
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/90a1c137-b937-3cb9-9a28-03dfcc73c2cb.roa
File: 90a1c137-b937-3cb9-9a28-03dfcc73c2cb.roa (raw, json)
Hash identifier: qriPXw829pHKN1I6O34Rh5wF7AY339FxOIVmfH0Lrn8=
Subject key identifier: 74:EB:66:08:B3:2A:9B:E4:00:2C:12:F8:DD:75:74:AF:BA:53:A4:43
Certificate issuer: /CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
Certificate serial: 010D0C9F4328584F2D87B53C4D1AA99350E97380
Authority key identifier: C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/90a1c137-b937-3cb9-9a28-03dfcc73c2cb.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 33151
IP address blocks: 2602:f8d5:100::/42 maxlen: 48
2602:f8d5:e13::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 24 Sep 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:b5:3c:4d:1a:a9:93:50:e9:73:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cf09e191-1cb7-4650-95d6-4e24c0aec69d
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=6de9cac2-71a5-4998-bc8c-81f25eb2b82f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:0b:be:9a:63:2c:5f:31:f1:b2:2e:05:c8:d1:
de:29:93:9c:04:da:79:28:5a:16:16:f7:69:a3:7d:
8f:49:d9:e3:05:99:d3:6b:58:e8:9b:27:3b:db:1d:
82:9e:e8:ce:bf:af:6a:ab:d7:23:cd:33:79:ac:d0:
95:c9:ff:9b:ba:af:d3:57:9d:f3:c7:0a:66:52:92:
8d:79:c0:8f:cf:c2:08:ea:f1:ff:0b:10:9f:ae:e8:
a5:69:bb:f4:6d:34:77:3c:14:a9:b1:07:e9:90:16:
ee:8b:d4:66:64:fd:12:70:f4:68:3f:99:d7:1d:11:
20:f7:93:c2:d6:91:c9:29:b2:28:5d:6e:9c:eb:d9:
c4:f2:02:72:f1:6b:4c:50:80:dc:0b:3f:e1:d9:4e:
ec:94:eb:93:a7:12:e8:2f:96:e5:4a:04:e5:8f:cf:
d0:60:61:32:6f:2e:1a:e6:3d:33:f8:b5:ae:a6:8f:
d1:d4:ce:c7:b9:4b:9e:6b:ef:41:31:56:95:70:fc:
2a:53:60:5f:a4:46:9a:f1:d1:c7:b1:cf:0d:c7:63:
ca:c7:07:c6:79:73:72:7b:a2:4c:6f:25:d0:31:92:
22:f3:df:f2:14:a0:67:e9:2b:04:a4:ba:eb:dc:3e:
2a:25:c4:ff:f4:bf:e1:cd:aa:d0:4e:7a:41:7c:8a:
23:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EB:66:08:B3:2A:9B:E4:00:2C:12:F8:DD:75:74:AF:BA:53:A4:43
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/90a1c137-b937-3cb9-9a28-03dfcc73c2cb.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d/cf09e191-1cb7-4650-95d6-4e24c0aec69d.crl
X509v3 Authority Key Identifier:
keyid:C7:0D:A7:D7:72:A3:30:C8:8F:00:B9:98:15:AE:E9:72:6D:03:1A:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/cf09e191-1cb7-4650-95d6-4e24c0aec69d.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8d5:100::/42
2602:f8d5:e13::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
4e:2f:87:07:3e:94:ac:cb:33:be:b5:f6:b8:68:95:a5:06:9e:
24:69:31:7a:34:23:32:25:ce:2e:23:48:f9:98:1e:07:94:1c:
11:e5:1f:c5:87:72:f8:b5:16:e4:a3:2f:1f:1f:c4:0a:9b:85:
7f:de:75:b0:f0:9b:7c:56:75:c4:ce:3f:3c:8e:bd:66:07:3d:
40:00:4b:c2:de:01:c3:13:14:96:f1:75:c6:58:a5:1b:b0:06:
6f:f5:5e:a9:a8:88:99:3b:55:bd:55:f0:a5:28:55:d4:80:85:
e8:e2:83:d1:42:84:ff:0c:4e:34:f9:d1:c6:b3:f6:b0:bc:1c:
1a:a9:fa:5c:27:33:34:87:3e:45:61:de:dc:71:36:f2:42:de:
5a:90:02:f4:cd:be:ba:4e:54:c2:6b:0b:22:0d:ea:da:52:1c:
59:07:fb:bd:9c:fd:3a:7e:b4:2a:04:72:f7:75:1c:90:84:c8:
e8:f6:56:10:97:3b:8d:6a:40:d9:15:33:bd:fb:cb:01:1d:2a:
89:38:09:c1:e1:01:2c:83:14:5e:a6:3a:bc:64:34:73:14:00:
82:0e:b9:73:33:fd:54:76:1c:71:38:3a:e2:02:31:7e:ed:da:
f8:9d:33:26:51:71:36:81:d2:cb:fa:2e:a1:f7:41:c8:a1:8f:
72:01:c9:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 09:58:09 2026 by rpki-client