
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa
File: 2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa (raw, json)
Hash identifier: FhOatTEi3mraxinR7rU4LG7Rg901GPFyvYkG5CplVYo=
Subject key identifier: 4A:16:1D:87:30:B4:E7:DF:21:D8:DB:3E:E6:41:4B:F7:4A:F1:6F:45
Certificate issuer: /CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Certificate serial: 010D0C9F4328584E6144BE74CAC05B4D0691D2C0
Authority key identifier: 19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa
Signing time: Fri 03 Jul 2026 21:00:11 +0000
ROA not before: Fri 03 Jul 2026 21:00:11 +0000
ROA not after: Thu 01 Oct 2026 21:00:11 +0000
asID: 16839
IP address blocks: 2606:3600:160::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:61:44:be:74:ca:c0:5b:4d:06:91:d2:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89ef6f69-8726-4512-ad7b-1cba783df29a
Validity
Not Before: Jul 3 21:00:11 2026 GMT
Not After : Oct 1 21:00:11 2026 GMT
Subject: CN=aa5c0a36-8d38-4233-9b75-fb355e191668
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:b3:44:2b:c2:5a:5a:92:f8:e6:4a:c3:ad:ba:
54:9a:ef:d7:f2:ef:f1:bf:b9:e0:bc:87:d3:e7:2c:
03:d1:1b:33:a4:11:2d:82:01:3f:4f:06:a0:8e:f5:
03:f8:19:93:90:0f:b6:f7:61:9c:4f:a2:31:5c:01:
c2:11:db:81:83:74:b2:62:4b:d8:b5:b2:30:89:0a:
2a:5e:c9:6e:d0:fe:e2:6f:ba:f7:19:65:cb:09:2b:
45:aa:36:d0:c5:dd:7d:9e:d8:41:c7:0c:58:53:8f:
b4:5e:9b:20:6d:9f:de:bf:7a:9b:02:81:4f:e0:db:
a4:5a:12:ff:07:00:2f:42:92:ee:64:3f:c2:3d:b9:
41:c9:94:70:25:71:2d:1a:9b:5b:34:50:fe:5d:c9:
8d:76:39:c3:5c:ba:02:2a:a8:28:3c:46:25:5b:68:
5e:d7:28:55:d6:70:98:8d:d9:e1:93:fb:9a:61:be:
59:bb:b1:94:39:c8:a3:2c:24:38:b8:5b:eb:01:95:
30:79:ec:1d:20:7f:6c:5a:f7:3a:96:9e:10:6a:e0:
1b:2c:7e:06:d9:38:6e:ca:12:12:31:74:16:15:8f:
df:0d:ff:62:e8:e9:0c:30:a4:20:ba:d7:e0:37:a4:
bd:c4:98:00:e4:7d:33:d3:95:17:7f:88:a3:a6:61:
cc:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:16:1D:87:30:B4:E7:DF:21:D8:DB:3E:E6:41:4B:F7:4A:F1:6F:45
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/2afcd3d2-508e-374d-8a63-62f8e2cfdafe.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a/89ef6f69-8726-4512-ad7b-1cba783df29a.crl
X509v3 Authority Key Identifier:
keyid:19:07:6A:FA:47:AE:EB:ED:EB:52:FF:23:4A:A2:79:6B:26:BF:39:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/89ef6f69-8726-4512-ad7b-1cba783df29a.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:3600:160::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:ec:fd:fc:c7:10:c2:91:96:4e:de:ac:6c:55:69:6f:ed:1c:
04:ab:51:95:5f:c4:09:46:b5:a1:d0:e7:6a:34:35:71:36:23:
4b:3c:d7:b1:8f:4d:6b:ea:5d:33:c0:67:e9:eb:01:b2:d7:b8:
a7:9a:72:14:c2:36:ab:da:7e:8d:f3:b4:99:e2:ff:40:fd:16:
28:02:ff:a1:0b:78:34:9d:94:9c:d5:3f:35:78:9a:f9:b1:74:
84:42:e2:58:62:53:7c:e8:64:04:80:d4:2c:40:32:67:21:af:
97:7a:c7:37:77:e9:c6:4a:af:72:43:4f:d1:78:e6:69:b7:d5:
5d:b7:61:00:59:12:6c:15:0b:75:8d:55:7e:98:58:99:f9:cf:
3f:2b:84:2e:49:05:1e:4d:76:85:54:95:31:b1:ab:5d:e5:42:
8b:f1:42:05:ea:4f:e8:d7:5a:2f:bd:18:61:2e:98:c4:ff:08:
37:e3:e5:89:5f:f5:c5:5a:0d:5d:2c:6f:e4:69:1e:e2:6c:a6:
fd:b8:51:7b:36:4b:32:db:cd:66:e3:16:57:b1:78:20:64:ac:
42:5f:f9:8a:27:aa:21:c5:27:b9:d0:f7:65:40:6b:49:ff:ad:
36:40:db:e4:70:8a:12:9c:8f:50:54:a1:fa:be:c4:13:87:ad:
02:b5:13:3a
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE5hRL50ysBbTQaR0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODllZjZmNjktODcyNi00NTEyLWFkN2ItMWNiYTc4M2Rm
MjlhMB4XDTI2MDcwMzIxMDAxMVoXDTI2MTAwMTIxMDAxMVowLzEtMCsGA1UEAxMk
YWE1YzBhMzYtOGQzOC00MjMzLTliNzUtZmIzNTVlMTkxNjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjLNEK8JaWpL45krDrbpUmu/X8u/xv7ngvIfT
5ywD0RszpBEtggE/TwagjvUD+BmTkA+292GcT6IxXAHCEduBg3SyYkvYtbIwiQoq
Xslu0P7ib7r3GWXLCStFqjbQxd19nthBxwxYU4+0XpsgbZ/ev3qbAoFP4NukWhL/
BwAvQpLuZD/CPblByZRwJXEtGptbNFD+XcmNdjnDXLoCKqgoPEYlW2he1yhV1nCY
jdnhk/uaYb5Zu7GUOcijLCQ4uFvrAZUweewdIH9sWvc6lp4QauAbLH4G2ThuyhIS
MXQWFY/fDf9i6OkMMKQgutfgN6S9xJgA5H0z05UXf4ijpmHM8QIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEoWHYcwtOffIdjbPuZBS/dK8W9FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy84OWVm
NmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2JhNzgzZGYyOWEvMmFmY2QzZDItNTA4ZS0z
NzRkLThhNjMtNjJmOGUyY2ZkYWZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvODllZjZmNjktODcyNi00NTEyLWFk
N2ItMWNiYTc4M2RmMjlhLzg5ZWY2ZjY5LTg3MjYtNDUxMi1hZDdiLTFjYmE3ODNk
ZjI5YS5jcmwwHwYDVR0jBBgwFoAUGQdq+keu6+3rUv8jSqJ5aya/OUcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy84OWVmNmY2OS04NzI2LTQ1MTItYWQ3Yi0xY2Jh
NzgzZGYyOWEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgY2AAFg
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAHs/fzHEMKRlk7erGxVaW/tHASrUZVfxAlGtaHQ52o0NXE2I0s8
17GPTWvqXTPAZ+nrAbLXuKeachTCNqvafo3ztJni/0D9FigC/6ELeDSdlJzVPzV4
mvmxdIRC4lhiU3zoZASA1CxAMmchr5d6xzd36cZKr3JDT9F45mm31V23YQBZEmwV
C3WNVX6YWJn5zz8rhC5JBR5NdoVUlTGxq13lQovxQgXqT+jXWi+9GGEumMT/CDfj
5Ylf9cVaDV0sb+RpHuJspv24UXs2SzLbzWbjFlexeCBkrEJf+YonqiHFJ7nQ92VA
a0n/rTZA2+RwihKcj1BUofq+xBOHrQK1Ezo=
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:46:16 2026 by rpki-client