
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
File: a96cb05b-0c60-3552-884a-bbc614e95519.roa (raw, json)
Hash identifier: HekR6I74mhSWfa6FI8qEg2R70ijxpjRG1wG9xeGld2E=
Subject key identifier: 09:40:7D:92:40:7A:4A:1B:CF:C1:FB:CD:4D:BB:4D:CE:15:CA:A4:7B
Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Certificate serial: 010D0C9F4328584CEE8CC5CD96F3983CF8E424C0
Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
Signing time: Sat 21 Feb 2026 02:00:32 +0000
ROA not before: Sat 21 Feb 2026 02:00:32 +0000
ROA not after: Fri 22 May 2026 01:00:32 +0000
asID: 40536
IP address blocks: 2602:f629:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 16:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:ee:8c:c5:cd:96:f3:98:3c:f8:e4:24:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Validity
Not Before: Feb 21 02:00:32 2026 GMT
Not After : May 22 01:00:32 2026 GMT
Subject: CN=ec9f1b23-666f-480c-a9a7-023ae9984502
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:81:2c:99:d6:f0:2d:c5:86:03:f2:b5:1b:8d:37:
30:07:32:9d:1b:a0:35:83:52:c6:fe:03:fe:4e:ca:
69:c6:10:d1:c7:21:86:28:13:1a:ef:d6:6d:97:38:
ff:7a:91:3b:83:34:ad:07:93:b1:b2:3f:d9:7f:18:
ab:e7:d9:98:38:8b:7c:88:6c:65:b6:04:cf:06:b5:
a8:71:9c:58:3d:fe:fa:f5:e4:98:79:72:02:d9:2f:
33:95:fe:3a:4a:61:4a:59:4c:87:dc:f7:bf:28:33:
05:a0:44:ef:c3:79:79:31:1c:fb:32:7c:19:0f:10:
56:c6:2c:5b:cf:2c:c8:09:c6:8b:b5:4b:ea:40:1c:
09:8f:5b:da:46:6d:7c:b3:4a:fa:6b:51:d5:66:60:
9b:86:f6:06:98:f4:85:84:f8:5d:d6:bf:eb:1b:3d:
8e:4d:e4:da:09:7b:10:50:95:ef:9a:bb:a2:bd:4f:
ac:67:7e:61:9a:fc:e3:d9:df:b0:0b:25:27:ef:c0:
e1:7e:44:ce:f8:2f:6a:e1:a2:af:0d:6f:8b:a9:41:
29:e9:52:a9:0f:05:43:c7:9f:71:dc:28:7b:66:fc:
a4:45:10:1d:b1:ee:71:06:91:75:4d:2d:50:56:9e:
00:0c:f1:22:9c:e1:7c:d4:e7:cd:86:b3:96:72:ed:
07:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:40:7D:92:40:7A:4A:1B:CF:C1:FB:CD:4D:BB:4D:CE:15:CA:A4:7B
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
X509v3 Authority Key Identifier:
keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f629:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
29:89:45:47:18:1c:35:4e:6e:c6:f7:a0:c8:c8:53:f6:98:bb:
38:54:d1:6c:87:63:7b:d7:52:7d:c2:ad:fc:16:a0:47:d4:ae:
a4:fb:95:c9:26:c1:72:fe:fe:86:a2:15:68:6e:7a:34:fc:36:
97:72:4e:91:2d:14:01:e9:09:1f:24:29:1e:7b:46:9b:a4:e0:
1b:d3:9e:30:85:9a:38:00:de:de:e1:d5:77:c2:f9:e9:95:54:
12:9e:9b:96:f5:96:44:af:8b:c4:0f:7d:80:ee:6f:21:03:09:
cb:67:aa:eb:36:40:53:66:68:b5:ba:dc:3e:db:09:1c:05:74:
21:78:46:35:31:f2:25:34:8c:29:87:87:84:ac:e7:65:79:af:
6d:8c:02:31:6c:40:67:8c:78:10:6c:f6:b7:b6:f7:0f:3a:93:
fe:33:e8:7e:03:bd:fb:d2:05:31:ff:27:d7:7d:11:e3:05:de:
11:e5:aa:de:63:65:91:78:54:3f:1c:0b:51:47:30:ec:31:88:
96:c0:45:18:86:fe:d0:e6:63:3a:42:75:20:c8:ef:55:d8:0e:
e2:18:ba:b7:28:99:85:49:68:1a:c1:23:53:1c:40:90:7c:1c:
c4:8e:10:23:69:54:2f:fd:77:50:ae:e1:f2:76:72:28:3c:14:
f8:b6:d7:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 12:48:03 2026 by rpki-client