
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa
File: 5a332d9b-62ef-39aa-909f-d101b26e69f6.roa (raw, json)
Hash identifier: i+h2o8r7s/L0rFKOWjvs0lRv5k3R4KwmdCuO6+pNUN8=
Subject key identifier: 0B:F0:6B:A5:E8:82:28:D6:8A:70:07:C6:C5:32:A3:3F:ED:53:0C:AA
Certificate issuer: /CN=dd3e6032-a6af-4662-8b07-848eeecc3995
Certificate serial: 010D0C9F4328584D9A201AD92EC1F7E79BB08840
Authority key identifier: 67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa
Signing time: Thu 23 Apr 2026 13:00:32 +0000
ROA not before: Thu 23 Apr 2026 13:00:32 +0000
ROA not after: Wed 22 Jul 2026 13:00:32 +0000
asID: 46824
IP address blocks: 2602:faa9::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9a:20:1a:d9:2e:c1:f7:e7:9b:b0:88:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dd3e6032-a6af-4662-8b07-848eeecc3995
Validity
Not Before: Apr 23 13:00:32 2026 GMT
Not After : Jul 22 13:00:32 2026 GMT
Subject: CN=76259900-8c78-4325-a2ca-8ad4716cd872
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:25:8f:28:30:6d:14:4c:3c:6e:03:bc:f8:c7:
22:52:54:57:3b:05:a9:b9:ce:88:77:75:31:d3:26:
41:7a:75:68:ec:a3:d1:6f:7a:67:04:71:f3:2b:4b:
56:fc:22:99:63:93:97:84:4e:0e:54:fc:20:3e:73:
08:84:e2:fe:0c:6b:cc:61:3c:f4:4c:56:aa:7d:67:
93:59:0d:15:c5:49:fb:6a:8c:d6:18:b9:fb:a0:79:
03:11:ef:e9:f2:c0:11:e1:90:82:d9:5d:82:db:7f:
8a:88:b4:e0:dc:e8:48:b2:7e:f7:89:24:f1:27:6e:
b8:ec:02:16:69:03:fd:20:d4:e4:ed:aa:17:85:b1:
2a:b9:78:3d:8e:a9:8c:57:88:7c:9b:69:dd:fc:08:
16:fa:ba:b2:4e:68:ec:64:3d:78:3b:0c:0e:de:9c:
b1:35:fd:67:9a:13:51:75:90:ee:42:b1:76:9a:e1:
1e:dc:fb:92:8e:25:f8:09:79:54:dc:37:46:80:f3:
4a:e3:26:02:66:3d:d5:2e:8b:1c:41:6d:52:55:ad:
03:66:54:5f:b7:70:51:e6:06:0f:2f:62:89:d1:01:
ea:86:80:7c:68:b4:a2:02:1e:d9:44:51:b4:99:78:
33:d1:41:ce:ce:63:81:e2:45:3d:57:5a:2d:aa:1b:
d5:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:F0:6B:A5:E8:82:28:D6:8A:70:07:C6:C5:32:A3:3F:ED:53:0C:AA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/5a332d9b-62ef-39aa-909f-d101b26e69f6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995/dd3e6032-a6af-4662-8b07-848eeecc3995.crl
X509v3 Authority Key Identifier:
keyid:67:05:BA:E6:0C:E6:EC:BA:69:B6:2B:17:EB:42:FF:2F:6F:4E:02:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/dd3e6032-a6af-4662-8b07-848eeecc3995.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:faa9::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
62:07:bf:50:78:82:28:92:ab:61:65:3f:b8:76:d4:6a:76:98:
24:9c:99:3d:82:64:b0:e8:be:a4:4d:8e:36:5e:1c:58:96:aa:
25:29:6a:18:e7:6a:43:f0:08:ac:eb:31:e7:55:25:2b:15:dc:
a1:d6:ba:42:35:66:9d:2c:11:4b:f3:31:c0:af:0b:10:c5:71:
16:46:f0:f6:9a:7c:d3:44:66:c6:40:5b:13:5d:bb:aa:36:76:
5a:e4:7a:0e:53:c0:43:72:a0:72:19:df:4c:f9:46:56:c5:a8:
ee:aa:6c:46:0c:b3:8a:a3:9f:3a:23:cd:a3:77:7c:84:d8:13:
6b:b0:81:92:52:ba:de:71:78:02:fd:ce:03:ef:b7:68:c1:a3:
8b:77:79:ed:9e:cb:d8:50:19:3f:e0:4e:c9:3d:02:d4:54:d4:
4b:b1:de:77:2b:b8:84:33:c1:95:88:d1:c6:7b:97:2d:eb:29:
45:bf:67:a2:64:a6:ae:f3:85:58:0a:f8:de:ff:14:fd:3c:2d:
23:04:fa:51:17:18:7a:3c:55:7c:a8:cd:01:e4:0c:e6:e3:b2:
ca:e4:76:80:0a:26:30:cd:f5:54:0b:ae:48:66:0c:46:5c:f3:
86:f1:87:49:f6:25:29:9e:e2:39:e2:da:a3:a7:5e:41:aa:28:
2f:41:fe:95
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2aIBrZLsH355uwiEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGQzZTYwMzItYTZhZi00NjYyLThiMDctODQ4ZWVlY2Mz
OTk1MB4XDTI2MDQyMzEzMDAzMloXDTI2MDcyMjEzMDAzMlowLzEtMCsGA1UEAxMk
NzYyNTk5MDAtOGM3OC00MzI1LWEyY2EtOGFkNDcxNmNkODcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmSWPKDBtFEw8bgO8+MciUlRXOwWpuc6Id3Ux
0yZBenVo7KPRb3pnBHHzK0tW/CKZY5OXhE4OVPwgPnMIhOL+DGvMYTz0TFaqfWeT
WQ0VxUn7aozWGLn7oHkDEe/p8sAR4ZCC2V2C23+KiLTg3OhIsn73iSTxJ2647AIW
aQP9INTk7aoXhbEquXg9jqmMV4h8m2nd/AgW+rqyTmjsZD14OwwO3pyxNf1nmhNR
dZDuQrF2muEe3PuSjiX4CXlU3DdGgPNK4yYCZj3VLoscQW1SVa0DZlRft3BR5gYP
L2KJ0QHqhoB8aLSiAh7ZRFG0mXgz0UHOzmOB4kU9V1otqhvV6QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFAvwa6XogijWinAHxsUyoz/tUwyqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kZDNl
NjAzMi1hNmFmLTQ2NjItOGIwNy04NDhlZWVjYzM5OTUvNWEzMzJkOWItNjJlZi0z
OWFhLTkwOWYtZDEwMWIyNmU2OWY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZGQzZTYwMzItYTZhZi00NjYyLThi
MDctODQ4ZWVlY2MzOTk1L2RkM2U2MDMyLWE2YWYtNDY2Mi04YjA3LTg0OGVlZWNj
Mzk5NS5jcmwwHwYDVR0jBBgwFoAUZwW65gzm7LpptisX60L/L29OAi0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kZDNlNjAzMi1hNmFmLTQ2NjItOGIwNy04NDhl
ZWVjYzM5OTUuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgL6qTBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBiB79QeIIokqthZT+4dtRqdpgknJk9gmSw6L6kTY42XhxYlqolKWoY
52pD8Ais6zHnVSUrFdyh1rpCNWadLBFL8zHArwsQxXEWRvD2mnzTRGbGQFsTXbuq
NnZa5HoOU8BDcqByGd9M+UZWxajuqmxGDLOKo586I82jd3yE2BNrsIGSUrrecXgC
/c4D77dowaOLd3ntnsvYUBk/4E7JPQLUVNRLsd53K7iEM8GViNHGe5ct6ylFv2ei
ZKau84VYCvje/xT9PC0jBPpRFxh6PFV8qM0B5Azm47LK5HaACiYwzfVUC65IZgxG
XPOG8YdJ9iUpnuI54tqjp15BqigvQf6V
-----END CERTIFICATE-----
Generated at Wed May 13 10:04:39 2026 by rpki-client