
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/d41a9226-82f4-32dd-ace0-fbefdd1601a3.roa
File: d41a9226-82f4-32dd-ace0-fbefdd1601a3.roa (raw, json)
Hash identifier: iqIL1gGs4xiNxz3aJFaOlxRmhSiu5+oKp/ppqheqa2k=
Subject key identifier: 63:6B:4D:5D:8C:B5:4D:DA:F2:FE:F2:B9:37:09:F0:CE:3A:8C:66:80
Certificate issuer: /CN=a4c09862-33b2-4c17-b018-07f7502c45f6
Certificate serial: 010D0C9F4328584DE41B29C2445E6267B5F91A00
Authority key identifier: B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/d41a9226-82f4-32dd-ace0-fbefdd1601a3.roa
Signing time: Wed 20 May 2026 01:00:25 +0000
ROA not before: Wed 20 May 2026 01:00:25 +0000
ROA not after: Tue 18 Aug 2026 01:00:25 +0000
asID: 22686
IP address blocks: 2620:13a:4000::/40 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 06 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:e4:1b:29:c2:44:5e:62:67:b5:f9:1a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4c09862-33b2-4c17-b018-07f7502c45f6
Validity
Not Before: May 20 01:00:25 2026 GMT
Not After : Aug 18 01:00:25 2026 GMT
Subject: CN=d878cef8-d0e8-457a-bd6e-f66d3862dbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e6:83:a8:0a:25:0c:41:7e:c3:5e:1e:e6:06:
b0:da:f8:43:f5:af:b6:69:9c:c8:1e:05:e4:98:e9:
21:9e:98:d2:39:95:52:5c:8d:8c:15:68:4b:67:de:
81:df:af:37:d1:c8:36:dd:5a:1b:44:7c:b0:71:14:
57:72:76:e7:3f:95:61:a1:bb:17:c2:99:44:e4:5d:
6b:0b:e0:39:e4:d7:19:74:1b:84:bc:4f:6e:2a:f4:
dc:b8:6f:e7:9a:8d:83:51:c7:1f:1f:15:cd:dc:bd:
d9:ed:38:a4:75:9a:5c:3f:89:fc:99:06:0b:84:b6:
8b:cc:1d:9e:3d:76:ad:fc:96:f6:83:8d:ba:49:41:
13:e3:c9:ad:b2:40:2b:9c:85:ca:19:f5:5c:85:5d:
39:c5:72:3a:ee:04:00:6a:49:7e:24:58:d5:a9:0d:
c3:92:8b:8e:d8:60:fe:89:a2:aa:2b:56:a5:ee:8c:
ee:6f:10:c0:f4:94:b3:c0:99:5a:36:52:5c:32:e5:
a7:30:a5:f0:4f:48:0f:c3:1e:3f:d9:25:24:e2:49:
f9:5d:54:38:00:75:5b:82:d1:83:84:4a:66:c6:e4:
a1:9f:8e:9c:3b:19:55:6d:4e:1e:c3:fb:d2:5b:79:
c3:d6:ec:02:ce:67:0b:c4:47:fc:8d:79:0d:10:ce:
55:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:6B:4D:5D:8C:B5:4D:DA:F2:FE:F2:B9:37:09:F0:CE:3A:8C:66:80
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/d41a9226-82f4-32dd-ace0-fbefdd1601a3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6/a4c09862-33b2-4c17-b018-07f7502c45f6.crl
X509v3 Authority Key Identifier:
keyid:B1:EC:6B:3E:C5:8E:37:48:E6:32:13:45:FF:4E:63:91:C4:9C:0A:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a4c09862-33b2-4c17-b018-07f7502c45f6.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:13a:4000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:b1:ee:cf:16:18:91:ea:94:12:8e:4b:30:fe:98:7e:20:48:
01:7f:64:bc:c9:49:33:fc:09:93:0b:c1:0a:33:d2:b8:43:df:
c9:d6:cd:e0:84:00:3e:dc:48:66:1d:71:82:0d:03:84:b4:02:
15:bb:37:89:ad:6c:cb:fd:81:a1:dd:71:8c:10:51:53:f7:5d:
f3:9b:a6:4c:bb:5a:39:c2:66:a5:a2:a9:c9:2e:f4:c5:78:33:
81:90:d7:d0:2b:5a:dd:2a:53:f5:53:73:08:a9:2a:82:7c:90:
d6:28:cd:3a:7a:cd:6e:d1:82:b6:58:dd:b6:67:49:39:ee:e0:
44:c6:86:1d:e2:5c:de:02:48:b2:38:42:a0:8f:c1:89:96:6b:
70:85:3e:9f:4a:db:7e:69:6b:d5:95:f6:b9:70:57:5e:ed:d8:
ee:9b:da:b6:49:e6:fa:ec:de:ae:fe:d9:26:24:16:0f:ff:fd:
3e:9c:bc:7a:3b:5b:7b:68:6d:71:2c:2c:52:eb:b7:d6:db:87:
5a:a1:b4:69:19:69:b7:4b:14:5f:4e:a3:46:e7:89:3c:4f:d8:
29:df:f0:0a:a6:d0:07:1c:7a:68:f2:25:6f:d4:f8:23:e7:ac:
e0:b8:c2:10:29:1f:ee:d6:db:e1:07:e2:91:8f:3f:c4:fe:3e:
13:8b:e4:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 3 20:58:54 2026 by rpki-client