
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5ae2a426-39f0-3760-9377-592af0afb6ca.roa
File: 5ae2a426-39f0-3760-9377-592af0afb6ca.roa (raw, json)
Hash identifier: J8lWbBpY09iNzqYAFeLi4QK8MbXoYNNQYK3Jw+64fGQ=
Subject key identifier: 13:04:89:40:F2:E5:8A:51:70:99:3D:67:6E:28:FF:33:D4:30:23:AF
Certificate issuer: /CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Certificate serial: 010D0C9F4328584F498ACF70AC75EBB19B1B8D00
Authority key identifier: 8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5ae2a426-39f0-3760-9377-592af0afb6ca.roa
Signing time: Fri 25 Sep 2026 01:00:12 +0000
ROA not before: Fri 25 Sep 2026 01:00:12 +0000
ROA not after: Thu 24 Dec 2026 02:00:12 +0000
asID: 2635
IP address blocks: 2620:109:b000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 26 Sep 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:49:8a:cf:70:ac:75:eb:b1:9b:1b:8d:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dd53d9e-382d-4f16-b9d4-08067d598d81
Validity
Not Before: Sep 25 01:00:12 2026 GMT
Not After : Dec 24 02:00:12 2026 GMT
Subject: CN=670ff001-2806-458d-8c25-4fc35109fe85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:08:11:30:e8:d5:7e:70:5c:d4:ca:e9:cf:22:
ab:7c:a7:bc:72:d5:29:6d:91:16:c2:d3:a1:41:6b:
3d:e9:db:a1:39:bb:c1:63:4b:9f:ba:92:72:e2:88:
2c:9a:30:30:3a:85:1e:f8:35:cd:80:35:6b:6f:00:
cc:3c:3d:8d:66:ce:80:95:76:27:4c:4a:24:fb:01:
15:db:09:b8:8c:84:e6:2a:9e:49:06:56:15:d6:0a:
46:d8:ba:bc:2c:93:d4:92:fc:5a:2d:b5:a1:9c:6a:
66:b7:c9:d4:c9:a0:85:80:62:e6:fb:c1:62:c9:67:
72:8f:90:c5:fa:fa:fd:d1:93:3c:fb:d7:61:6a:68:
0e:dd:ec:19:62:23:1e:7c:fc:82:2e:f1:80:17:fd:
0c:89:ba:5d:13:6a:a0:ca:42:e3:e6:63:f7:20:4a:
a9:09:ca:75:31:ed:db:28:b6:84:c0:26:8f:a0:ca:
7f:75:82:eb:63:f1:18:82:ca:6a:b9:81:4c:b9:98:
f3:e1:1c:3e:e4:31:a4:e4:f2:99:38:cf:85:ba:bd:
06:05:aa:4f:8a:69:96:c4:a5:5a:ca:94:b5:c1:6b:
2d:b7:53:20:58:ae:2c:c5:54:ef:8f:f1:37:41:76:
d3:d7:31:fd:de:f2:bd:f6:5b:0b:8f:26:e5:5b:ce:
86:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:04:89:40:F2:E5:8A:51:70:99:3D:67:6E:28:FF:33:D4:30:23:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5ae2a426-39f0-3760-9377-592af0afb6ca.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81/5dd53d9e-382d-4f16-b9d4-08067d598d81.crl
X509v3 Authority Key Identifier:
keyid:8C:ED:19:E2:82:DC:31:0D:9D:A6:4F:37:50:BB:03:8D:52:E3:EE:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/5dd53d9e-382d-4f16-b9d4-08067d598d81.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:109:b000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3d:8b:7c:2e:b7:db:4e:f7:1e:42:4e:02:b1:b8:54:af:89:53:
69:89:12:01:3e:24:4b:aa:d3:be:98:44:df:65:80:93:df:d9:
7f:7b:fc:28:0e:f2:bf:01:a6:b7:08:3d:1c:d1:05:08:e9:d9:
8b:1c:c9:4a:46:53:6e:26:26:70:5c:25:01:6a:16:29:fd:15:
de:ab:80:fd:ed:08:38:f3:d5:d6:13:09:07:5a:6d:d7:21:e2:
c8:23:d4:cc:b9:bf:e9:6a:48:ac:8e:64:ab:9f:fc:4f:0a:bc:
79:44:e9:a2:0e:37:8e:ac:f8:87:00:a4:d4:43:38:b1:8e:8c:
a0:ce:ef:42:a3:53:e4:7c:4a:16:0e:14:f3:00:bc:bd:b1:08:
92:d6:d9:e6:a5:b5:bd:3d:3d:c4:8e:52:25:5d:24:c4:45:b6:
27:20:92:6a:5b:ed:83:44:9b:24:4e:0b:86:48:99:2d:07:b6:
33:0d:8f:5b:0b:0d:77:11:ad:73:5a:07:13:e5:1b:30:e8:b1:
fb:e0:e4:09:52:ae:74:95:d9:7f:38:6c:23:67:e1:4a:e6:1d:
4f:49:57:9a:73:40:be:f5:2c:96:b0:81:5a:96:0c:74:d2:b9:
79:11:ef:dc:97:9d:ef:6b:e1:85:40:e0:b5:3c:0a:d1:e7:37:
5c:1c:50:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 16:03:27 2026 by rpki-client