
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa
File: 100bd445-11b8-324b-bf41-5a5c61b7658a.roa (raw, json)
Hash identifier: aKxmJhM/N7Eji+9IfAm+HsLsdfeKpp5sS19NSqWKFh8=
Subject key identifier: FE:8A:D5:95:24:5A:E9:37:DE:A5:E8:A1:BC:AB:87:A4:68:4F:0B:13
Certificate issuer: /CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Certificate serial: 010D0C9F4328584CFC823AA45F5E6FDDD8815980
Authority key identifier: 20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa
Signing time: Thu 26 Feb 2026 02:00:32 +0000
ROA not before: Thu 26 Feb 2026 02:00:32 +0000
ROA not after: Wed 27 May 2026 01:00:32 +0000
asID: 46386
IP address blocks: 2602:f700:c0::/43 maxlen: 43
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:fc:82:3a:a4:5f:5e:6f:dd:d8:81:59:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac65e460-1633-4b44-9dc5-be303c8b3f09
Validity
Not Before: Feb 26 02:00:32 2026 GMT
Not After : May 27 01:00:32 2026 GMT
Subject: CN=919a64a4-90ed-43e6-a5ac-d422d42b48fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:19:1a:4f:66:37:29:05:92:6f:d2:1f:ca:05:
ca:4f:93:78:8a:89:4f:5d:a7:85:7b:f2:76:d8:2e:
c3:ac:19:c5:35:f1:e8:a9:43:cf:dd:4f:21:70:ff:
32:3f:79:62:b0:e5:a5:82:9a:4f:16:53:5e:77:b9:
e7:13:23:01:17:89:32:16:51:1f:66:03:65:79:94:
ac:7f:5b:fc:5f:a1:7e:71:ca:98:c2:c1:54:c3:be:
a9:13:fe:ac:d6:9b:46:d0:5b:dc:15:a7:ea:56:50:
7a:ea:06:e6:48:3b:70:f0:c0:2a:04:17:40:e7:2c:
44:5b:05:23:a6:b0:20:81:a9:9e:bf:3e:b2:46:bb:
71:37:66:2a:9c:ae:29:9b:9b:7e:e5:9a:dc:f7:2b:
72:b5:54:f7:b5:a9:40:dc:05:78:c2:1e:29:97:75:
10:24:7e:72:5b:05:d9:67:0c:7a:45:b7:91:3a:cf:
af:50:ae:6b:d9:47:7a:38:21:db:a6:42:0a:a2:f1:
47:ee:2b:5f:df:7c:f1:33:47:d1:e9:1f:97:b1:3a:
71:c5:89:1e:d4:bb:97:e6:14:61:ef:50:55:61:fe:
13:bb:e8:14:3b:09:a5:ea:41:88:d9:28:da:84:fc:
8b:94:7f:70:4d:e5:c1:be:0f:5c:10:43:ea:59:97:
e3:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:8A:D5:95:24:5A:E9:37:DE:A5:E8:A1:BC:AB:87:A4:68:4F:0B:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/100bd445-11b8-324b-bf41-5a5c61b7658a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09/ac65e460-1633-4b44-9dc5-be303c8b3f09.crl
X509v3 Authority Key Identifier:
keyid:20:A0:6F:E0:40:2F:37:1F:59:03:00:DD:95:67:73:32:9F:7E:CC:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ac65e460-1633-4b44-9dc5-be303c8b3f09.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f700:c0::/43
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:70:ff:ba:29:81:5f:79:d7:1a:3f:b3:00:cb:0f:96:fe:ed:
61:db:00:19:3f:ba:bf:e0:30:26:05:f4:b4:0a:15:db:9b:b0:
07:93:63:b1:cc:8c:19:83:d4:ac:38:1d:94:bf:c1:a9:89:1a:
a7:73:08:90:0a:a5:f0:d0:79:fc:73:dd:40:43:ab:5e:2f:b9:
4f:41:80:8f:b8:50:16:fc:a4:55:d6:39:c2:d6:94:6d:8f:6f:
af:78:d8:33:04:1a:bc:34:d0:13:d9:5d:75:b6:e9:51:a0:01:
de:5f:fe:db:6d:be:f3:a8:aa:5d:d3:9a:fc:84:56:c6:a8:61:
ee:6a:e0:3a:1b:1a:d9:b8:12:66:a6:86:18:70:4b:45:c8:08:
69:d0:2a:2f:5a:00:31:1f:18:cb:06:54:2e:bf:27:39:a3:1d:
89:db:f4:52:fa:2c:a3:18:81:8f:c6:00:44:b4:5a:64:b4:40:
ef:04:ed:07:77:ea:04:97:96:8f:93:27:a6:35:4c:f6:27:8f:
34:65:ef:36:7d:ec:ba:6a:11:c1:46:62:7b:45:c5:f4:d1:7d:
4f:43:79:6a:58:f6:e1:90:f2:4c:00:ab:1f:9b:72:8f:14:7e:
d1:ad:60:bc:e7:38:32:a0:a6:47:b6:85:74:57:7f:1c:dd:47:
47:51:2a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:47:57 2026 by rpki-client