
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
File: dc8b4841-4648-3afc-93d8-17cafe748add.roa (raw, json)
Hash identifier: Zu7yh08D/C1oHZzwdCesuropH++hRCMM8+vr85gZUSY=
Subject key identifier: 96:9F:96:61:65:3E:29:63:60:77:3E:56:EE:77:D1:F3:D6:CB:38:70
Certificate issuer: /CN=158d5f15-a892-4134-840b-026e68357d71
Certificate serial: 010D0C9F4328584F4975B845A8F3F6ED766743C0
Authority key identifier: 2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 55116
IP address blocks: 2602:2c9:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 12 Oct 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:75:b8:45:a8:f3:f6:ed:76:67:43:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=158d5f15-a892-4134-840b-026e68357d71
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=2144416a-9acd-4193-bcec-f55cad0a2ff8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:8d:fb:e3:30:d1:58:68:b0:ca:78:6c:93:a5:
7d:d5:a9:cf:f3:fb:47:cf:41:00:20:1b:59:8d:3a:
64:2f:28:b9:4c:ee:a5:3a:f6:22:b5:2d:53:e7:80:
00:a2:f7:7f:50:74:d3:4f:4d:10:31:68:90:89:5e:
e2:6e:8e:b1:ab:40:8d:50:1a:7d:21:68:94:0a:dc:
a7:08:53:3c:89:a5:9e:06:39:6a:6a:17:38:7e:e7:
82:9e:fa:14:d9:1c:82:c0:05:f4:5c:00:80:67:1a:
b0:7c:99:f2:9e:14:c8:0c:d9:1c:e6:07:3a:7c:d1:
96:04:90:4b:78:24:4f:5d:66:9c:e9:80:2d:54:c7:
6e:5e:d6:a6:ef:aa:ce:2b:5c:8e:97:db:0b:f8:c4:
51:0a:0c:4e:b1:73:68:3c:f4:f8:d3:58:9a:a2:c5:
20:04:9d:d3:6b:c0:38:a1:4e:db:e4:34:83:d0:7b:
86:ca:f0:1c:9a:41:7d:aa:28:0e:46:a5:45:89:7d:
ec:a3:18:01:2a:b3:eb:b1:50:8d:85:d9:50:50:7b:
a4:d0:8b:c1:3c:0f:9b:37:7d:50:e1:7e:9e:15:96:
6c:b5:f9:9f:7b:68:96:d9:0d:2f:fe:fd:7f:9a:34:
1f:8f:ae:a5:6c:d1:25:33:e8:7a:e9:e7:78:19:49:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:9F:96:61:65:3E:29:63:60:77:3E:56:EE:77:D1:F3:D6:CB:38:70
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/dc8b4841-4648-3afc-93d8-17cafe748add.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71/158d5f15-a892-4134-840b-026e68357d71.crl
X509v3 Authority Key Identifier:
keyid:2E:21:55:11:DC:0A:3B:36:0C:CD:F2:06:D4:9D:E6:DF:C9:C7:39:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/158d5f15-a892-4134-840b-026e68357d71.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:2c9:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
06:0c:67:66:a6:bc:6a:65:ab:5c:b3:28:f7:96:6c:2a:5e:01:
c1:19:c2:58:55:e0:48:37:f4:fb:f3:ab:17:f9:a1:3c:45:08:
41:6f:46:29:bb:cc:16:14:52:55:64:87:03:92:bd:a8:4e:fa:
50:06:6a:a1:1c:46:f1:58:9f:46:20:d5:14:b8:23:6c:a9:5b:
ba:7b:43:90:fa:4e:a7:49:3e:bb:5f:73:41:f4:3e:17:8d:ff:
97:71:44:78:6e:a3:8d:51:88:e0:d0:34:89:28:ee:b9:69:ec:
49:d1:01:9a:20:7b:6f:a4:25:ba:de:25:b0:70:54:56:9a:2a:
c4:92:2b:1e:31:ed:79:73:a2:3f:00:37:19:eb:45:ff:f8:c2:
b0:fb:db:6e:80:b2:69:12:04:ec:fc:09:02:73:e5:6c:af:d5:
44:97:96:76:eb:86:05:71:54:61:fe:57:04:0b:bb:8c:d3:38:
3a:b8:ea:dd:a7:ed:72:83:f5:05:05:8d:7b:ae:b6:f1:20:17:
97:f4:9b:24:19:79:0c:bc:fb:c4:99:e4:5e:8a:76:fb:95:9c:
a1:20:36:b2:ba:6b:16:85:84:a2:5f:a4:b8:e8:ca:0b:98:07:
74:0e:36:c4:2a:59:dd:12:f5:d4:da:3f:7f:44:68:9e:93:5e:
1c:54:a1:34
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9JdbhFqPP27XZnQ8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTU4ZDVmMTUtYTg5Mi00MTM0LTg0MGItMDI2ZTY4MzU3
ZDcxMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
MjE0NDQxNmEtOWFjZC00MTkzLWJjZWMtZjU1Y2FkMGEyZmY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmI374zDRWGiwynhsk6V91anP8/tHz0EAIBtZ
jTpkLyi5TO6lOvYitS1T54AAovd/UHTTT00QMWiQiV7ibo6xq0CNUBp9IWiUCtyn
CFM8iaWeBjlqahc4fueCnvoU2RyCwAX0XACAZxqwfJnynhTIDNkc5gc6fNGWBJBL
eCRPXWac6YAtVMduXtam76rOK1yOl9sL+MRRCgxOsXNoPPT401iaosUgBJ3Ta8A4
oU7b5DSD0HuGyvAcmkF9qigORqVFiX3soxgBKrPrsVCNhdlQUHuk0IvBPA+bN31Q
4X6eFZZstfmfe2iW2Q0v/v1/mjQfj66lbNElM+h66ed4GUlwHwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFJaflmFlPiljYHc+Vu530fPWyzhwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xNThk
NWYxNS1hODkyLTQxMzQtODQwYi0wMjZlNjgzNTdkNzEvZGM4YjQ4NDEtNDY0OC0z
YWZjLTkzZDgtMTdjYWZlNzQ4YWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTU4ZDVmMTUtYTg5Mi00MTM0LTg0
MGItMDI2ZTY4MzU3ZDcxLzE1OGQ1ZjE1LWE4OTItNDEzNC04NDBiLTAyNmU2ODM1
N2Q3MS5jcmwwHwYDVR0jBBgwFoAULiFVEdwKOzYMzfIG1J3m38nHObowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xNThkNWYxNS1hODkyLTQxMzQtODQwYi0wMjZl
NjgzNTdkNzEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICyQAE
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAYMZ2amvGplq1yzKPeWbCpeAcEZwlhV4Eg39Pvzqxf5oTxFCEFv
Rim7zBYUUlVkhwOSvahO+lAGaqEcRvFYn0Yg1RS4I2ypW7p7Q5D6TqdJPrtfc0H0
PheN/5dxRHhuo41RiODQNIko7rlp7EnRAZoge2+kJbreJbBwVFaaKsSSKx4x7Xlz
oj8ANxnrRf/4wrD7226AsmkSBOz8CQJz5Wyv1USXlnbrhgVxVGH+VwQLu4zTODq4
6t2n7XKD9QUFjXuutvEgF5f0myQZeQy8+8SZ5F6KdvuVnKEgNrK6axaFhKJfpLjo
yguYB3QONsQqWd0S9dTaP39EaJ6TXhxUoTQ=
-----END CERTIFICATE-----
Generated at Sun Oct 11 06:58:09 2026 by rpki-client