
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/fa14cf5a-e8c7-357f-bc08-080b46a0fb3b.roa
File: fa14cf5a-e8c7-357f-bc08-080b46a0fb3b.roa (raw, json)
Hash identifier: G6RDlHoL1OrzcyKNQfMc4TLEoJjEBHsvdDVhDlyzEQg=
Subject key identifier: 4D:C9:71:30:00:E2:6C:4D:F6:95:C3:36:32:58:79:BF:37:AD:1C:F2
Certificate issuer: /CN=34592396-ac3d-4a48-97f1-caed65436525
Certificate serial: 010D0C9F4328584F8DD890603AF9B6F40225AD54
Authority key identifier: E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/fa14cf5a-e8c7-357f-bc08-080b46a0fb3b.roa
Signing time: Mon 19 Oct 2026 13:00:12 +0000
ROA not before: Mon 19 Oct 2026 13:00:12 +0000
ROA not after: Sun 17 Jan 2027 14:00:12 +0000
asID: 31898
IP address blocks: 2602:fdeb:600::/47 maxlen: 47
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 30 Oct 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:8d:d8:90:60:3a:f9:b6:f4:02:25:ad:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=34592396-ac3d-4a48-97f1-caed65436525
Validity
Not Before: Oct 19 13:00:12 2026 GMT
Not After : Jan 17 14:00:12 2027 GMT
Subject: CN=6a11ff11-5498-49ae-8edb-c616daacb2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:dc:cb:65:77:32:c6:96:ea:f2:9c:3b:01:31:
8c:1e:2b:69:0d:ca:98:a0:10:c4:57:14:f1:ff:92:
97:74:3c:69:69:5b:de:03:ad:97:19:74:6f:ab:39:
78:a8:44:8e:be:be:d2:84:66:a2:dc:f3:d3:d8:ac:
c6:f3:09:4e:ad:98:bf:3f:5d:ed:9a:f6:42:1a:40:
42:a2:13:ed:c8:87:85:8f:50:a0:63:d5:2d:e0:c8:
cf:f7:3c:c0:46:c6:50:88:55:83:d5:97:13:9d:f7:
b6:85:b9:c9:b2:71:e2:7e:20:58:dc:08:3b:d0:2c:
67:d5:5c:6b:ea:0b:05:4d:83:2d:49:cc:e5:aa:5e:
2c:35:a9:35:45:a2:51:be:90:a2:03:f6:b2:8c:10:
e2:c2:79:51:11:25:10:8c:d1:62:e1:35:6b:3b:e4:
62:61:c9:31:46:94:95:e4:ea:5c:1f:af:7c:f0:c1:
e2:5d:2c:23:7a:0d:a0:9a:89:03:1a:d1:ca:ce:89:
1d:5a:4a:25:f6:f8:14:0f:10:17:96:f0:de:a3:c1:
eb:43:62:5e:2f:73:cd:5e:9c:69:6d:87:8e:6b:07:
46:6c:92:2c:a2:28:4c:2f:60:4e:58:39:cd:d7:9d:
94:5a:16:82:0b:47:4c:a5:3c:b1:8a:45:4b:36:fb:
e0:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:C9:71:30:00:E2:6C:4D:F6:95:C3:36:32:58:79:BF:37:AD:1C:F2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/fa14cf5a-e8c7-357f-bc08-080b46a0fb3b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525/34592396-ac3d-4a48-97f1-caed65436525.crl
X509v3 Authority Key Identifier:
keyid:E0:F9:1F:E1:0F:59:EE:87:BC:BA:61:8A:CE:E9:74:C9:83:E1:41:41
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/34592396-ac3d-4a48-97f1-caed65436525.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fdeb:600::/47
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:93:f1:f0:36:ed:cc:85:f7:9a:01:0e:12:fd:3a:b4:7c:28:
41:14:5b:63:dc:6c:86:db:9b:2a:89:28:3d:f6:0b:7c:66:75:
c9:64:c1:d0:9f:20:38:eb:80:9d:90:bd:9a:dc:cf:68:e5:c6:
11:1c:8f:42:a3:64:47:99:ac:54:0f:be:ca:72:92:88:7c:51:
e9:b3:9d:83:dd:bf:4a:de:1e:55:68:91:1f:c3:bf:2b:a5:de:
1b:17:81:34:1f:37:97:72:af:39:a8:ca:d4:f0:38:39:b8:73:
8c:6e:c9:3e:62:87:e0:e9:1d:45:1e:1a:f3:8c:73:7b:65:78:
96:b1:0f:6a:1b:39:6f:e5:ae:14:a0:8c:8f:b2:24:eb:3b:d2:
c1:8c:59:23:35:92:2b:fb:28:b2:99:58:cd:1b:47:3a:fc:bb:
1c:b1:b7:e2:ef:07:72:26:68:51:1c:e1:df:a0:36:7a:55:f1:
6f:dc:15:a3:4b:f6:bb:bd:46:01:bf:75:db:f5:85:2e:a5:62:
3a:ab:59:d7:e9:a0:0f:2f:c7:af:24:e7:0a:a0:76:63:ee:ef:
b1:d9:06:86:50:1c:08:ed:77:09:a8:84:37:dd:a9:4c:59:2d:
f4:5f:da:ee:4b:9a:76:c4:25:36:12:12:91:04:f8:8a:f1:e9:
b4:67:72:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 14:12:51 2026 by rpki-client