
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa
File: 8a33a951-e355-313c-9b36-7f71a8dc82c0.roa (raw, json)
Hash identifier: 5KDVxwU6TknmUTszDhy98Tpwz99IqwINMYHO/Pm07P0=
Subject key identifier: C8:78:E4:BD:62:E2:84:5D:FB:48:96:B9:2B:88:BB:AE:39:6D:8B:BB
Certificate issuer: /CN=48c4aba6-5e67-450a-b4a4-647523380d01
Certificate serial: 010D0C9F4328584D8D8FF5655BA6857EFDD7D9C0
Authority key identifier: E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa
Signing time: Sun 19 Apr 2026 01:00:23 +0000
ROA not before: Sun 19 Apr 2026 01:00:23 +0000
ROA not after: Sat 18 Jul 2026 01:00:23 +0000
asID: 16509
IP address blocks: 2602:f5df::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:8d:8f:f5:65:5b:a6:85:7e:fd:d7:d9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=48c4aba6-5e67-450a-b4a4-647523380d01
Validity
Not Before: Apr 19 01:00:23 2026 GMT
Not After : Jul 18 01:00:23 2026 GMT
Subject: CN=450d1ba4-2aa3-4211-a60a-7e568e916d79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:08:9b:0e:b0:b1:ba:56:21:92:ae:80:2d:bb:
ea:ea:dc:38:bf:4f:e5:67:55:e8:fb:98:d2:79:5f:
2b:47:61:71:a9:88:67:27:4d:6c:83:71:9f:1d:eb:
3b:fd:11:48:2b:80:74:33:de:18:7b:61:ca:2a:16:
a3:32:a1:78:8f:3b:f7:96:d7:91:63:7c:29:c6:0f:
bb:e8:40:10:77:72:8e:86:06:68:8d:21:b3:92:a2:
c8:cd:49:11:d0:fd:21:9c:bf:48:f0:0b:cd:54:41:
4e:28:13:ba:03:c5:cb:85:95:b4:d2:5a:11:16:a4:
d5:54:c2:02:7c:7b:24:dc:2a:87:47:72:0e:4e:85:
db:d2:61:3a:b4:a1:f3:e8:bf:5c:b4:25:ff:07:26:
c5:22:78:d5:da:1a:a4:f6:6f:d2:2d:e9:3c:8e:95:
71:e8:d8:a8:d8:db:7d:e7:de:90:35:9a:d9:89:42:
b0:c3:25:49:fc:35:41:24:d8:eb:eb:9b:1a:1f:66:
70:3f:ab:47:19:fe:99:14:8e:6f:d3:ed:8e:c3:5f:
73:d5:c6:4a:70:99:9d:3e:93:14:c1:f7:66:99:23:
69:a8:42:70:de:30:56:64:3a:9b:71:b3:05:fe:34:
a9:23:3a:e8:32:8b:5f:cb:cd:e6:bb:5b:48:0a:63:
63:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:78:E4:BD:62:E2:84:5D:FB:48:96:B9:2B:88:BB:AE:39:6D:8B:BB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/8a33a951-e355-313c-9b36-7f71a8dc82c0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01/48c4aba6-5e67-450a-b4a4-647523380d01.crl
X509v3 Authority Key Identifier:
keyid:E3:C5:FD:2E:5F:6F:86:F9:DC:8C:6B:4E:D5:6A:D3:37:E7:1D:2F:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/48c4aba6-5e67-450a-b4a4-647523380d01.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f5df::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
77:59:73:63:46:b0:95:ca:75:f7:cc:25:f2:41:27:17:d0:0c:
76:ff:20:80:55:0b:c3:31:ca:fa:ae:18:32:c7:9a:cf:be:d1:
45:06:c9:14:a4:2b:46:30:f1:bf:f9:53:d7:b3:40:8b:f8:48:
7b:15:9a:79:f6:38:14:a3:30:00:50:2d:ff:c2:7c:1d:86:af:
94:56:84:e7:da:5a:80:7d:b9:d5:58:b4:13:14:3a:35:a7:ef:
58:2d:dc:1e:3e:31:d5:5b:09:b4:31:32:35:f1:14:d8:95:a1:
83:39:a1:79:a6:e6:b2:6a:89:d3:06:48:4c:78:ad:43:5b:5c:
e6:2b:8a:ea:8c:dc:a2:2b:90:fa:7f:5f:89:a6:07:ff:e2:ee:
3d:83:d1:2f:02:c8:53:7e:1c:24:52:b1:a8:05:f5:a7:11:3c:
d9:0e:2e:0e:81:2d:29:bd:67:e6:16:ad:29:1d:41:a8:5c:1d:
e6:f8:9e:29:5e:22:bf:a2:a7:54:c4:1c:46:07:87:fa:d3:f9:
60:bf:21:8a:4b:67:b3:36:75:7a:06:34:79:7b:7f:01:5a:9c:
b2:86:ad:a1:14:90:4e:17:a2:23:83:07:7a:b5:c4:e4:92:1f:
d7:cf:94:10:fe:75:d8:8b:8c:e8:87:21:6b:7d:c8:c9:92:8c:
29:72:8d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 12:31:17 2026 by rpki-client