
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
File: 4cb51156-681b-3b02-bfaf-14a78060c1f2.roa (raw, json)
Hash identifier: qg7XDJZxSVbigESQxL3aE+8XdYEffVy6Q9ZMjpcx2AI=
Subject key identifier: A3:54:6D:A8:F7:FA:81:75:58:D7:5D:19:6E:9C:ED:C1:F3:B0:DC:09
Certificate issuer: /CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Certificate serial: 010D0C9F4328584CB81C87B043C15971E3D55500
Authority key identifier: 44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
Signing time: Sun 01 Feb 2026 14:00:40 +0000
ROA not before: Sun 01 Feb 2026 14:00:40 +0000
ROA not after: Sat 02 May 2026 13:00:40 +0000
asID: 399542
IP address blocks: 2602:f8ef:fb::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b8:1c:87:b0:43:c1:59:71:e3:d5:55:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9de2e0c2-2707-42c9-b26d-59fe7d0b342f
Validity
Not Before: Feb 1 14:00:40 2026 GMT
Not After : May 2 13:00:40 2026 GMT
Subject: CN=abc4f09c-3024-444e-a9b4-9206664c5282
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:07:bf:92:06:72:06:a2:c1:50:dd:16:4d:87:
84:01:50:97:fc:ce:5c:f5:b4:f3:d4:59:58:c4:ec:
18:9d:a6:45:6d:06:d6:af:30:b9:43:32:0a:1e:aa:
6b:90:d3:15:52:dd:14:c3:ce:c8:a3:5a:c1:a4:b2:
ef:08:e7:d4:91:fc:8c:fb:e3:44:ee:10:c6:cd:42:
b8:d7:5d:f5:6b:80:fd:7d:5c:9f:06:6f:02:77:63:
13:8a:00:7e:1b:6c:fc:fc:fc:53:47:d8:98:1e:a4:
34:59:22:1b:6d:30:d4:9f:d1:15:c1:ea:2f:8f:50:
35:51:c3:1f:64:b8:6a:33:f3:51:67:d4:66:7c:dd:
f1:5a:1e:e3:f4:25:08:e1:7c:ce:84:3e:73:54:83:
05:f5:7f:a5:84:46:30:f5:61:c9:2b:ee:8e:fb:cf:
42:a3:35:5c:fc:75:1b:a9:73:19:43:4b:b0:5b:60:
74:85:8a:91:92:38:4a:f3:7d:ff:30:ba:ce:3a:14:
a5:9c:6d:19:46:55:06:b4:47:66:12:a7:7d:57:55:
7f:85:1b:9c:7b:f0:41:c5:94:0f:c3:2e:7a:97:ae:
d4:e8:3a:5b:eb:d8:52:b2:1a:2a:e4:32:ea:6a:34:
1b:b7:72:d2:59:c4:90:e2:0b:e5:a7:99:e5:6d:0c:
88:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:54:6D:A8:F7:FA:81:75:58:D7:5D:19:6E:9C:ED:C1:F3:B0:DC:09
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/4cb51156-681b-3b02-bfaf-14a78060c1f2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.crl
X509v3 Authority Key Identifier:
keyid:44:24:09:83:D6:FE:E5:17:5D:60:BD:AC:DC:B3:27:E5:CC:C5:BF:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/9de2e0c2-2707-42c9-b26d-59fe7d0b342f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f8ef:fb::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:d8:cd:ce:e8:f4:70:2f:19:ea:e7:26:12:68:8b:1d:ed:e6:
3b:c7:d6:0e:b2:2f:f7:de:2b:d1:a2:d1:2b:46:25:2e:82:e9:
78:2a:48:90:85:2b:61:d5:78:ce:c4:eb:33:05:04:3b:c1:bf:
23:94:14:ce:0b:ae:70:1b:73:e0:50:05:09:24:e0:2c:50:9c:
2f:7e:43:c8:56:73:2f:ac:d7:44:3c:ed:bd:62:16:66:f2:ae:
b0:1b:ae:a2:8a:c3:1a:34:86:55:d8:6f:c3:08:17:b0:10:d4:
f0:e1:79:aa:1a:cd:9e:8b:03:06:1e:07:de:23:84:2d:94:32:
9a:a8:cb:14:75:e3:55:eb:01:16:c4:c5:2a:83:ba:89:1f:29:
b7:4f:1c:03:c5:bf:ca:54:dd:3a:01:15:d5:8b:42:63:61:a6:
f8:01:68:1a:87:6e:b3:2d:70:9f:c7:83:fb:fb:88:ea:8e:cd:
3a:4f:e6:d3:22:9d:82:7d:1e:64:50:ca:d7:06:2b:c2:3f:46:
27:81:00:ab:3d:9c:d7:6a:f9:7b:25:4a:a5:73:01:8a:56:bc:
db:94:8f:d4:03:cb:a9:3d:8f:17:c5:d2:ce:d3:1f:69:f0:03:
6a:e3:f9:2b:8e:8f:e2:ee:95:15:99:3f:0a:fe:34:4d:e6:f6:
fe:ec:e7:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 04:41:35 2026 by rpki-client