
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
File: ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa (raw, json)
Hash identifier: t+FHBqhWT43GFkbdVsDvzHWJIjrb+3yDKYGdS1JfBGs=
Subject key identifier: A3:1E:49:8E:19:0C:19:02:CF:7C:65:36:1B:7E:D3:85:9E:49:4E:DD
Certificate issuer: /CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
Certificate serial: 010D0C9F4328584F2D87C2AD905BB80FE1F22000
Authority key identifier: C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
Signing time: Tue 15 Sep 2026 01:00:12 +0000
ROA not before: Tue 15 Sep 2026 01:00:12 +0000
ROA not after: Mon 14 Dec 2026 02:00:12 +0000
asID: 992
IP address blocks: 2602:810:5001::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:2d:87:c2:ad:90:5b:b8:0f:e1:f2:20:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d49742e8-8d0c-4209-b76f-403554b0e6b4
Validity
Not Before: Sep 15 01:00:12 2026 GMT
Not After : Dec 14 02:00:12 2026 GMT
Subject: CN=2ea2b1e0-7606-4e9a-88ea-72816588860d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:bc:fa:b9:c2:16:46:d6:19:ad:34:9d:7f:6a:
c2:0e:a8:e1:dc:13:72:b5:1b:bd:8d:65:47:a3:23:
df:43:4c:22:a1:31:65:41:c5:35:a3:cc:b6:4c:b0:
91:69:13:3a:82:5d:28:85:c7:57:2b:c7:2a:8c:7a:
7f:f9:28:1c:91:0d:58:49:2c:e4:07:76:d3:52:f6:
31:1f:26:cc:41:27:e8:6d:97:19:45:83:9b:3b:12:
12:cc:78:b4:08:39:9c:8f:ee:a3:66:38:f9:d2:e3:
dd:c0:95:f7:90:82:78:1e:3e:65:2f:f6:85:bd:1c:
bb:69:75:d1:49:98:76:67:4d:0f:f2:97:01:93:a5:
08:57:d8:17:96:e5:61:9f:e3:41:fa:6a:8b:48:bb:
b7:2e:8f:3d:32:35:00:d7:95:c8:12:11:d2:79:38:
0f:4a:2d:32:d6:08:3d:a5:20:cd:39:e8:3e:98:36:
16:e1:f6:12:44:f5:2a:03:82:2d:a6:6e:be:22:6f:
6c:ac:8c:c4:ae:3d:57:4d:3f:59:cc:30:94:54:60:
c1:cc:1d:15:2b:d7:0b:fe:93:17:46:8e:31:22:82:
7e:62:2c:1a:63:53:40:cc:28:9d:55:ad:f3:f3:55:
53:a3:17:df:19:29:2a:a3:4b:8d:6f:06:8d:9c:93:
0c:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:1E:49:8E:19:0C:19:02:CF:7C:65:36:1B:7E:D3:85:9E:49:4E:DD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/ea9c383f-126b-3df7-ba3c-19fc5c239b09.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4/d49742e8-8d0c-4209-b76f-403554b0e6b4.crl
X509v3 Authority Key Identifier:
keyid:C9:74:C2:38:62:75:65:D4:F6:77:35:94:E6:36:CC:97:CE:F2:0B:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d49742e8-8d0c-4209-b76f-403554b0e6b4.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:810:5001::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
bd:eb:fa:4f:10:eb:c7:50:bc:1b:cb:b2:48:80:db:d0:1b:9d:
68:06:c7:22:04:c1:7a:33:55:1a:43:65:84:37:4a:43:c9:eb:
1d:21:0c:ce:b8:d3:af:79:d9:4f:82:89:67:a4:a5:49:d2:df:
12:36:2b:d6:e6:49:ff:50:be:36:e8:d8:18:8b:e3:1a:a1:e6:
2d:e4:a6:9b:77:b3:47:d1:6f:e0:84:90:27:de:99:b6:e0:7f:
e3:26:be:9b:e1:6d:ce:8a:d6:e0:0f:33:6e:a6:48:26:e2:7a:
fd:62:d5:6f:6a:d0:f3:a4:1b:21:ff:a3:7e:39:3c:55:ec:af:
6a:b5:a5:8a:bf:6e:4d:c3:0b:97:12:06:1d:34:cc:0b:5f:00:
02:75:cf:ee:f4:3f:94:2d:9c:e6:0f:3a:ef:62:d0:92:f0:fd:
bd:ec:f4:bb:94:eb:f8:76:97:7f:93:c5:90:f2:ec:0c:0c:1e:
fa:c1:ce:3d:f0:69:c7:c8:df:cf:a5:8d:5b:2c:88:2d:21:9c:
ce:3f:40:c4:89:61:94:2b:49:14:69:17:32:42:0c:e0:ca:1a:
56:5f:e3:63:df:2a:df:06:ad:73:8b:f5:e1:f5:6c:38:ba:5d:
ce:08:73:e7:02:eb:1d:60:43:d1:2e:98:02:ad:2a:93:41:b6:
ed:73:21:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 19:47:04 2026 by rpki-client