
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
File: a96cb05b-0c60-3552-884a-bbc614e95519.roa (raw, json)
Hash identifier: besh2eyXxdGR8quAajcscdsbDXbhiOJ4O0WTJ1Ef56Y=
Subject key identifier: 06:C9:73:F1:8B:0A:A5:24:80:F4:83:D2:E4:CB:13:DC:2C:00:C2:CD
Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Certificate serial: 010D0C9F4328584F497367C650F7496DAA22A780
Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 40536
IP address blocks: 2602:f629:1::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 27 Sep 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:73:67:c6:50:f7:49:6d:aa:22:a7:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=853ce389-b5c1-4bcc-ae86-8d8ec5811c89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:c0:c3:90:ce:7c:a6:17:62:bd:7a:1a:f1:
20:b0:e4:4f:4d:69:7e:c5:34:ba:73:ca:12:73:10:
3e:b8:d2:03:d7:3a:2a:ca:22:c6:21:96:39:61:66:
d0:1f:5a:bd:03:50:6c:4d:79:46:c1:27:4c:7a:04:
6f:79:35:1c:a7:78:f6:51:60:6f:00:e8:bb:98:a8:
98:c6:32:1f:ca:cd:73:c9:33:fb:72:14:97:f6:98:
24:cf:4e:35:1f:3d:7d:8f:9d:83:38:5e:1a:57:09:
fa:d8:f6:e6:d8:c2:bb:56:e3:ed:8b:3b:f6:8c:45:
c8:22:df:a8:32:59:9c:67:0a:3e:69:72:9e:18:53:
d9:13:6f:c6:81:0f:f8:2c:ba:19:34:09:77:74:cc:
56:c8:dc:4a:1e:b1:ce:46:22:03:81:aa:84:20:b4:
54:7c:29:c0:4e:5d:06:3e:64:c9:3b:a2:79:3a:9a:
5f:1b:0b:58:91:56:79:06:ec:ee:cc:75:fe:a4:3b:
8a:a5:fe:07:b5:89:22:5c:5e:eb:3f:9d:9c:4e:6c:
4f:25:95:26:3a:b8:ab:77:80:15:60:a7:7e:b8:79:
8d:f2:f8:e4:d4:7e:ac:2a:71:d9:d1:ec:a7:c4:87:
f3:d8:d4:eb:79:6f:50:47:d9:28:e9:7c:7a:87:16:
3d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:C9:73:F1:8B:0A:A5:24:80:F4:83:D2:E4:CB:13:DC:2C:00:C2:CD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/a96cb05b-0c60-3552-884a-bbc614e95519.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
X509v3 Authority Key Identifier:
keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f629:1::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
81:c3:f6:a8:48:39:50:27:ad:37:f3:4c:bb:77:de:2b:0e:57:
5e:dd:0c:78:54:22:a1:6f:5a:ab:b4:b0:8e:99:54:58:e1:d0:
25:ae:43:fa:52:04:f8:02:ee:33:58:42:a5:ad:1a:bd:e4:2c:
fa:c6:3a:ce:94:82:67:a6:0c:ba:e0:14:4d:f6:f0:a5:99:01:
89:bd:c7:5d:eb:f1:9f:e7:15:bd:4e:ab:25:b6:9e:7b:f0:e5:
0c:b4:96:25:93:12:89:75:a1:5c:fb:7f:9e:dd:51:d2:fd:aa:
6a:90:3b:4c:7b:6e:47:51:79:7a:ca:ff:21:57:68:ee:9a:1b:
ea:4e:2c:be:03:08:fb:f0:0b:9c:bb:48:9e:1d:c2:05:d7:e3:
5d:32:5a:4e:43:bb:fd:c8:27:b4:05:23:73:20:23:51:e3:d3:
67:57:e7:74:37:e4:31:d0:5e:e0:7a:e7:68:ca:39:ac:e8:e8:
04:18:19:d0:05:50:ac:fb:d4:1e:99:91:cd:51:89:63:39:e9:
2b:a3:69:97:a5:70:ef:cf:f1:be:14:bb:a4:af:10:0b:52:58:
38:c0:c3:0c:67:71:aa:2c:6b:57:8e:ac:8c:d5:49:17:54:64:
99:e8:7c:d4:e1:bc:2c:dd:cb:51:33:c0:63:76:3e:9c:07:65:
7e:59:2d:02
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE9Jc2fGUPdJbaoip4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJlNDU5MTItZTZlMy00MDBjLWIwYmUtNGY2YzcwMDFm
NWNiMB4XDTI2MDkyNTAxMDAxMloXDTI2MTIyNDAyMDAxMlowLzEtMCsGA1UEAxMk
ODUzY2UzODktYjVjMS00YmNjLWFlODYtOGQ4ZWM1ODExYzg5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnGrAw5DOfKYXYr16GvEgsORPTWl+xTS6c8oS
cxA+uNID1zoqyiLGIZY5YWbQH1q9A1BsTXlGwSdMegRveTUcp3j2UWBvAOi7mKiY
xjIfys1zyTP7chSX9pgkz041Hz19j52DOF4aVwn62Pbm2MK7VuPtizv2jEXIIt+o
MlmcZwo+aXKeGFPZE2/GgQ/4LLoZNAl3dMxWyNxKHrHORiIDgaqEILRUfCnATl0G
PmTJO6J5OppfGwtYkVZ5BuzuzHX+pDuKpf4HtYkiXF7rP52cTmxPJZUmOrird4AV
YKd+uHmN8vjk1H6sKnHZ0eynxIfz2NTreW9QR9ko6Xx6hxY9nQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFAbJc/GLCqUkgPSD0uTLE9wsAMLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0
NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZjNzAwMWY1Y2IvYTk2Y2IwNWItMGM2MC0z
NTUyLTg4NGEtYmJjNjE0ZTk1NTE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZDJlNDU5MTItZTZlMy00MDBjLWIw
YmUtNGY2YzcwMDFmNWNiL2QyZTQ1OTEyLWU2ZTMtNDAwYy1iMGJlLTRmNmM3MDAx
ZjVjYi5jcmwwHwYDVR0jBBgwFoAUqXP9VqxhWYP2vyHMtlE4hrEuIB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kMmU0NTkxMi1lNmUzLTQwMGMtYjBiZS00ZjZj
NzAwMWY1Y2IuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgL2KQAB
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAIHD9qhIOVAnrTfzTLt33isOV17dDHhUIqFvWqu0sI6ZVFjh0CWu
Q/pSBPgC7jNYQqWtGr3kLPrGOs6UgmemDLrgFE328KWZAYm9x13r8Z/nFb1OqyW2
nnvw5Qy0liWTEol1oVz7f57dUdL9qmqQO0x7bkdReXrK/yFXaO6aG+pOLL4DCPvw
C5y7SJ4dwgXX410yWk5Du/3IJ7QFI3MgI1Hj02dX53Q35DHQXuB652jKOazo6AQY
GdAFUKz71B6Zkc1RiWM56SujaZelcO/P8b4Uu6SvEAtSWDjAwwxncaosa1eOrIzV
SRdUZJnofNThvCzdy1EzwGN2PpwHZX5ZLQI=
-----END CERTIFICATE-----
Generated at Sat Sep 26 20:38:53 2026 by rpki-client