
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa
File: 714c4c2a-3556-3855-9280-6a26c1102030.roa (raw, json)
Hash identifier: hzNby16zJXlysIjCoABLiHznqXPVLHpnQs+pjZl8+Y0=
Subject key identifier: 42:F1:CA:3F:FE:0F:37:BB:72:C8:2C:6B:0D:FD:E3:0C:53:12:82:4B
Certificate issuer: /CN=0002cb20-026c-453e-a998-7e9db1f7f47f
Certificate serial: 010D0C9F4328584F612D65F76F64AFC4E3FC5C20
Authority key identifier: DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa
Signing time: Sat 03 Oct 2026 13:00:13 +0000
ROA not before: Sat 03 Oct 2026 13:00:13 +0000
ROA not after: Fri 01 Jan 2027 14:00:13 +0000
asID: 19762
IP address blocks: 2602:f9fe::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:61:2d:65:f7:6f:64:af:c4:e3:fc:5c:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0002cb20-026c-453e-a998-7e9db1f7f47f
Validity
Not Before: Oct 3 13:00:13 2026 GMT
Not After : Jan 1 14:00:13 2027 GMT
Subject: CN=4d7c616d-fbf0-4075-9e35-325fb586a5e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:dc:b4:de:24:1d:cf:49:e7:7b:a5:30:cb:
bc:cc:5f:9a:af:4d:e7:6f:13:f5:8b:93:27:fc:98:
a0:dc:b9:6c:b2:fd:08:e5:af:9d:15:49:38:e2:3b:
3e:dd:65:3b:8b:43:6e:1b:d1:74:64:67:8e:8a:de:
7d:b2:d0:45:35:dd:a2:21:90:1f:57:56:fe:4f:62:
00:ab:24:ea:f0:d4:29:3a:89:9d:7d:f4:99:f8:aa:
8d:46:2c:e1:1e:2b:b6:59:5a:f8:07:dd:29:b0:4e:
99:1d:2f:ed:f5:b1:3a:4e:a7:89:92:77:1c:6e:bf:
f9:06:76:d6:03:36:ed:66:8f:7c:3f:9e:d5:a4:06:
47:0f:82:dd:9b:d1:cd:ae:eb:66:f3:c4:71:15:f4:
1f:e5:25:f6:6e:60:c5:52:13:1e:a5:a5:4b:4a:ee:
40:51:4a:d7:4e:dc:39:dc:9f:d3:d5:d9:f7:5f:0f:
72:d1:78:b2:d7:1b:7e:d2:21:ce:ca:23:50:89:9a:
d6:f6:dd:58:60:9e:eb:5f:08:88:9a:9b:f7:b3:e4:
f3:75:ea:71:da:c5:41:f0:c7:54:5e:69:f1:01:34:
64:95:de:90:da:9e:92:c3:8d:7a:cd:48:16:74:46:
f9:5e:53:bc:64:4c:6c:f5:3c:76:6c:85:da:be:59:
6c:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F1:CA:3F:FE:0F:37:BB:72:C8:2C:6B:0D:FD:E3:0C:53:12:82:4B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/714c4c2a-3556-3855-9280-6a26c1102030.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f/0002cb20-026c-453e-a998-7e9db1f7f47f.crl
X509v3 Authority Key Identifier:
keyid:DF:84:17:17:97:D6:4F:0F:71:6E:56:32:44:E4:D6:73:BA:18:52:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0002cb20-026c-453e-a998-7e9db1f7f47f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9fe::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
0f:03:d5:5b:e9:b1:2d:11:73:54:2e:c4:dc:80:03:1e:55:49:
f8:17:00:41:14:fb:a5:48:ea:ce:e7:9c:76:a6:eb:8c:6d:17:
98:dd:f4:0b:79:66:c3:b3:94:98:7e:0e:51:a6:b0:6f:7a:9d:
eb:f0:c7:f7:c8:35:81:2a:3f:26:4c:1f:ad:4c:0a:f8:51:46:
44:32:12:51:a1:d6:48:78:52:da:2d:d5:54:6f:3e:ae:e2:6f:
1d:f7:6d:ea:9c:46:04:74:d9:9c:03:03:ff:76:82:d4:05:01:
3f:ff:a8:13:1f:5f:28:9b:62:93:ad:2b:82:a7:af:9c:d3:0d:
ad:e6:55:66:88:e9:e0:80:5c:bf:1e:47:a7:d9:74:19:48:7d:
36:97:2c:b6:b4:ee:7a:db:f0:ec:d6:6a:44:c7:94:f0:71:bf:
55:f0:3f:ba:35:ca:f9:3f:5b:4e:a8:64:0b:5d:59:e9:e9:52:
64:37:19:33:bd:5d:e7:9e:25:5c:2c:01:92:73:45:dc:37:71:
06:ef:6c:0f:e5:76:47:ef:ef:99:da:89:c0:f6:e9:42:07:c5:
e9:da:21:d6:b6:50:45:e6:90:3e:ac:ed:7c:b7:92:48:b9:7d:
03:19:06:31:af:f5:6b:22:84:d5:7a:cf:9c:18:39:43:45:f3:
73:43:d4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 10 14:18:57 2026 by rpki-client