
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf261d6c-a652-301a-9b41-868da8fbfa85.roa
File: cf261d6c-a652-301a-9b41-868da8fbfa85.roa (raw, json)
Hash identifier: Um0aJnmn09CbTwfLC4xLAz10GiwBfStFyW/gmu7E8fw=
Subject key identifier: 1F:A4:AC:4E:6C:08:FB:E0:B0:BE:4A:F9:A7:5B:BC:4F:83:45:AC:23
Certificate issuer: /CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Certificate serial: 010D0C9F4328584DCF2B1864A58D8CBD95020080
Authority key identifier: A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf261d6c-a652-301a-9b41-868da8fbfa85.roa
Signing time: Tue 12 May 2026 13:00:30 +0000
ROA not before: Tue 12 May 2026 13:00:30 +0000
ROA not after: Mon 10 Aug 2026 13:00:30 +0000
asID: 40536
IP address blocks: 2602:f629:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:cf:2b:18:64:a5:8d:8c:bd:95:02:00:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2e45912-e6e3-400c-b0be-4f6c7001f5cb
Validity
Not Before: May 12 13:00:30 2026 GMT
Not After : Aug 10 13:00:30 2026 GMT
Subject: CN=6aa9f476-3cd5-46d5-b879-4cef0ecac5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:e4:63:79:ba:9d:0b:fe:b3:12:e3:d6:60:04:
b1:e7:3b:08:09:f4:02:8b:36:3b:cc:bf:96:f5:fe:
4c:52:b3:68:17:22:31:f0:96:83:fe:4f:3c:c7:00:
3f:df:cc:8a:d5:c7:43:18:ae:44:47:b2:07:96:18:
d4:6a:ac:1a:4c:c7:9f:09:dc:e8:52:85:5a:1f:ed:
dc:f2:ff:ee:70:b6:97:14:14:56:59:4f:66:3e:3c:
29:62:b2:f0:1f:2e:49:74:fa:ed:f4:5d:fa:3e:47:
29:34:ce:d6:28:15:79:e0:0e:1a:ec:14:3c:b0:66:
88:5e:9a:d2:17:a0:d9:69:99:e5:82:3c:a9:f9:d9:
bb:42:0c:4a:b4:0e:a4:96:16:84:9f:85:fd:1a:88:
74:22:04:87:b3:2a:32:0f:86:69:1d:84:60:ad:65:
69:3b:f2:d8:b7:bf:84:78:2f:78:9b:c6:60:bb:01:
57:7e:3c:0b:a1:95:d5:09:50:6f:1d:72:99:4e:9c:
b1:f7:59:b2:c2:33:70:57:5a:a6:06:37:43:85:ff:
0e:42:06:61:61:c9:18:34:52:8a:6e:2a:11:c0:e5:
30:86:b2:a6:62:9f:22:02:0d:fa:c2:34:a7:27:bb:
9f:88:b0:66:90:42:87:e4:53:0c:37:94:9a:d0:a4:
87:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:A4:AC:4E:6C:08:FB:E0:B0:BE:4A:F9:A7:5B:BC:4F:83:45:AC:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/cf261d6c-a652-301a-9b41-868da8fbfa85.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.crl
X509v3 Authority Key Identifier:
keyid:A9:73:FD:56:AC:61:59:83:F6:BF:21:CC:B6:51:38:86:B1:2E:20:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/d2e45912-e6e3-400c-b0be-4f6c7001f5cb.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f629:2::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
8e:60:15:7a:ae:46:75:15:37:f5:93:24:77:00:9a:8b:9d:ec:
f4:32:5b:5d:79:8b:89:50:a5:2e:7d:0d:c4:ab:01:d0:84:49:
c5:70:fe:6f:ab:04:75:9b:56:80:e4:c6:14:5d:92:d4:04:19:
04:44:cd:67:26:1a:9a:e8:ad:24:6e:05:dd:9f:ad:7e:f2:f3:
73:0a:6f:00:a9:3f:e1:49:d6:79:c9:a4:25:47:27:78:f8:0d:
eb:fc:06:8e:ab:0a:a6:75:57:68:f8:46:a1:ce:4b:12:27:4e:
c8:7c:d4:64:b0:87:d0:f4:c4:eb:6e:10:98:38:e4:fb:d7:91:
a3:a5:d5:f3:ac:77:5f:bc:2e:ee:39:56:70:f9:fa:84:a7:91:
c4:5b:cc:4b:07:c1:eb:82:ec:22:1f:6f:55:bf:56:da:e9:b9:
41:18:3e:43:c9:35:d4:c6:98:d9:ed:c9:1b:92:79:f3:d3:b5:
dd:5d:91:f3:de:c7:60:74:f6:30:40:da:f4:3e:fa:3c:e0:12:
fe:c7:10:63:6b:ea:fd:a4:f3:6c:f2:8b:89:6f:15:b4:b1:ec:
eb:c8:b1:16:fe:f6:28:f7:ef:fb:30:96:17:c1:51:a3:0f:76:
d6:f1:c1:c4:6b:28:13:94:60:b2:9b:1b:d1:91:30:da:8c:d5:
c2:2f:20:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 07:53:29 2026 by rpki-client