
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
File: 705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa (raw, json)
Hash identifier: k6d3tGuWgOtXWuD9T5Z0hex6ZsINmvligk5449KGPwA=
Subject key identifier: 39:81:AD:A5:44:DF:98:C6:27:16:7E:74:C1:07:AD:C5:49:4C:2D:A9
Certificate issuer: /CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Certificate serial: 010D0C9F4328584F94D34D70FAA0EFE88D0011E0
Authority key identifier: 43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
Signing time: Thu 22 Oct 2026 01:00:12 +0000
ROA not before: Thu 22 Oct 2026 01:00:12 +0000
ROA not after: Wed 20 Jan 2027 02:00:12 +0000
asID: 23467
IP address blocks: 2602:816:5000::/48 maxlen: 48
2602:816:5002::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 17 Nov 2026 12:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:94:d3:4d:70:fa:a0:ef:e8:8d:00:11:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d21149ca-bfeb-409c-adbb-e86e751b6f22
Validity
Not Before: Oct 22 01:00:12 2026 GMT
Not After : Jan 20 02:00:12 2027 GMT
Subject: CN=7dc35c37-7813-42f8-9be6-ff9d7fe629c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:f3:5e:dc:9e:61:c9:de:76:ee:ab:d3:4e:d3:
d5:69:07:95:5d:10:0f:da:fe:18:e6:ac:70:00:dc:
ef:fb:1b:59:68:11:8f:c2:35:0c:7c:58:0a:0c:ec:
e3:50:26:76:88:57:f0:96:d7:68:7a:ee:36:fa:60:
b3:1b:cc:34:df:60:43:72:29:de:50:78:72:a7:32:
a1:0b:ec:04:0d:e8:d3:22:bf:26:3b:12:b2:7d:8d:
4b:42:16:a6:c0:21:5f:67:bb:a6:97:a8:56:b3:01:
6d:8c:52:2b:13:e2:9d:2a:26:ca:32:73:78:94:08:
f7:67:67:80:2d:48:14:aa:8a:ca:59:ef:02:75:0f:
9a:a1:fa:ad:9e:ed:42:02:37:13:8b:68:7c:fc:f8:
5d:d8:c6:e4:cd:6c:63:9d:eb:bc:6c:a3:42:98:83:
e0:f6:ce:24:52:ee:f1:2c:fd:9c:89:44:7f:ab:de:
71:c1:e6:ab:81:a0:f2:38:c9:78:5d:ba:f3:a5:a5:
30:eb:6a:48:11:37:a7:60:f7:cb:fd:32:0d:b1:f3:
2e:af:34:9d:f5:98:66:26:73:6a:be:e1:c5:0f:14:
9f:4e:f9:54:a2:25:4a:9c:f0:4e:83:d4:26:c0:26:
24:0a:c0:7f:33:06:f6:a9:32:53:fe:45:6f:48:9d:
b3:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:AD:A5:44:DF:98:C6:27:16:7E:74:C1:07:AD:C5:49:4C:2D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/705a3eec-c65b-3d01-bd41-f12f8b9fe00c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22/d21149ca-bfeb-409c-adbb-e86e751b6f22.crl
X509v3 Authority Key Identifier:
keyid:43:EB:F7:AC:AC:45:57:0B:44:60:29:E2:F5:34:50:E7:D2:82:30:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/d21149ca-bfeb-409c-adbb-e86e751b6f22.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:816:5000::/48
2602:816:5002::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:6f:2e:ce:f2:61:aa:76:a2:f5:ea:3d:55:13:b5:f8:a9:c7:
98:bf:48:77:eb:25:cd:d9:81:2c:26:b2:58:6c:a6:e8:47:94:
f5:af:43:71:15:70:4b:45:0c:93:2d:28:c9:2e:0f:89:04:12:
20:de:a1:2a:b0:1d:69:f2:27:9e:dd:d7:2a:85:72:59:bb:cf:
9f:9f:9f:8e:80:24:bc:18:af:74:6d:c2:cd:18:da:8f:2c:01:
a4:e4:e8:d5:4c:1f:49:1f:5f:8a:8b:b1:b7:7c:40:3e:0f:dd:
05:47:a8:f2:73:7a:70:5b:d9:f7:53:e7:a0:c0:a3:97:1f:98:
65:65:9c:11:86:14:e9:de:f7:3b:34:7a:66:ef:02:b3:8d:d2:
e4:d1:e7:f2:a5:1b:80:04:69:e4:11:d9:54:61:6b:13:ee:54:
e4:80:36:8d:2a:7e:9c:ef:f3:45:6a:da:27:53:de:ec:d9:d6:
17:6c:85:45:13:e3:50:52:75:ab:48:dd:88:94:f3:c2:31:62:
e9:df:0c:f3:c0:15:cc:58:33:b0:31:91:54:b2:6b:51:03:5f:
bf:70:8a:7b:6f:46:8c:d9:42:03:1f:43:a3:ae:e4:3f:71:49:
a3:ef:3e:13:84:5c:ae:8a:f7:eb:69:b8:92:76:b6:68:8b:fa:
60:13:50:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 13:02:41 2026 by rpki-client