
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
File: df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa (raw, json)
Hash identifier: Hcdhs1HXBBoSIwBMA6RSP2/bU8e+8hfrciTxrgD3kTs=
Subject key identifier: A1:C6:97:0D:B8:2F:8E:42:27:E2:87:01:44:03:2A:B8:F1:C2:D1:2D
Certificate issuer: /CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Certificate serial: 010D0C9F4328584E5D14A651D30CED357D1981CC
Authority key identifier: 85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
Signing time: Thu 02 Jul 2026 09:00:12 +0000
ROA not before: Thu 02 Jul 2026 09:00:12 +0000
ROA not after: Wed 30 Sep 2026 09:00:12 +0000
asID: 0
IP address blocks: 2602:fd10:900::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 08 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:5d:14:a6:51:d3:0c:ed:35:7d:19:81:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a42c5795-954d-468f-9deb-7f3ab63c11dd
Validity
Not Before: Jul 2 09:00:12 2026 GMT
Not After : Sep 30 09:00:12 2026 GMT
Subject: CN=db217cef-870c-48be-a7ea-2b3cf415200e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:95:d9:bc:a5:62:9b:15:40:16:fb:9c:ae:43:
2d:d6:8f:64:62:5e:38:42:6e:ae:59:c8:6e:cf:1c:
62:9f:44:d2:ff:20:62:c4:d1:4f:ae:fc:ce:4a:07:
c1:ff:cb:db:22:cc:b4:fe:c9:16:73:3c:65:64:8d:
76:98:fe:86:b6:6c:91:57:77:53:ff:26:fb:d7:60:
3e:6c:a1:13:df:72:09:af:9a:88:ab:47:39:a0:b0:
79:09:75:b0:92:b0:1a:bb:f1:19:98:a1:f1:6e:8d:
7e:fe:92:9d:be:1c:87:25:74:8e:71:41:d8:76:39:
63:07:26:24:74:f1:3a:09:49:d0:33:b1:2e:bc:3c:
bb:c2:f6:e1:0f:6f:a2:8f:a6:46:ba:aa:95:81:6d:
04:f9:a2:c5:83:8c:3d:ba:e3:de:00:7f:3c:6a:67:
5b:9d:a5:58:dc:80:f1:84:21:55:e9:98:cc:30:67:
9f:ad:00:c2:e3:2d:1a:46:59:d9:4b:29:68:59:59:
a3:ef:41:50:f2:4a:fa:b2:c4:4c:2a:ef:c2:6a:5c:
ac:22:21:79:bf:d2:31:fd:ae:80:12:db:a4:97:39:
4a:76:ed:96:d9:08:b1:55:60:d6:ba:cc:12:22:e0:
9a:0a:67:e8:16:47:28:ab:fc:e2:6f:bb:41:e9:96:
6b:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:C6:97:0D:B8:2F:8E:42:27:E2:87:01:44:03:2A:B8:F1:C2:D1:2D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/df9b2eb8-a355-3f33-8292-9ee69c9f0557.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd/a42c5795-954d-468f-9deb-7f3ab63c11dd.crl
X509v3 Authority Key Identifier:
keyid:85:0F:43:17:4E:E3:DC:C6:CF:1E:7A:58:D6:7C:8B:82:F1:17:DC:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a42c5795-954d-468f-9deb-7f3ab63c11dd.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd10:900::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
41:0b:33:cf:4b:95:5b:a9:25:47:bf:35:62:91:8d:e6:e6:ae:
9c:d5:17:af:c0:a2:19:81:9f:d2:76:ec:ae:ed:fd:51:48:b4:
0a:3c:9c:3e:bc:df:e4:fb:7f:25:26:4f:86:5f:fe:69:b3:35:
dd:f3:82:7a:00:7b:a9:d8:44:cb:23:8c:a9:c7:d4:99:26:8d:
ec:24:3a:d7:1d:f0:e7:96:72:98:da:21:65:8e:71:6a:64:ab:
81:00:0a:55:ab:ee:46:2f:9f:b4:bf:83:d4:6f:60:bd:e8:2f:
ab:2b:e9:5a:61:1b:c3:09:d0:bf:12:6f:bc:5a:50:39:55:1b:
f7:c0:eb:55:1b:d8:d1:47:f1:16:9d:87:1b:e4:2c:a3:e7:01:
d6:3b:ca:f8:55:7c:43:eb:85:e1:41:fb:92:bf:90:e9:d0:57:
5d:c5:e5:1a:8a:f2:94:9c:48:15:70:5f:d1:3b:a6:dd:9d:3d:
1a:0c:19:0d:e6:2e:71:15:72:76:24:92:55:c0:63:57:3d:8e:
13:e2:72:c2:c7:fa:ad:8b:d7:e6:75:11:74:26:e3:d7:4f:ec:
ec:03:83:0c:ae:d4:a2:1f:db:f8:74:28:89:41:6c:a6:97:03:
53:17:cb:8c:b5:6f:75:18:cf:0d:c1:28:48:03:b6:f0:53:47:
ca:65:9e:64
-----BEGIN CERTIFICATE-----
MIIGRTCCBS2gAwIBAgIUAQ0Mn0MoWE5dFKZR0wztNX0ZgcwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQyYzU3OTUtOTU0ZC00NjhmLTlkZWItN2YzYWI2M2Mx
MWRkMB4XDTI2MDcwMjA5MDAxMloXDTI2MDkzMDA5MDAxMlowLzEtMCsGA1UEAxMk
ZGIyMTdjZWYtODcwYy00OGJlLWE3ZWEtMmIzY2Y0MTUyMDBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJXZvKVimxVAFvucrkMt1o9kYl44Qm6uWchu
zxxin0TS/yBixNFPrvzOSgfB/8vbIsy0/skWczxlZI12mP6GtmyRV3dT/yb712A+
bKET33IJr5qIq0c5oLB5CXWwkrAau/EZmKHxbo1+/pKdvhyHJXSOcUHYdjljByYk
dPE6CUnQM7EuvDy7wvbhD2+ij6ZGuqqVgW0E+aLFg4w9uuPeAH88amdbnaVY3IDx
hCFV6ZjMMGefrQDC4y0aRlnZSyloWVmj70FQ8kr6ssRMKu/CalysIiF5v9Ix/a6A
EtuklzlKdu2W2QixVWDWuswSIuCaCmfoFkcoq/zib7tB6ZZrnwIDAQABo4IDVzCC
A1MwHQYDVR0OBBYEFKHGlw24L45CJ+KHAUQDKrjxwtEtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJj
NTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNhYjYzYzExZGQvZGY5YjJlYjgtYTM1NS0z
ZjMzLTgyOTItOWVlNjljOWYwNTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQyYzU3OTUtOTU0ZC00NjhmLTlk
ZWItN2YzYWI2M2MxMWRkL2E0MmM1Nzk1LTk1NGQtNDY4Zi05ZGViLTdmM2FiNjNj
MTFkZC5jcmwwHwYDVR0jBBgwFoAUhQ9DF07j3MbPHnpY1nyLgvEX3HAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDJjNTc5NS05NTRkLTQ2OGYtOWRlYi03ZjNh
YjYzYzExZGQuY2VyMCEGCCsGAQUFBwEHAQH/BBIwEDAOBAIAAjAIAwYAJgL9EAkw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAQQszz0uVW6klR781YpGN5uaunNUXr8CiGYGf0nbsru39UUi0Cjyc
Przf5Pt/JSZPhl/+abM13fOCegB7qdhEyyOMqcfUmSaN7CQ61x3w55ZymNohZY5x
amSrgQAKVavuRi+ftL+D1G9gvegvqyvpWmEbwwnQvxJvvFpQOVUb98DrVRvY0Ufx
Fp2HG+Qso+cB1jvK+FV8Q+uF4UH7kr+Q6dBXXcXlGorylJxIFXBf0Tum3Z09GgwZ
DeYucRVydiSSVcBjVz2OE+Jywsf6rYvX5nURdCbj10/s7AODDK7Uoh/b+HQoiUFs
ppcDUxfLjLVvdRjPDcEoSAO28FNHymWeZA==
-----END CERTIFICATE-----
Generated at Tue Jul 7 09:48:53 2026 by rpki-client