:9c:e0:04:b3:98:a7:0b:15:d6:
0d:ff:58:87:87:cc:88:e3:0e:1f:05:d3:5a:c7:e4:63:ca:ae:
e0:8e:28:45:5c:a0:d1:e8:04:08:7d:c5:4f:df:ca:00:13:b2:
da:4b:2e:87:3b:c0:81:6a:5e:72:69:cf:78:07:a5:17:a2:48:
42:9d:9e:2e:7c:21:85:bb:3b:4f:02:1d:b9:e6:5e:e0:a2:a8:
6f:94:4a:47:ce:52:b3:6e:cd:6c:48:5e:fb:97:71:71:ee:10:
15:ae:0d:e6:4d:25:2b:76:d0:91:72:bf:e7:af:58:66:47:ec:
be:c1:b2:7d:49:27:d8:59:c3:50:a8:93:56:8f:02:1b:91:4c:
20:53:db:a1:76:c5:df:2b:ef:ac:dd:ea:15:c7:09:db:49:5a:
b9:60:a0:a2:a1:33:22:ef:be:11:b2:7e:e4:b5:b9:64:d4:c9:
a3:1f:e0:e3:a6:b0:4d:13:3e:69:4c:f5:b2:73:29:52:ad:60:
14:59:0e:18:84:39:fa:ce:f7:52:d6:6f:9a:fa:d4:22:4b:24:
24:dc:a7:61:7a:26:a1:fa:68:3d:66:48:3b:ec:e2:81:d9:37:
2a:ef:5b:64
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE2A/+M7iR+I/PNuNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU2YzUyNDItNWZmNy00MGE4LWIxNDQtMWYxNTE5MTUy
MjdlMB4XDTI2MDQxNDEzMDAzMFoXDTI2MDcxMzEzMDAzMFowLzEtMCsGA1UEAxMk
NjZlOWU4OGUtMzkzMi00NDAwLTljNDMtMDYwN2Y3NjE0NGY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YJY779a6lquGkCgy1VzWH0VVTyaaKbjy9rD
95wdR8/63m7rKiAGvX/939B2ernT1ufQFDcwBfRhtYHqp0HY8vEWbWz4jrgiMRC/
vdYPIFOAjsSCHISMOUgjpGhG8CiUCnCN5eQ6OyxCbk/pFaJBDd5kzJZkbAoDb4Yc
tB8MEkbRkTCddttHgIGN1i8eJI5TvcSIO+S5pWwUhotUj0xnnNewIEAdUCiZvY9l
Kkx1jqvH4wGWSGx5HU6uL0uIEMq0oo3IpH9fKgzyzW/XbPFH9ul7LC7rUpfUYkdJ
oNa58HLO8JnuA6/Fq3GVZh+BU1zJx5BxEZxG8hL4TrFQs0YHHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFNu8hgo/fytDcN7aNtc6cfhfE4PyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZj
NTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1MTkxNTIyN2UvMDRlN2E1MGUtZmRjMC0z
NTY2LWFjNTItZDEyMTcyOTkzYjZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWU2YzUyNDItNWZmNy00MGE4LWIx
NDQtMWYxNTE5MTUyMjdlLzVlNmM1MjQyLTVmZjctNDBhOC1iMTQ0LTFmMTUxOTE1
MjI3ZS5jcmwwHwYDVR0jBBgwFoAUv34LCNAcIvjgxdR+Y9c7VtW41+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81ZTZjNTI0Mi01ZmY3LTQwYTgtYjE0NC0xZjE1
MTkxNTIyN2UuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJgL9OgIo
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABVz7TRZTc6pWASJHf5vYDPhPl9F0YvZMW83z5zgBLOYpwsV1g3/
WIeHzIjjDh8F01rH5GPKruCOKEVcoNHoBAh9xU/fygATstpLLoc7wIFqXnJpz3gH
pReiSEKdni58IYW7O08CHbnmXuCiqG+USkfOUrNuzWxIXvuXcXHuEBWuDeZNJSt2
0JFyv+evWGZH7L7Bsn1JJ9hZw1Cok1aPAhuRTCBT26F2xd8r76zd6hXHCdtJWrlg
oKKhMyLvvhGyfuS1uWTUyaMf4OOmsE0TPmlM9bJzKVKtYBRZDhiEOfrO91LWb5r6
1CJLJCTcp2F6JqH6aD1mSDvs4oHZNyrvW2Q=
-----END CERTIFICATE-----
Generated at Fri Apr 17 18:11:57 2026 by rpki-client