
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0153d6ac-fc39-3e7a-b193-1437fd3b444f.roa
File: 0153d6ac-fc39-3e7a-b193-1437fd3b444f.roa (raw, json)
Hash identifier: 2xUUOvvAxpd7/AwFN5WZbOfql6HuD2qDduwertrp4HM=
Subject key identifier: 2C:B7:4F:68:54:90:B1:43:35:51:F7:A7:E5:52:28:60:C1:36:58:79
Certificate issuer: /CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Certificate serial: 010D0C9F4328584CB121E0B1DA2F674F97CCE300
Authority key identifier: B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0153d6ac-fc39-3e7a-b193-1437fd3b444f.roa
Signing time: Fri 30 Jan 2026 02:00:31 +0000
ROA not before: Fri 30 Jan 2026 02:00:31 +0000
ROA not after: Thu 30 Apr 2026 01:00:31 +0000
asID: 401243
IP address blocks: 2602:2b5:30::/48 maxlen: 48
2602:2b5:31::/48 maxlen: 48
2602:2b5:32::/48 maxlen: 48
2602:2b5:33::/48 maxlen: 48
2602:2b5:34::/48 maxlen: 48
2602:2b5:35::/48 maxlen: 48
2602:2b5:36::/48 maxlen: 48
2602:2b5:37::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b1:21:e0:b1:da:2f:67:4f:97:cc:e3:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ccdced21-8f04-4273-8f8a-07593c3968fb
Validity
Not Before: Jan 30 02:00:31 2026 GMT
Not After : Apr 30 01:00:31 2026 GMT
Subject: CN=74747412-e87d-4906-b871-c248290aeda8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:aa:87:1d:a8:a1:95:1e:6b:4a:05:4d:92:c8:
f7:1b:a7:e8:3b:b3:21:6e:51:f6:e7:10:73:f9:88:
63:93:a0:01:23:b6:dd:28:4c:ec:e0:ab:ac:79:2c:
67:11:19:da:6d:4f:b3:34:11:94:a9:2d:78:01:19:
72:95:9e:7c:12:65:98:17:52:de:43:71:2c:2f:b8:
21:45:69:26:db:34:e1:fe:c4:f6:d9:d4:6f:7b:59:
34:2b:0e:c5:86:7a:05:8d:d3:f5:82:02:85:dc:3e:
10:21:37:d3:48:48:4c:2c:ff:ea:8d:88:fa:8a:b8:
c2:a7:1b:9d:3e:8d:a8:97:f0:29:fe:b4:8d:1a:67:
94:eb:e8:ad:8a:bf:3a:cc:d0:7e:fa:bc:fc:a8:da:
e5:e5:c9:ed:af:16:7c:26:5c:bb:be:4c:dd:bb:4b:
20:05:e7:a4:72:dc:7f:2b:5a:ed:73:37:c1:a0:0a:
e4:08:3e:e5:b3:51:d6:d9:b9:8d:28:48:48:bd:81:
10:14:5d:ae:0b:9c:a9:a5:14:0c:46:48:0a:78:e5:
5a:35:a1:dc:2c:c3:a0:1f:90:b1:7f:c2:fd:98:b3:
e5:f6:3d:e6:18:33:cd:b6:46:2a:62:41:87:21:bc:
a5:20:c8:c1:27:ba:45:be:ee:3f:66:68:25:8e:2f:
70:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B7:4F:68:54:90:B1:43:35:51:F7:A7:E5:52:28:60:C1:36:58:79
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/0153d6ac-fc39-3e7a-b193-1437fd3b444f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb/ccdced21-8f04-4273-8f8a-07593c3968fb.crl
X509v3 Authority Key Identifier:
keyid:B2:D4:9D:85:44:98:EF:59:EA:08:76:0F:CF:BD:75:03:B0:E2:47:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ccdced21-8f04-4273-8f8a-07593c3968fb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2b5:30::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
21:c6:c0:ab:ec:e6:8e:b3:f1:b2:97:b2:f1:a2:2f:28:78:7f:
1c:8b:0e:a6:75:8b:4d:57:cf:1a:2b:0b:7c:7c:85:d3:d9:8a:
9d:d3:6b:7d:ed:1b:7f:c2:40:42:91:79:cc:7e:09:76:8c:cb:
e9:3e:0a:32:f9:ab:33:2b:a9:01:d0:60:72:9b:9e:5d:ea:e2:
db:88:59:d1:1f:93:85:e3:02:af:03:e5:2c:08:bd:bf:ba:cc:
da:04:69:f9:9e:13:e9:bd:06:94:2f:e5:78:1b:ad:a1:3e:a2:
b5:91:c3:02:79:ad:f2:1d:5d:6d:e7:ad:f5:ef:d7:ba:10:9d:
11:34:1e:33:96:44:e3:4a:9c:59:3e:08:6d:f3:c0:2d:19:e0:
f4:b3:e4:e8:76:4e:67:ca:dd:aa:ab:c0:8e:32:eb:a2:68:22:
45:40:c8:44:3a:ee:dd:f5:47:d1:4e:d8:12:37:b5:d8:38:ca:
36:98:fc:01:e4:c1:72:96:cd:e9:a2:60:5d:57:ec:66:d7:1f:
77:7f:9e:7f:52:2e:ea:c8:2f:8d:f3:b6:b1:2f:21:5d:82:fe:
cc:bd:35:e7:14:40:43:6e:1d:7c:b4:3f:b4:75:26:94:bd:45:
88:7f:ec:99:0e:55:27:a5:8f:4a:87:dc:50:2f:d7:37:bc:e4:
15:b8:46:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:42:44 2026 by rpki-client