
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa
File: 1c903dbb-5b56-3ede-a164-06247de4e016.roa (raw, json)
Hash identifier: +L2YAmla1JbtT720qjQbUwJ/8ZM/Sf5zG5qh5Y6Mn7k=
Subject key identifier: A1:53:79:C4:7E:9F:83:75:6F:74:9E:86:34:E3:DE:90:3C:48:BC:05
Certificate issuer: /CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Certificate serial: 010D0C9F4328584D4394DD7BDC3E7257D6E5E580
Authority key identifier: D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa
Signing time: Mon 23 Mar 2026 13:00:39 +0000
ROA not before: Mon 23 Mar 2026 13:00:39 +0000
ROA not after: Sun 21 Jun 2026 13:00:39 +0000
asID: 401100
IP address blocks: 2602:f972:fe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:43:94:dd:7b:dc:3e:72:57:d6:e5:e5:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8cfc4370-50a0-4da6-9b19-eea3a1988688
Validity
Not Before: Mar 23 13:00:39 2026 GMT
Not After : Jun 21 13:00:39 2026 GMT
Subject: CN=19dd8d10-f18d-4252-ab6c-d835de3628bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:df:07:40:b8:86:55:ba:40:4a:1a:1b:5f:1d:
b6:29:96:86:29:e8:65:2d:90:83:3c:8d:15:71:37:
86:7f:22:cd:6e:e8:c1:b2:b2:3f:11:49:6b:3f:c6:
6b:01:92:ba:d4:cb:92:af:e0:2b:b3:66:4c:a0:54:
3d:f2:36:2f:e0:94:bd:90:4a:7a:10:37:fd:3b:42:
50:25:88:26:54:e5:71:31:4c:03:3a:c6:17:83:63:
6f:b3:9c:29:98:f6:f7:0a:e0:a1:17:6e:44:84:e5:
e2:43:84:18:32:0f:82:f1:0f:91:87:bc:25:9a:ea:
3c:22:42:20:62:2f:d9:0b:0a:65:d3:7f:c8:a7:59:
ee:c1:de:a5:f4:2f:72:6f:29:a5:1d:b0:8d:55:93:
63:cb:45:f5:91:bf:1c:bc:11:a0:eb:b8:54:dc:54:
77:99:ab:a7:44:76:24:21:52:71:52:f5:78:ab:a7:
20:dd:1c:54:fa:4f:64:2d:dd:b4:ee:6f:c3:51:bc:
bb:a5:91:ca:9d:bc:01:bc:fd:e3:c6:ec:df:d8:02:
9a:eb:9d:99:71:b1:3c:05:b6:46:b0:a2:c4:5c:7d:
69:75:f1:24:93:6e:9f:2d:7b:8d:ff:a5:93:98:aa:
bf:15:0b:29:6a:e3:d9:df:7b:7d:85:cf:8f:14:6a:
a6:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:53:79:C4:7E:9F:83:75:6F:74:9E:86:34:E3:DE:90:3C:48:BC:05
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/1c903dbb-5b56-3ede-a164-06247de4e016.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688/8cfc4370-50a0-4da6-9b19-eea3a1988688.crl
X509v3 Authority Key Identifier:
keyid:D3:00:C3:FC:5E:17:79:75:E4:F3:42:7D:B7:D3:5A:8F:94:91:9B:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/8cfc4370-50a0-4da6-9b19-eea3a1988688.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f972:fe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
42:bd:30:83:a1:3e:1f:b0:e8:43:8b:f3:c9:1a:5a:ff:f3:14:
5d:60:7f:04:dc:d9:6a:33:6e:4e:20:1b:32:25:8a:07:54:52:
9f:72:d1:09:99:52:6a:6f:17:ce:37:1e:00:76:52:53:61:b5:
aa:47:e3:4a:86:89:7b:bc:49:3b:24:57:dd:aa:97:52:1f:94:
8a:5f:4a:b1:c3:ec:61:25:1c:0e:75:c7:98:4a:ae:13:e0:d7:
5e:73:59:ad:1c:3c:0c:71:4e:95:69:55:5f:02:4e:fb:a1:89:
0a:ba:05:b6:aa:9c:e5:98:92:8e:6b:7b:dc:86:ac:22:58:0a:
6c:97:44:91:24:09:50:45:e4:f6:8a:36:ae:72:4d:1f:87:83:
05:41:4a:56:cd:57:ab:6c:86:b0:67:7d:ad:ef:9d:67:a8:a0:
ca:8e:0f:98:dc:cd:89:11:24:c9:81:d2:c5:3f:d2:43:df:99:
4e:4c:e7:33:86:12:75:e1:d8:3b:68:1b:d9:4b:45:da:37:e8:
e3:8c:5c:6d:84:a8:3f:3e:e4:eb:22:67:7b:cf:0e:74:3e:62:
b8:b7:89:73:e5:20:73:de:f1:b7:30:63:2e:2c:32:65:e9:36:
3f:13:fc:ee:57:1b:46:cb:49:db:c0:25:43:ac:09:a4:fc:8f:
64:a3:23:80
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE1DlN173D5yV9bl5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGNmYzQzNzAtNTBhMC00ZGE2LTliMTktZWVhM2ExOTg4
Njg4MB4XDTI2MDMyMzEzMDAzOVoXDTI2MDYyMTEzMDAzOVowLzEtMCsGA1UEAxMk
MTlkZDhkMTAtZjE4ZC00MjUyLWFiNmMtZDgzNWRlMzYyOGJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod8HQLiGVbpAShobXx22KZaGKehlLZCDPI0V
cTeGfyLNbujBsrI/EUlrP8ZrAZK61MuSr+Ars2ZMoFQ98jYv4JS9kEp6EDf9O0JQ
JYgmVOVxMUwDOsYXg2Nvs5wpmPb3CuChF25EhOXiQ4QYMg+C8Q+Rh7wlmuo8IkIg
Yi/ZCwpl03/Ip1nuwd6l9C9ybymlHbCNVZNjy0X1kb8cvBGg67hU3FR3maunRHYk
IVJxUvV4q6cg3RxU+k9kLd207m/DUby7pZHKnbwBvP3jxuzf2AKa652ZcbE8BbZG
sKLEXH1pdfEkk26fLXuN/6WTmKq/FQspauPZ33t9hc+PFGqmRwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFKFTecR+n4N1b3SehjTj3pA8SLwFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC84Y2Zj
NDM3MC01MGEwLTRkYTYtOWIxOS1lZWEzYTE5ODg2ODgvMWM5MDNkYmItNWI1Ni0z
ZWRlLWExNjQtMDYyNDdkZTRlMDE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOGNmYzQzNzAtNTBhMC00ZGE2LTli
MTktZWVhM2ExOTg4Njg4LzhjZmM0MzcwLTUwYTAtNGRhNi05YjE5LWVlYTNhMTk4
ODY4OC5jcmwwHwYDVR0jBBgwFoAU0wDD/F4XeXXk80J9t9Naj5SRmzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC84Y2ZjNDM3MC01MGEwLTRkYTYtOWIxOS1lZWEz
YTE5ODg2ODguY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL5cgD+
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAEK9MIOhPh+w6EOL88kaWv/zFF1gfwTc2Wozbk4gGzIligdUUp9y
0QmZUmpvF843HgB2UlNhtapH40qGiXu8STskV92ql1IflIpfSrHD7GElHA51x5hK
rhPg115zWa0cPAxxTpVpVV8CTvuhiQq6BbaqnOWYko5re9yGrCJYCmyXRJEkCVBF
5PaKNq5yTR+HgwVBSlbNV6tshrBnfa3vnWeooMqOD5jczYkRJMmB0sU/0kPfmU5M
5zOGEnXh2DtoG9lLRdo36OOMXG2EqD8+5OsiZ3vPDnQ+Yri3iXPlIHPe8bcwYy4s
MmXpNj8T/O5XG0bLSdvAJUOsCaT8j2SjI4A=
-----END CERTIFICATE-----
Generated at Thu Mar 26 10:55:59 2026 by rpki-client