
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa
File: da0869fc-7a2f-3359-ac12-16c14348d383.roa (raw, json)
Hash identifier: CYgHSopwjJ6RraaVuJ5bS/h8gIPhqyGy7lg32JqXqZo=
Subject key identifier: 77:00:4E:D7:97:4F:E0:BA:17:40:1D:35:73:7A:27:16:B4:42:16:BA
Certificate issuer: /CN=43d85349-fcc3-4834-8564-24f8a824b0cd
Certificate serial: 010D0C9F4328584F49746F261FBEFF18D3F43880
Authority key identifier: 04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 399613
IP address blocks: 2602:f698::/36 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 11 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:74:6f:26:1f:be:ff:18:d3:f4:38:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43d85349-fcc3-4834-8564-24f8a824b0cd
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=1258fa81-f4db-4a45-959f-a010a3611b7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:b2:63:d7:11:cc:8a:f5:5a:9d:61:f8:1e:f2:
11:c6:a6:b5:39:22:7e:fc:dd:eb:40:1e:e6:bf:6d:
c6:ad:37:31:c6:a4:4b:a5:a7:87:78:96:c8:42:02:
88:20:f0:71:13:b9:21:71:3c:c0:ed:21:52:30:23:
cb:9e:d5:de:04:ac:e6:e3:a9:c8:29:18:11:4d:9b:
07:2c:05:93:bf:0d:2b:6e:b7:9e:62:59:c2:34:59:
2f:96:10:aa:10:7f:28:65:43:55:b0:de:83:fd:45:
73:e6:11:5c:e0:d3:e7:2a:2f:6b:b7:d7:00:7a:67:
9d:a5:36:ca:22:d5:b4:bd:bd:4e:97:c6:0f:55:6f:
33:7d:83:dd:20:39:00:fc:f7:28:85:6d:61:93:86:
ad:4a:16:b7:93:0e:9c:32:2f:63:d2:89:ef:30:6a:
4a:cc:c1:cb:61:ff:c1:60:13:e3:02:e8:e2:0b:54:
7d:86:dd:23:0f:0c:25:df:06:58:df:fe:95:fe:9e:
e3:a4:40:ac:39:11:54:09:be:be:07:1e:ea:6e:e8:
f6:03:32:d0:f1:26:ab:f1:7f:0b:cd:d9:58:ce:ba:
12:5b:38:17:81:f6:2e:4b:9c:ee:17:e1:8b:60:dd:
14:72:c3:c3:0e:9f:b7:10:d3:48:83:01:28:a7:dc:
a4:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:00:4E:D7:97:4F:E0:BA:17:40:1D:35:73:7A:27:16:B4:42:16:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/da0869fc-7a2f-3359-ac12-16c14348d383.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd/43d85349-fcc3-4834-8564-24f8a824b0cd.crl
X509v3 Authority Key Identifier:
keyid:04:E6:CE:C5:24:7C:98:A4:6B:C3:A2:9A:16:AB:E3:9B:E5:A2:4E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/43d85349-fcc3-4834-8564-24f8a824b0cd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f698::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
98:aa:b9:26:4a:9e:46:1e:01:bf:bf:97:70:7c:a3:05:70:77:
a2:1d:a0:ab:d3:0d:c5:55:83:3d:1b:b5:79:2b:69:c1:87:08:
d0:85:5e:de:8d:72:37:c1:90:b6:28:79:7a:23:3b:f9:a6:da:
1c:be:7f:43:62:11:30:50:28:29:07:1e:96:43:d1:d7:a4:ce:
c2:ae:c6:88:52:5a:4a:b3:1e:75:ac:1f:20:84:2d:e6:e8:08:
eb:a2:22:83:18:e7:0b:c5:6d:56:76:95:79:32:22:20:64:13:
63:c4:cd:3c:fd:49:2c:de:3c:76:f1:e0:ab:46:0b:18:c6:b1:
6d:19:7a:eb:36:1e:97:e5:1c:3b:34:5e:14:41:68:fe:8d:ab:
42:e0:56:5d:7a:47:07:f4:a1:33:00:5c:2a:f2:a0:01:b2:85:
32:10:a6:39:0a:72:84:81:4b:dc:4e:f8:2a:f7:84:5f:3a:08:
4d:10:ed:4e:e7:0f:d3:3f:0c:90:d7:a7:f2:cc:03:3c:41:de:
a1:44:08:1a:91:4a:c0:70:2c:b3:b9:de:65:fb:9f:0e:f1:84:
67:0b:61:e5:b4:20:49:46:3e:d6:e3:bf:4c:6f:08:9e:66:c3:
6b:15:ee:7c:33:ce:19:8f:7f:a1:76:13:0c:75:4d:b6:9a:77:
f5:f3:65:8c
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9JdG8mH77/GNP0OIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDNkODUzNDktZmNjMy00ODM0LTg1NjQtMjRmOGE4MjRi
MGNkMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MTI1OGZhODEtZjRkYi00YTQ1LTk1OWYtYTAxMGEzNjExYjdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnLJj1xHMivVanWH4HvIRxqa1OSJ+/N3rQB7m
v23GrTcxxqRLpaeHeJbIQgKIIPBxE7khcTzA7SFSMCPLntXeBKzm46nIKRgRTZsH
LAWTvw0rbreeYlnCNFkvlhCqEH8oZUNVsN6D/UVz5hFc4NPnKi9rt9cAemedpTbK
ItW0vb1Ol8YPVW8zfYPdIDkA/PcohW1hk4atSha3kw6cMi9j0onvMGpKzMHLYf/B
YBPjAujiC1R9ht0jDwwl3wZY3/6V/p7jpECsORFUCb6+Bx7qbuj2AzLQ8Sar8X8L
zdlYzroSWzgXgfYuS5zuF+GLYN0UcsPDDp+3ENNIgwEop9yk0wIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFHcATteXT+C6F0AdNXN6Jxa0Qha6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4
NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4YTgyNGIwY2QvZGEwODY5ZmMtN2EyZi0z
MzU5LWFjMTItMTZjMTQzNDhkMzgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNDNkODUzNDktZmNjMy00ODM0LTg1
NjQtMjRmOGE4MjRiMGNkLzQzZDg1MzQ5LWZjYzMtNDgzNC04NTY0LTI0ZjhhODI0
YjBjZC5jcmwwHwYDVR0jBBgwFoAUBObOxSR8mKRrw6KaFqvjm+WiToIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80M2Q4NTM0OS1mY2MzLTQ4MzQtODU2NC0yNGY4
YTgyNGIwY2QuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYEJgL2mAAw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAmKq5JkqeRh4Bv7+XcHyjBXB3oh2gq9MNxVWDPRu1eStpwYcI0IVe
3o1yN8GQtih5eiM7+abaHL5/Q2IRMFAoKQcelkPR16TOwq7GiFJaSrMedawfIIQt
5ugI66IigxjnC8VtVnaVeTIiIGQTY8TNPP1JLN48dvHgq0YLGMaxbRl66zYel+Uc
OzReFEFo/o2rQuBWXXpHB/ShMwBcKvKgAbKFMhCmOQpyhIFL3E74KveEXzoITRDt
TucP0z8MkNen8swDPEHeoUQIGpFKwHAss7neZfufDvGEZwth5bQgSUY+1uO/TG8I
nmbDaxXufDPOGY9/oXYTDHVNtpp39fNljA==
-----END CERTIFICATE-----
Generated at Sat Oct 10 16:19:46 2026 by rpki-client