
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
File: 2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa (raw, json)
Hash identifier: KILXut9Wd6WQaYBt+kHuUE+cILlHaFwJRWzEKR6yvQw=
Subject key identifier: 2A:76:F9:6F:23:02:DC:DC:5D:0C:C3:7F:CD:7B:1A:B1:66:40:1D:A9
Certificate issuer: /CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Certificate serial: 010D0C9F4328584E82C4D8A2489A3FA9A4AA7AA0
Authority key identifier: A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
Signing time: Wed 15 Jul 2026 21:00:12 +0000
ROA not before: Wed 15 Jul 2026 21:00:12 +0000
ROA not after: Tue 13 Oct 2026 21:00:12 +0000
asID: 40663
IP address blocks: 2602:fc24::/44 maxlen: 44
2602:fc24:100::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 25 Jul 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:82:c4:d8:a2:48:9a:3f:a9:a4:aa:7a:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4aeeea60-e12e-4570-a310-cac6f50c2bef
Validity
Not Before: Jul 15 21:00:12 2026 GMT
Not After : Oct 13 21:00:12 2026 GMT
Subject: CN=9b3f26bb-c495-4ef1-9de7-f7df39fffa0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:c2:6b:e8:12:ce:42:1a:94:5d:f1:05:b9:88:
0b:34:24:62:cc:f0:58:87:93:09:9e:25:9a:07:c5:
30:f5:d7:97:4b:39:94:45:41:73:a9:89:98:61:70:
9b:8a:5b:11:37:8c:ac:ef:95:c8:20:31:89:9a:a1:
18:bf:8f:8d:00:c8:b7:fa:19:8f:cb:95:45:79:01:
f1:d1:97:81:f6:9c:d8:2b:16:f6:b9:f5:78:b8:1f:
aa:aa:04:58:d0:d8:ed:04:51:2d:05:10:c1:3a:4a:
7c:c3:8d:65:b5:93:bb:70:7c:6a:84:97:69:fe:6b:
07:6d:f6:57:43:79:65:18:d1:5d:23:c2:22:3d:4f:
da:e9:34:fe:e3:c0:a2:6c:fd:53:68:c6:d8:3a:e0:
9a:23:11:62:c1:ce:80:aa:2c:cd:90:04:3d:4d:f2:
6c:86:55:d1:1b:87:1d:97:50:f9:f8:ea:f4:70:2d:
07:27:b8:b1:88:1a:ca:48:2a:59:c4:cc:f6:e0:f2:
fe:05:69:3b:60:ff:e1:f8:68:e8:5e:a8:96:93:27:
ac:74:dc:42:ff:c8:3f:3e:d2:5b:1b:14:71:13:3e:
70:a7:44:e8:6c:d3:77:ee:b9:3c:7f:72:6f:e0:d8:
d3:68:1d:ad:37:9e:d6:d8:01:bf:d5:a9:ab:ca:8f:
81:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:76:F9:6F:23:02:DC:DC:5D:0C:C3:7F:CD:7B:1A:B1:66:40:1D:A9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/2ae6d119-4d73-3c4b-94d5-2ba6db842fcc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef/4aeeea60-e12e-4570-a310-cac6f50c2bef.crl
X509v3 Authority Key Identifier:
keyid:A4:90:E4:D6:08:C1:5F:55:64:10:75:70:7D:C1:E6:A5:2D:43:9D:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4aeeea60-e12e-4570-a310-cac6f50c2bef.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc24::/44
2602:fc24:100::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2a:38:35:d8:0f:a1:4e:70:d9:c7:ab:49:31:22:b6:be:d3:f8:
ab:7d:9c:b6:04:2e:a8:a5:38:1b:34:b6:57:b6:73:40:42:f4:
d4:fe:09:09:2f:56:2b:bc:e6:e6:6b:aa:11:24:03:c6:f8:61:
ba:08:70:d5:30:b5:a3:a4:31:cc:26:5f:90:4f:74:b0:62:61:
bb:46:c9:40:ce:9f:6d:54:06:ed:fe:55:c0:1b:28:41:ec:22:
7f:36:23:d6:35:e9:d7:c3:43:ad:72:04:e5:1a:64:ab:90:a2:
b3:e3:3e:58:84:05:bf:fd:27:57:05:9c:88:0a:2a:bd:3f:c5:
cb:7b:5c:7f:3f:06:65:48:7b:de:90:20:92:04:f2:8e:3b:19:
bd:4c:04:7f:82:7a:6d:4d:63:24:1c:81:24:92:7d:91:84:8e:
f4:c9:3f:fa:40:88:25:ec:ce:91:d4:22:6c:c0:33:27:ab:7e:
da:99:d7:5c:9f:a9:03:54:d8:e2:07:f4:a9:f1:3e:72:71:e1:
55:0e:0e:30:ce:bb:51:0a:82:ac:7b:0e:78:50:99:e3:b1:e2:
43:f8:a9:c2:84:d3:14:78:0f:59:ee:e8:1e:fe:65:dc:92:75:
0e:33:3b:19:10:0c:a3:13:2d:83:b4:42:dd:6a:2d:9b:32:66:
72:55:8f:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:19:33 2026 by rpki-client