
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
File: dc8b4841-4648-3afc-93d8-17cafe748add.roa (raw, json)
Hash identifier: cok3lWLHbyaTy/6YbEvm56JFKhlVM5AAk8aYlCZevf8=
Subject key identifier: 02:03:90:16:1C:40:45:E1:46:79:01:80:C1:EC:85:F4:49:24:10:87
Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial: 010D0C9F4328584CF157771947613BAB3463AA00
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
Signing time: Sun 22 Feb 2026 02:00:32 +0000
ROA not before: Sun 22 Feb 2026 02:00:32 +0000
ROA not after: Sat 23 May 2026 01:00:32 +0000
asID: 55116
IP address blocks: 2602:2c9:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f1:57:77:19:47:61:3b:ab:34:63:aa:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
Validity
Not Before: Feb 22 02:00:32 2026 GMT
Not After : May 23 01:00:32 2026 GMT
Subject: CN=4b7fb789-911f-45fa-8c5a-fd6d01f39626
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:e3:87:8a:87:72:6f:2a:0c:45:8c:3f:67:8f:
80:35:74:9a:7a:86:ea:0d:3e:2a:7e:43:b7:2c:25:
f3:db:00:6a:0c:e8:47:ca:cf:8a:62:49:51:2e:77:
b0:1b:bc:a8:45:a0:11:ed:0a:c5:0f:9c:c0:3d:68:
3e:4a:10:c0:e2:90:03:94:4e:da:25:0e:ac:2c:6e:
41:4c:3c:db:b9:13:bb:97:8d:1a:58:eb:82:80:07:
14:7d:57:02:3c:f8:f0:8a:10:13:4b:b2:53:19:05:
5e:e4:76:df:a3:be:e9:46:09:e9:c2:ca:03:d0:3e:
e0:fe:95:b6:a5:dd:f9:f3:81:fc:87:8e:c7:af:3b:
2a:e4:e1:bc:2c:82:5a:dd:34:01:60:4c:53:a1:32:
79:35:0a:10:ca:c5:7b:51:07:43:ac:70:63:54:2d:
ec:9f:9d:8e:94:07:68:31:25:c2:79:4d:75:16:27:
99:25:c6:91:d7:d2:ac:dd:48:74:7b:25:ef:e9:0e:
55:df:de:50:28:e1:37:72:3a:be:0e:83:0c:41:18:
36:5a:cf:73:ce:10:a5:a1:ef:18:78:d0:23:bf:39:
9e:73:4c:bf:eb:c2:1d:51:7a:af:ac:37:31:93:d5:
a7:95:c9:63:88:66:d5:56:18:de:82:3c:f5:96:ad:
4c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:03:90:16:1C:40:45:E1:46:79:01:80:C1:EC:85:F4:49:24:10:87
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
X509v3 Authority Key Identifier:
keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c9:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
03:e2:ef:d0:14:ba:5e:b2:7f:6d:97:f4:6b:7c:73:b7:02:85:
c3:6d:21:46:bd:ef:74:4a:9d:2f:aa:9e:3e:7a:cd:ff:2e:d0:
1b:44:3e:d1:c6:4b:42:0d:c2:c5:69:84:e9:19:83:be:2d:4a:
c8:5c:99:c9:ba:a5:ff:54:c2:35:0b:e0:ca:f7:4b:08:7c:b1:
55:f1:16:be:8e:c1:c8:6a:8c:37:b5:b3:79:ff:56:dc:c4:9f:
5d:32:03:7b:1a:64:d9:a7:4e:6a:69:06:7e:58:44:6e:2c:ad:
29:dc:65:d9:4b:6d:fc:81:ae:20:ea:e0:46:4e:bf:cc:ae:8e:
01:24:da:8c:da:43:1b:c0:e8:fd:fb:54:e2:b7:19:af:79:3a:
6a:c2:dd:f2:78:ee:c1:78:e2:6e:a9:13:8c:29:97:bb:fd:76:
5e:01:1d:a3:9b:d1:11:30:2a:26:14:f6:e9:95:2b:bd:56:65:
3d:57:04:e7:4c:47:59:f1:28:1e:4e:f7:49:f4:ba:50:65:8f:
fb:a1:e3:d1:78:98:0f:86:1e:88:56:2d:f8:ad:91:b4:5d:52:
80:49:cc:0c:9c:b0:19:25:5d:3e:df:08:4c:8c:27:b0:ac:2b:
00:da:b4:09:ca:f7:0f:45:b4:cf:71:96:ce:d7:2c:af:ab:aa:
ed:a3:ff:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:07:38 2026 by rpki-client