
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa
File: 5fefe850-00d7-3861-8700-f8eb3f16a12b.roa (raw, json)
Hash identifier: cyTiVDW7v01O6agXqaVWf7uLB2y8R9Nb9lRzezWvCBc=
Subject key identifier: 07:DD:FA:64:41:13:43:FA:B5:48:12:F6:B1:D6:F5:B3:05:C9:82:68
Certificate issuer: /CN=3e886672-55f3-450f-ab6e-342c76f256db
Certificate serial: 010D0C9F4328584D59EA55925B40D34DE810C600
Authority key identifier: C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 16584
IP address blocks: 2602:fe54::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:55:92:5b:40:d3:4d:e8:10:c6:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e886672-55f3-450f-ab6e-342c76f256db
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=b019ceeb-17bc-47d5-8172-72d4de11b923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0f:d1:44:27:a2:70:00:59:af:53:87:6f:ea:
f5:12:ca:e2:33:22:22:e7:8a:d0:16:71:b1:a4:d6:
02:8e:e1:a1:e6:f9:50:09:81:43:29:05:79:48:7d:
70:89:e0:d7:9a:e6:93:5d:60:d4:c4:ea:6f:f7:2c:
9b:a4:c3:86:0b:06:65:33:7b:69:8e:b0:18:60:1e:
a4:ec:89:02:65:5c:b3:0b:b5:35:bf:f1:66:28:fd:
60:bd:05:a6:cb:9f:05:c6:f5:6f:c7:a5:f3:b7:a9:
06:a9:ac:4d:6e:d8:22:39:b5:a4:16:8e:64:72:bd:
09:93:6a:51:10:f4:08:f4:cc:25:b2:be:38:10:37:
be:1f:44:80:5b:8d:65:0d:ac:c8:1d:68:42:f2:10:
75:49:ca:66:19:e0:89:22:62:c1:aa:29:b5:3b:2a:
f3:9d:3b:eb:54:e3:08:88:b4:32:2c:17:2f:86:68:
ef:72:f8:1e:b3:8b:4b:80:4b:35:47:4c:2c:2c:66:
f5:14:b2:56:45:16:80:f8:1a:25:20:2a:5b:dc:77:
08:99:a8:c7:b1:d3:3e:43:ea:a8:2c:ad:f6:86:5c:
22:f6:bb:7b:94:7c:fd:d0:5c:65:ab:52:69:d6:ec:
12:ef:d4:ab:2d:d8:05:a5:e9:0f:95:f1:b7:96:e4:
1d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
07:DD:FA:64:41:13:43:FA:B5:48:12:F6:B1:D6:F5:B3:05:C9:82:68
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/5fefe850-00d7-3861-8700-f8eb3f16a12b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db/3e886672-55f3-450f-ab6e-342c76f256db.crl
X509v3 Authority Key Identifier:
keyid:C9:F7:DA:62:04:65:82:4F:87:6B:CA:92:86:E4:16:0A:D4:F9:31:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3e886672-55f3-450f-ab6e-342c76f256db.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fe54::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
43:e4:da:82:9f:8b:fc:13:89:c9:0b:8e:8d:0c:59:09:fd:e8:
74:6a:fc:79:ab:5f:bc:80:24:c4:11:5c:47:1c:65:96:31:55:
a1:24:28:e8:2b:cb:ed:f0:39:63:d9:f6:77:3d:f9:04:8d:da:
61:58:97:63:da:93:20:87:18:ca:f2:b5:40:11:28:41:70:69:
c3:57:31:a2:07:10:f0:58:da:84:62:1b:df:48:7f:8d:16:a0:
ea:ca:1f:12:29:27:df:5d:ec:fd:4a:8e:c2:36:ca:9e:b2:9e:
6c:97:90:94:f3:c7:a0:9c:95:65:21:1f:d8:cd:01:cf:50:c5:
b1:5a:22:68:9a:c3:bc:e3:aa:1a:76:32:ad:0a:33:76:64:b2:
e1:a1:06:af:48:38:2f:97:e2:3e:13:52:e4:cc:24:e0:18:e6:
9a:a3:a7:a7:58:44:90:12:b4:74:0b:3d:95:8d:ff:80:6d:35:
8f:86:05:4b:48:a0:12:0c:f8:23:c6:01:86:14:45:2d:57:8e:
9e:e5:7d:83:27:3d:31:65:db:62:60:94:ff:4c:8e:49:2c:86:
41:bf:46:44:69:8d:66:13:d6:c5:31:b5:5f:e1:90:22:05:d4:
51:f0:b5:f5:50:75:75:c9:23:5b:56:58:41:0c:85:96:e3:a3:
79:c2:58:29
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE1Z6lWSW0DTTegQxgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2U4ODY2NzItNTVmMy00NTBmLWFiNmUtMzQyYzc2ZjI1
NmRiMB4XDTI2MDMzMTEzMDAzMFoXDTI2MDYyOTEzMDAzMFowLzEtMCsGA1UEAxMk
YjAxOWNlZWItMTdiYy00N2Q1LTgxNzItNzJkNGRlMTFiOTIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA/RRCeicABZr1OHb+r1EsriMyIi54rQFnGx
pNYCjuGh5vlQCYFDKQV5SH1wieDXmuaTXWDUxOpv9yybpMOGCwZlM3tpjrAYYB6k
7IkCZVyzC7U1v/FmKP1gvQWmy58FxvVvx6Xzt6kGqaxNbtgiObWkFo5kcr0Jk2pR
EPQI9Mwlsr44EDe+H0SAW41lDazIHWhC8hB1ScpmGeCJImLBqim1OyrznTvrVOMI
iLQyLBcvhmjvcvges4tLgEs1R0wsLGb1FLJWRRaA+BolICpb3HcImajHsdM+Q+qo
LK32hlwi9rt7lHz90Fxlq1Jp1uwS79SrLdgFpekPlfG3luQdhQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAfd+mRBE0P6tUgS9rHW9bMFyYJoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4
NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJjNzZmMjU2ZGIvNWZlZmU4NTAtMDBkNy0z
ODYxLTg3MDAtZjhlYjNmMTZhMTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2U4ODY2NzItNTVmMy00NTBmLWFi
NmUtMzQyYzc2ZjI1NmRiLzNlODg2NjcyLTU1ZjMtNDUwZi1hYjZlLTM0MmM3NmYy
NTZkYi5jcmwwHwYDVR0jBBgwFoAUyffaYgRlgk+Ha8qShuQWCtT5MZwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZTg4NjY3Mi01NWYzLTQ1MGYtYWI2ZS0zNDJj
NzZmMjU2ZGIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL+VDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBD5NqCn4v8E4nJC46NDFkJ/eh0avx5q1+8gCTEEVxHHGWWMVWhJCjo
K8vt8Dlj2fZ3PfkEjdphWJdj2pMghxjK8rVAEShBcGnDVzGiBxDwWNqEYhvfSH+N
FqDqyh8SKSffXez9So7CNsqesp5sl5CU88egnJVlIR/YzQHPUMWxWiJomsO846oa
djKtCjN2ZLLhoQavSDgvl+I+E1LkzCTgGOaao6enWESQErR0Cz2Vjf+AbTWPhgVL
SKASDPgjxgGGFEUtV46e5X2DJz0xZdtiYJT/TI5JLIZBv0ZEaY1mE9bFMbVf4ZAi
BdRR8LX1UHV1ySNbVlhBDIWW46N5wlgp
-----END CERTIFICATE-----
Generated at Fri Apr 17 19:50:00 2026 by rpki-client