
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/1bbb830f-5dc1-3695-895c-68a9b1629d79.roa
File: 1bbb830f-5dc1-3695-895c-68a9b1629d79.roa (raw, json)
Hash identifier: BapSy3j+jL19z5NuR3DOWWk053Rc3itBFEKwa/+nC7g=
Subject key identifier: CA:4A:6F:A8:E0:D0:74:6D:D5:57:8F:27:6C:BC:2B:4E:84:BB:F3:39
Certificate issuer: /CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Certificate serial: 010D0C9F4328584F58CD4C6937B6C01B161EAC80
Authority key identifier: 9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/1bbb830f-5dc1-3695-895c-68a9b1629d79.roa
Signing time: Wed 30 Sep 2026 13:00:13 +0000
ROA not before: Wed 30 Sep 2026 13:00:13 +0000
ROA not after: Tue 29 Dec 2026 14:00:13 +0000
asID: 27010
IP address blocks: 2602:f9f6:200::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 09 Oct 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:58:cd:4c:69:37:b6:c0:1b:16:1e:ac:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a234649d-ab49-458b-a5e3-7765fe7a066c
Validity
Not Before: Sep 30 13:00:13 2026 GMT
Not After : Dec 29 14:00:13 2026 GMT
Subject: CN=0ff6defe-0145-47da-814c-a100c6506bbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:ed:98:83:c4:5f:da:4e:c0:7d:5e:c6:d7:68:
43:99:74:85:18:6e:07:30:d5:cc:61:f7:fd:bf:c0:
c2:5e:8f:32:c7:77:f9:d2:86:1d:04:58:c5:a7:7d:
2b:f2:ab:b5:db:6c:a4:08:b7:57:db:59:41:79:68:
e1:10:88:f5:83:6c:c4:5c:1f:d7:9c:22:bc:93:7f:
4f:c7:05:fc:20:f7:a0:75:b0:db:09:75:42:36:e6:
c1:5c:b7:53:e2:4b:6c:45:78:64:84:e4:fb:ae:35:
3f:ed:2c:75:31:18:55:8c:cb:20:17:d4:a7:dc:00:
83:6c:9e:f7:93:b8:17:5a:68:9f:07:90:1a:43:02:
1e:43:39:7e:49:96:e3:a3:d6:83:42:03:22:3f:bf:
89:1f:77:b6:c8:cf:49:5c:33:7d:2d:ed:36:27:61:
73:39:b6:8a:45:98:32:56:26:ca:8c:f1:6d:0c:82:
78:b2:59:24:76:b4:d5:b1:f3:52:45:29:d9:0c:21:
b3:dd:23:34:dd:b3:59:6b:49:3e:aa:c8:e6:a0:28:
96:bf:66:c2:36:46:10:ea:9d:97:0e:a5:8a:9d:7c:
9c:5d:89:98:a9:69:25:54:f6:32:25:bf:b7:58:f1:
a7:e2:20:9b:74:1d:93:29:e0:93:50:11:c4:cf:22:
69:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:4A:6F:A8:E0:D0:74:6D:D5:57:8F:27:6C:BC:2B:4E:84:BB:F3:39
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/1bbb830f-5dc1-3695-895c-68a9b1629d79.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c/a234649d-ab49-458b-a5e3-7765fe7a066c.crl
X509v3 Authority Key Identifier:
keyid:9F:03:E7:1A:5F:42:82:C9:DE:EC:0B:A1:1F:90:48:F4:57:7D:A1:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a234649d-ab49-458b-a5e3-7765fe7a066c.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f9f6:200::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:bf:d3:24:c3:e7:d5:de:c4:c4:03:6e:33:c2:6c:9b:e5:e6:
48:f6:52:d8:5b:ff:50:6f:55:ee:ab:90:be:f0:54:56:11:d6:
f8:6b:48:9c:16:fc:10:f6:45:c2:46:10:f4:f9:24:75:05:05:
b8:64:ce:6d:ff:a2:55:9a:44:6d:36:1c:32:1d:35:50:94:9e:
36:cd:07:1a:95:45:d0:6e:f3:fd:f5:f8:13:fb:6a:73:a2:f1:
b0:99:15:79:bb:85:47:d5:0f:66:18:da:86:4b:a1:23:90:40:
14:c0:28:39:9b:ad:43:d4:ce:1c:44:bf:96:35:84:1a:41:40:
0e:bb:94:0a:40:45:85:ca:dc:ad:4b:6e:92:98:c8:77:4e:c6:
5a:d7:ad:0f:0a:9d:02:02:30:6a:9c:da:a6:32:81:c4:48:f8:
de:2f:b0:4c:93:3e:8c:82:47:7e:07:b1:fa:52:d4:fe:e4:78:
43:52:6a:e0:6a:32:a8:84:e3:d5:3b:e4:8c:7c:ea:91:d5:ab:
96:9b:cb:7c:f9:43:71:7e:ac:74:af:d7:ad:6b:3e:f4:57:72:
a0:4a:50:53:bc:6d:36:cc:03:e3:e4:b5:07:26:6f:26:ff:e8:
b5:c3:dd:4a:4e:25:a8:30:e2:30:c4:9c:23:ab:5d:33:a2:21:
10:d5:54:ee
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE9YzUxpN7bAGxYerIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTIzNDY0OWQtYWI0OS00NThiLWE1ZTMtNzc2NWZlN2Ew
NjZjMB4XDTI2MDkzMDEzMDAxM1oXDTI2MTIyOTE0MDAxM1owLzEtMCsGA1UEAxMk
MGZmNmRlZmUtMDE0NS00N2RhLTgxNGMtYTEwMGM2NTA2YmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtO2Yg8Rf2k7AfV7G12hDmXSFGG4HMNXMYff9
v8DCXo8yx3f50oYdBFjFp30r8qu122ykCLdX21lBeWjhEIj1g2zEXB/XnCK8k39P
xwX8IPegdbDbCXVCNubBXLdT4ktsRXhkhOT7rjU/7Sx1MRhVjMsgF9Sn3ACDbJ73
k7gXWmifB5AaQwIeQzl+SZbjo9aDQgMiP7+JH3e2yM9JXDN9Le02J2FzObaKRZgy
VibKjPFtDIJ4slkkdrTVsfNSRSnZDCGz3SM03bNZa0k+qsjmoCiWv2bCNkYQ6p2X
DqWKnXycXYmYqWklVPYyJb+3WPGn4iCbdB2TKeCTUBHEzyJpkwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFMpKb6jg0HRt1VePJ2y8K06Eu/M5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0
NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1ZmU3YTA2NmMvMWJiYjgzMGYtNWRjMS0z
Njk1LTg5NWMtNjhhOWIxNjI5ZDc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTIzNDY0OWQtYWI0OS00NThiLWE1
ZTMtNzc2NWZlN2EwNjZjL2EyMzQ2NDlkLWFiNDktNDU4Yi1hNWUzLTc3NjVmZTdh
MDY2Yy5jcmwwHwYDVR0jBBgwFoAUnwPnGl9Cgsne7AuhH5BI9Fd9oZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hMjM0NjQ5ZC1hYjQ5LTQ1OGItYTVlMy03NzY1
ZmU3YTA2NmMuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL59gIw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAeL/TJMPn1d7ExANuM8Jsm+XmSPZS2Fv/UG9V7quQvvBUVhHW+GtI
nBb8EPZFwkYQ9PkkdQUFuGTObf+iVZpEbTYcMh01UJSeNs0HGpVF0G7z/fX4E/tq
c6LxsJkVebuFR9UPZhjahkuhI5BAFMAoOZutQ9TOHES/ljWEGkFADruUCkBFhcrc
rUtukpjId07GWtetDwqdAgIwapzapjKBxEj43i+wTJM+jIJHfgex+lLU/uR4Q1Jq
4GoyqITj1TvkjHzqkdWrlpvLfPlDcX6sdK/XrWs+9FdyoEpQU7xtNswD4+S1ByZv
Jv/otcPdSk4lqDDiMMScI6tdM6IhENVU7g==
-----END CERTIFICATE-----
Generated at Thu Oct 8 13:46:32 2026 by rpki-client