
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/39d16814-9201-3b13-8716-4cd1ea693d2e.roa
File: 39d16814-9201-3b13-8716-4cd1ea693d2e.roa (raw, json)
Hash identifier: awBBax/NZATZJ4OXNnU1W9eYBNDDmZvFfwxHy5yRr9E=
Subject key identifier: 21:C8:00:36:4A:5A:06:33:1B:18:45:0D:3B:72:6E:88:87:11:25:CB
Certificate issuer: /CN=eead609d-afe6-45af-8409-34818e8450c5
Certificate serial: 010D0C9F4328584DCF2E00BCF4FEF732423C7EC0
Authority key identifier: 94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/39d16814-9201-3b13-8716-4cd1ea693d2e.roa
Signing time: Tue 12 May 2026 13:06:36 +0000
ROA not before: Tue 12 May 2026 13:06:36 +0000
ROA not after: Mon 10 Aug 2026 13:06:36 +0000
asID: 399970
IP address blocks: 2602:fc3b:ff00:280::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/35bfdba8-9aa1-4a39-940f-be273d9c0b62.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:2e:00:bc:f4:fe:f7:32:42:3c:7e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eead609d-afe6-45af-8409-34818e8450c5
Validity
Not Before: May 12 13:06:36 2026 GMT
Not After : Aug 10 13:06:36 2026 GMT
Subject: CN=cbefaf02-a817-4e4c-bb1e-61c69eae8978
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b6:80:42:a9:a2:95:9a:0f:c3:7f:49:cf:ee:
7d:66:89:c7:4f:7b:37:0c:6a:04:78:87:45:6c:14:
dc:44:18:5c:78:07:5f:a5:7d:d1:a3:b7:3b:8c:e1:
80:66:24:54:a6:3f:a3:17:00:b7:7f:3e:ee:30:7d:
84:45:65:dc:62:f3:5b:f9:a0:7e:f0:6a:c1:5e:6a:
75:e7:6b:59:b4:00:4d:f1:a3:25:2d:4b:28:b2:53:
51:96:4d:99:a7:1d:ea:7d:97:9f:6f:66:11:cf:95:
4b:a1:19:b1:ad:7c:eb:af:13:d8:66:99:47:01:b5:
0d:6e:89:ff:47:53:d4:88:76:d3:6c:81:6d:be:a2:
47:aa:61:cf:e2:b0:9c:6d:48:f6:48:64:a0:43:60:
39:b2:98:a1:51:df:91:88:a9:09:4c:ad:e3:66:f9:
3b:e2:df:51:ce:12:b9:88:0a:da:0a:c3:06:8d:71:
75:39:90:d7:2d:75:b4:4b:20:9f:c0:0e:58:00:f9:
7a:cd:79:12:4b:73:59:63:a3:ba:6a:0f:c7:76:d0:
e7:ac:37:87:6f:b5:be:92:4b:fc:37:b8:60:f8:b9:
59:d6:69:1e:78:b2:50:48:aa:a5:e3:a3:f2:0b:fe:
b3:10:60:5f:1c:88:27:5a:91:b0:78:e4:e6:6d:e5:
9e:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:C8:00:36:4A:5A:06:33:1B:18:45:0D:3B:72:6E:88:87:11:25:CB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/39d16814-9201-3b13-8716-4cd1ea693d2e.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5/eead609d-afe6-45af-8409-34818e8450c5.crl
X509v3 Authority Key Identifier:
keyid:94:B7:E3:1B:D3:28:79:DA:D4:0B:8D:3B:05:EE:21:D7:35:94:AA:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/35bfdba8-9aa1-4a39-940f-be273d9c0b62/eead609d-afe6-45af-8409-34818e8450c5.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:ff00:280::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
b9:d1:33:1c:26:a9:8b:0e:99:0d:be:ca:20:db:d0:19:85:ee:
b3:06:75:23:30:59:3a:03:2b:30:ca:b1:3a:37:3e:c2:63:9f:
15:c1:ee:6d:79:b4:9c:62:33:80:fa:cf:7f:d8:85:f8:5d:52:
ea:9e:16:7c:3b:28:31:0e:0d:8b:6e:fd:98:23:1d:73:b6:42:
bd:98:f1:68:72:26:2f:71:57:90:a5:37:8d:dc:96:af:12:7d:
02:53:99:e0:83:15:cf:95:59:bf:82:10:60:fa:9e:db:fe:0c:
7b:4d:45:46:a2:ec:2e:e9:36:19:08:c2:a2:dd:bb:4a:4b:0b:
aa:25:96:d0:d6:2a:81:c3:06:38:88:75:85:de:8e:4b:65:bf:
7b:a4:75:d9:1c:a8:76:2e:1d:bc:56:27:ed:33:6c:f0:1c:21:
48:9f:17:c7:39:2a:b9:32:ad:9b:7e:6f:a6:3e:a5:d9:a8:30:
92:94:9f:49:f7:b3:99:ee:26:3f:56:7b:40:fe:57:1b:bc:01:
a0:3c:87:5b:bf:de:9c:35:92:be:72:6e:6f:14:76:58:cf:92:
51:54:f0:0f:e7:8b:da:cf:42:3e:c3:c5:df:45:17:e9:9f:77:
69:b8:bb:c1:df:c4:cc:5f:5e:5e:06:06:13:9a:fc:59:d7:4c:
65:2f:6f:82
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE3PLgC89P73MkI8fsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWVhZDYwOWQtYWZlNi00NWFmLTg0MDktMzQ4MThlODQ1
MGM1MB4XDTI2MDUxMjEzMDYzNloXDTI2MDgxMDEzMDYzNlowLzEtMCsGA1UEAxMk
Y2JlZmFmMDItYTgxNy00ZTRjLWJiMWUtNjFjNjllYWU4OTc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLaAQqmilZoPw39Jz+59ZonHT3s3DGoEeIdF
bBTcRBhceAdfpX3Ro7c7jOGAZiRUpj+jFwC3fz7uMH2ERWXcYvNb+aB+8GrBXmp1
52tZtABN8aMlLUsoslNRlk2Zpx3qfZefb2YRz5VLoRmxrXzrrxPYZplHAbUNbon/
R1PUiHbTbIFtvqJHqmHP4rCcbUj2SGSgQ2A5spihUd+RiKkJTK3jZvk74t9RzhK5
iAraCsMGjXF1OZDXLXW0SyCfwA5YAPl6zXkSS3NZY6O6ag/HdtDnrDeHb7W+kkv8
N7hg+LlZ1mkeeLJQSKql46PyC/6zEGBfHIgnWpGweOTmbeWeeQIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFCHIADZKWgYzGxhFDTtyboiHESXLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEzOS05NDBmLWJlMjczZDljMGI2Mi9lZWFk
NjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgxOGU4NDUwYzUvMzlkMTY4MTQtOTIwMS0z
YjEzLTg3MTYtNGNkMWVhNjkzZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8zNWJmZGJhOC05
YWExLTRhMzktOTQwZi1iZTI3M2Q5YzBiNjIvZWVhZDYwOWQtYWZlNi00NWFmLTg0
MDktMzQ4MThlODQ1MGM1L2VlYWQ2MDlkLWFmZTYtNDVhZi04NDA5LTM0ODE4ZTg0
NTBjNS5jcmwwHwYDVR0jBBgwFoAUlLfjG9MoedrUC407Be4h1zWUqsswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzM1YmZkYmE4LTlhYTEtNGEz
OS05NDBmLWJlMjczZDljMGI2Mi9lZWFkNjA5ZC1hZmU2LTQ1YWYtODQwOS0zNDgx
OGU4NDUwYzUuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AoAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAudEzHCapiw6ZDb7KINvQGYXuswZ1IzBZOgMrMMqxOjc+wmOf
FcHubXm0nGIzgPrPf9iF+F1S6p4WfDsoMQ4Ni279mCMdc7ZCvZjxaHImL3FXkKU3
jdyWrxJ9AlOZ4IMVz5VZv4IQYPqe2/4Me01FRqLsLuk2GQjCot27SksLqiWW0NYq
gcMGOIh1hd6OS2W/e6R12Ryodi4dvFYn7TNs8BwhSJ8XxzkquTKtm35vpj6l2agw
kpSfSfezme4mP1Z7QP5XG7wBoDyHW7/enDWSvnJubxR2WM+SUVTwD+eL2s9CPsPF
30UX6Z93abi7wd/EzF9eXgYGE5r8WddMZS9vgg==
-----END CERTIFICATE-----
Generated at Wed May 13 11:56:10 2026 by rpki-client