
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa
File: b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa (raw, json)
Hash identifier: GGVo550DEhxZpRCtwVKnaCLim+6XNi+grz0WU0JUKg8=
Subject key identifier: 53:D9:37:4B:A1:4F:79:1C:A2:50:36:A8:72:DC:DB:57:C0:77:2F:C8
Certificate issuer: /CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Certificate serial: 010D0C9F4328584CB551F7F568BE828B8A914B70
Authority key identifier: D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 46733
IP address blocks: 2602:f9f4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:f7:f5:68:be:82:8b:8a:91:4b:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8c2a8d95-0290-4218-9b08-d157e5f127f9
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=76ebcdec-48e0-464c-93bd-a613edf3d265
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:7a:62:f5:3f:76:64:b4:2a:48:fc:fd:bf:aa:
b3:f2:1b:00:8f:76:c6:05:55:9e:21:2e:5b:af:4f:
c6:c9:7a:83:2d:39:53:58:93:e6:7e:64:b6:07:12:
6d:7d:26:63:92:19:88:b4:29:a6:76:ee:89:99:a9:
0c:ee:46:43:79:01:45:9d:98:4f:df:a3:ad:96:be:
d1:1d:73:de:65:28:e5:d8:3e:2d:6c:d7:ee:98:b6:
71:4c:13:37:ac:c3:f9:b7:c8:93:f2:ca:7f:91:cf:
a6:37:49:b0:c1:e3:15:ca:b7:d1:2e:43:8a:a9:89:
45:68:fa:47:f0:25:c1:07:27:04:6e:51:50:85:5b:
53:8e:a7:ff:6d:9a:07:ab:fb:2b:f1:9e:52:18:82:
5d:8a:43:71:e4:9d:cd:4a:9a:3a:9f:08:83:87:e9:
3a:aa:4b:30:5c:7a:47:d9:ef:8b:c3:e5:b8:cc:49:
d6:93:d5:31:97:58:77:53:34:3d:e1:77:21:4f:6f:
93:c0:b7:ef:98:96:20:80:1f:19:78:3d:a3:87:a0:
43:36:ba:c5:4b:e6:7f:44:65:88:c5:3b:2a:32:8d:
2d:21:7f:6b:a6:68:bb:a5:c4:44:bf:a2:88:0d:bf:
44:45:29:25:2f:45:16:fd:77:31:50:68:67:7f:e2:
01:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:D9:37:4B:A1:4F:79:1C:A2:50:36:A8:72:DC:DB:57:C0:77:2F:C8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/b5734a28-8ddf-300c-ab81-e6cb67b870cd.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9/8c2a8d95-0290-4218-9b08-d157e5f127f9.crl
X509v3 Authority Key Identifier:
keyid:D9:14:6A:25:0B:CC:BD:BE:46:97:7E:E1:6E:9A:B5:D6:32:82:E9:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/8c2a8d95-0290-4218-9b08-d157e5f127f9.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:f2:db:f9:2b:05:95:6d:47:d8:db:59:c1:ec:b6:d9:36:8e:
20:83:65:c4:50:39:2c:7d:46:96:d7:67:10:d2:55:c0:ad:66:
61:d3:46:4d:d2:67:19:68:a4:12:ab:66:29:4c:19:cd:bb:ce:
cb:70:f0:20:f7:92:19:c2:de:7a:f4:55:1f:bd:0b:a2:ec:43:
50:e6:28:0d:54:9f:2c:40:1e:3b:b4:c4:72:d3:9e:19:a1:3f:
1d:2b:66:71:12:a6:ba:35:5f:9b:fa:41:0a:1e:5b:57:c0:8c:
7f:47:12:10:c5:d3:80:b3:10:de:95:20:ec:6d:4d:38:a6:31:
1c:60:b4:d6:64:a2:9e:48:c2:91:d2:d1:9a:8a:a8:a5:7d:85:
64:f3:99:e8:38:53:f3:5e:16:64:05:19:e9:0a:c8:4f:0a:ab:
be:2e:24:5b:df:49:b3:cd:3a:c3:4d:47:24:9b:1f:41:19:b8:
5e:0f:d5:ef:a5:c9:91:9a:01:56:71:b9:a8:a2:3a:2d:2d:4d:
a0:16:ed:79:e3:63:5a:e6:0d:1d:de:39:9b:67:b9:bb:a3:fc:
80:8c:84:fc:fa:a4:92:f3:81:16:24:aa:97:14:cf:1c:ed:9e:
64:21:c3:d9:e2:d0:27:9e:7b:18:1d:87:68:35:57:5d:7f:d8:
1f:c4:75:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 01:16:07 2026 by rpki-client