
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa
File: a306220d-1b92-3ea3-97db-9adba304990f.roa (raw, json)
Hash identifier: HxD2lqGZdxqg8c2N8aPusl/5p2Z13LZ5ZULJZMvYVVM=
Subject key identifier: 36:A2:0A:5D:6A:F1:32:72:A9:A4:49:72:05:35:48:30:BB:C2:BD:18
Certificate issuer: /CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Certificate serial: 010D0C9F4328584E86F4E7CF18D72339BD4FDC80
Authority key identifier: A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa
Signing time: Fri 17 Jul 2026 09:00:14 +0000
ROA not before: Fri 17 Jul 2026 09:00:14 +0000
ROA not after: Thu 15 Oct 2026 09:00:14 +0000
asID: 16509
IP address blocks: 2602:28c:2659::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 24 Jul 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:86:f4:e7:cf:18:d7:23:39:bd:4f:dc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906748d-5823-4cd3-9a11-f3dc69a3e751
Validity
Not Before: Jul 17 09:00:14 2026 GMT
Not After : Oct 15 09:00:14 2026 GMT
Subject: CN=b5f9bc7b-1b3f-499a-a446-2adbc9184315
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:0a:10:9c:24:d9:6e:d1:10:28:f7:0b:7f:db:
5b:1e:ff:7f:56:92:ef:56:7f:3f:2e:07:74:49:59:
fc:ac:cd:bd:b1:24:d8:2a:64:a3:26:e4:c9:e9:ea:
71:75:04:74:2f:f0:d2:00:88:89:9d:1d:0e:32:cf:
4d:46:2c:5b:1c:6c:68:e0:e6:5d:95:04:a1:db:ff:
c3:79:aa:1e:9b:43:a6:66:a9:2d:48:3d:df:aa:c8:
bc:1c:c0:69:0b:61:04:8c:f3:0b:13:af:08:6b:e5:
65:2e:4c:8d:e0:73:a4:42:2e:3b:3e:84:99:d9:f1:
fa:c9:5b:c8:3d:c1:ea:5a:bf:1e:00:bf:d4:40:ae:
5f:66:d1:64:41:f2:43:1f:5a:de:c4:74:3c:e9:1f:
0a:f9:d6:2b:be:5d:6c:58:21:47:90:d9:27:95:5a:
0a:e2:3e:63:f4:85:c3:40:59:04:77:73:79:2b:e5:
ac:0c:2c:c4:92:26:12:b2:85:f7:f6:12:59:a1:b1:
a7:55:03:ee:c9:58:80:f0:92:0b:dd:23:0c:98:26:
a8:6c:63:4d:57:26:95:28:09:d2:56:43:c6:62:61:
c1:b9:67:9c:16:74:97:3a:97:f0:6f:34:2f:19:92:
6d:0a:3d:f3:94:46:48:2e:94:1d:b3:73:8e:9d:a9:
28:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:A2:0A:5D:6A:F1:32:72:A9:A4:49:72:05:35:48:30:BB:C2:BD:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/a306220d-1b92-3ea3-97db-9adba304990f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751/9906748d-5823-4cd3-9a11-f3dc69a3e751.crl
X509v3 Authority Key Identifier:
keyid:A7:31:13:DA:A8:C2:6D:D3:40:47:B6:C3:2B:BA:78:43:31:2F:01:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/9906748d-5823-4cd3-9a11-f3dc69a3e751.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:28c:2659::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
18:7d:6e:9c:15:bf:6a:bb:9c:c4:f8:22:3c:9c:a3:b9:8f:f1:
67:1d:86:c7:90:6d:8b:f4:b2:78:dc:c1:1e:9a:71:00:12:1d:
74:8b:9c:4e:94:f7:78:3e:39:30:57:72:e7:43:d9:e1:e9:b5:
37:8e:45:11:23:5b:9d:3f:1b:9c:5c:a5:d0:9d:eb:a8:a1:48:
52:2b:aa:7d:e3:12:73:52:e2:18:74:b6:8a:67:48:1a:7b:f4:
35:5b:d1:77:c3:f3:21:cc:fd:c3:4c:be:80:e0:2d:9e:60:35:
94:98:da:8c:7d:f2:65:39:d3:bf:33:0b:cd:37:fe:18:5d:3c:
ec:a2:bd:b0:10:16:5b:62:98:82:37:fa:f6:6a:b3:cb:92:4f:
fd:c1:a6:18:66:23:4f:5e:be:87:23:b5:b8:2a:36:78:d0:82:
d1:5e:63:48:03:8a:92:80:57:0c:84:95:c1:cf:c0:4f:bc:76:
9d:f2:4e:bf:0a:89:8b:87:56:d7:60:cd:26:61:5b:a6:11:27:
44:d7:03:bc:1e:35:35:6d:19:52:0a:c6:89:57:7d:3a:51:73:
c9:7c:5d:83:3f:05:ff:88:64:83:93:05:4d:8c:ec:45:06:be:
c5:d6:93:d1:2e:64:3c:63:94:f7:b9:4d:4a:15:51:af:77:77:
ef:a1:25:ca
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE6G9OfPGNcjOb1P3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTkwNjc0OGQtNTgyMy00Y2QzLTlhMTEtZjNkYzY5YTNl
NzUxMB4XDTI2MDcxNzA5MDAxNFoXDTI2MTAxNTA5MDAxNFowLzEtMCsGA1UEAxMk
YjVmOWJjN2ItMWIzZi00OTlhLWE0NDYtMmFkYmM5MTg0MzE1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQoQnCTZbtEQKPcLf9tbHv9/VpLvVn8/Lgd0
SVn8rM29sSTYKmSjJuTJ6epxdQR0L/DSAIiJnR0OMs9NRixbHGxo4OZdlQSh2//D
eaoem0OmZqktSD3fqsi8HMBpC2EEjPMLE68Ia+VlLkyN4HOkQi47PoSZ2fH6yVvI
PcHqWr8eAL/UQK5fZtFkQfJDH1rexHQ86R8K+dYrvl1sWCFHkNknlVoK4j5j9IXD
QFkEd3N5K+WsDCzEkiYSsoX39hJZobGnVQPuyViA8JIL3SMMmCaobGNNVyaVKAnS
VkPGYmHBuWecFnSXOpfwbzQvGZJtCj3zlEZILpQds3OOnakoywIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFDaiCl1q8TJyqaRJcgU1SDC7wr0YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2
NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2RjNjlhM2U3NTEvYTMwNjIyMGQtMWI5Mi0z
ZWEzLTk3ZGItOWFkYmEzMDQ5OTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTkwNjc0OGQtNTgyMy00Y2QzLTlh
MTEtZjNkYzY5YTNlNzUxLzk5MDY3NDhkLTU4MjMtNGNkMy05YTExLWYzZGM2OWEz
ZTc1MS5jcmwwHwYDVR0jBBgwFoAUpzET2qjCbdNAR7bDK7p4QzEvAYAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85OTA2NzQ4ZC01ODIzLTRjZDMtOWExMS1mM2Rj
NjlhM2U3NTEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJgICjCZZ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBABh9bpwVv2q7nMT4Ijyco7mP8WcdhseQbYv0snjcwR6acQASHXSL
nE6U93g+OTBXcudD2eHptTeORREjW50/G5xcpdCd66ihSFIrqn3jEnNS4hh0topn
SBp79DVb0XfD8yHM/cNMvoDgLZ5gNZSY2ox98mU5078zC803/hhdPOyivbAQFlti
mII3+vZqs8uST/3BphhmI09evocjtbgqNnjQgtFeY0gDipKAVwyElcHPwE+8dp3y
Tr8KiYuHVtdgzSZhW6YRJ0TXA7weNTVtGVIKxolXfTpRc8l8XYM/Bf+IZIOTBU2M
7EUGvsXWk9EuZDxjlPe5TUoVUa93d++hJco=
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:59:39 2026 by rpki-client