
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d487bdce-b715-3908-93e9-e83d53d1fee3.roa
File: d487bdce-b715-3908-93e9-e83d53d1fee3.roa (raw, json)
Hash identifier: F7wq3S9dUfOdZweaaYvwowgT5JgCpgVjpqXi1+Uesk8=
Subject key identifier: 9C:DA:DB:53:35:EB:44:0B:06:49:90:4B:A6:4C:A8:6B:F1:28:7B:47
Certificate issuer: /CN=49d0709a-32f1-4940-8864-e432721cf3ef
Certificate serial: 010D0C9F4328584EAC623D573518BBCAB9852680
Authority key identifier: 56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d487bdce-b715-3908-93e9-e83d53d1fee3.roa
Signing time: Thu 30 Jul 2026 18:45:29 +0000
ROA not before: Thu 30 Jul 2026 18:45:29 +0000
ROA not after: Wed 28 Oct 2026 18:45:29 +0000
asID: 399970
IP address blocks: 2602:fc3b:ff00:65::/64 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/615fe1dd-d829-4c87-b2cc-5689381a3c42.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 01 Aug 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:ac:62:3d:57:35:18:bb:ca:b9:85:26:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49d0709a-32f1-4940-8864-e432721cf3ef
Validity
Not Before: Jul 30 18:45:29 2026 GMT
Not After : Oct 28 18:45:29 2026 GMT
Subject: CN=bf32ab99-cb52-47fa-9166-9d021763c399
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:50:c4:2e:dd:9b:45:52:fb:82:fb:4d:5a:4f:
dc:2e:0f:5d:3f:9b:84:76:d7:ea:bd:f4:ad:71:73:
67:ec:fa:da:ec:24:5e:41:dc:0a:10:21:31:a7:75:
b0:de:36:3b:72:6e:ce:64:e2:cd:ec:61:1e:14:cd:
4b:5a:4e:b7:0a:02:59:11:84:fe:6a:2f:6d:60:17:
d8:c8:97:ba:a4:5d:8d:33:f7:41:5e:8e:36:1c:8e:
aa:ce:17:d3:78:a7:d0:cc:e9:17:a9:ae:f2:7a:31:
34:7c:8a:2c:46:18:26:a9:d5:de:a4:d6:c7:00:6b:
14:f7:83:e7:11:30:a4:86:70:d7:b2:c3:4f:90:45:
6f:bc:bf:90:73:90:7c:39:77:7a:c6:5e:4e:19:f5:
3f:78:9e:d5:f4:26:55:7d:a7:ba:db:9e:b0:0c:9a:
b9:86:94:19:1c:26:ab:29:35:b4:0b:2d:f2:51:aa:
26:8b:19:dd:52:3d:4c:bd:fd:62:e4:80:91:df:4a:
f1:df:b9:8c:be:68:75:ef:b1:e7:bf:f3:a2:91:53:
33:42:f7:16:70:20:25:34:d0:27:8e:ba:b3:22:1e:
8a:10:46:58:b9:18:07:13:6a:5c:45:69:d8:89:4f:
b2:78:f4:43:1a:31:ac:f5:40:34:44:60:8b:a5:a9:
9d:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9C:DA:DB:53:35:EB:44:0B:06:49:90:4B:A6:4C:A8:6B:F1:28:7B:47
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/d487bdce-b715-3908-93e9-e83d53d1fee3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef/49d0709a-32f1-4940-8864-e432721cf3ef.crl
X509v3 Authority Key Identifier:
keyid:56:C0:DA:29:17:14:C9:D6:93:EB:65:66:60:8B:CE:00:53:04:AB:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/615fe1dd-d829-4c87-b2cc-5689381a3c42/49d0709a-32f1-4940-8864-e432721cf3ef.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fc3b:ff00:65::/64
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
1d:3b:0b:39:92:82:16:61:25:0e:7c:3c:41:17:83:e2:8f:11:
b3:53:c4:41:bf:af:8d:58:ea:ef:cd:16:96:2b:f4:66:9d:6e:
97:e4:67:a2:a0:2e:e9:0f:05:c9:36:a8:3b:12:74:4f:92:66:
e0:86:cb:93:a5:38:41:26:f8:e4:73:76:81:c6:b3:9a:62:73:
c3:9d:06:dc:3e:4b:22:68:fa:5d:d8:33:44:f8:2f:65:96:1e:
37:a7:bc:26:8e:13:ef:b5:a1:53:9a:e4:93:71:42:83:c2:37:
30:c6:08:a2:af:d9:72:da:52:8c:71:59:f6:8e:03:b6:63:a7:
6c:52:c1:f0:30:bc:3a:09:78:25:a6:9f:51:35:e5:22:02:2d:
e9:4d:f6:f6:0a:9c:9a:45:40:8f:6b:d6:9b:a3:81:d1:93:01:
de:6c:a9:cd:68:6a:8f:64:9d:86:11:57:3a:c7:b9:68:1f:01:
87:95:48:60:30:e3:f8:2a:aa:f3:63:ca:fb:13:3a:e9:44:fe:
63:5b:f4:c7:2c:86:69:22:cd:ee:52:69:f5:4d:fe:e0:4c:e9:
23:0d:1c:7d:0a:92:57:23:a0:be:7a:ed:e9:af:b3:3b:9c:dc:
b9:7a:74:26:5e:7c:25:f0:a6:c9:8e:47:d6:14:5d:33:6f:99:
b9:56:5f:63
-----BEGIN CERTIFICATE-----
MIIGSDCCBTCgAwIBAgIUAQ0Mn0MoWE6sYj1XNRi7yrmFJoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDlkMDcwOWEtMzJmMS00OTQwLTg4NjQtZTQzMjcyMWNm
M2VmMB4XDTI2MDczMDE4NDUyOVoXDTI2MTAyODE4NDUyOVowLzEtMCsGA1UEAxMk
YmYzMmFiOTktY2I1Mi00N2ZhLTkxNjYtOWQwMjE3NjNjMzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk1DELt2bRVL7gvtNWk/cLg9dP5uEdtfqvfSt
cXNn7Pra7CReQdwKECExp3Ww3jY7cm7OZOLN7GEeFM1LWk63CgJZEYT+ai9tYBfY
yJe6pF2NM/dBXo42HI6qzhfTeKfQzOkXqa7yejE0fIosRhgmqdXepNbHAGsU94Pn
ETCkhnDXssNPkEVvvL+Qc5B8OXd6xl5OGfU/eJ7V9CZVfae6256wDJq5hpQZHCar
KTW0Cy3yUaomixndUj1Mvf1i5ICR30rx37mMvmh177Hnv/OikVMzQvcWcCAlNNAn
jrqzIh6KEEZYuRgHE2pcRWnYiU+yePRDGjGs9UA0RGCLpamdCwIDAQABo4IDWjCC
A1YwHQYDVR0OBBYEFJza21M160QLBkmQS6ZMqGvxKHtHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQw
NzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMyNzIxY2YzZWYvZDQ4N2JkY2UtYjcxNS0z
OTA4LTkzZTktZTgzZDUzZDFmZWUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82MTVmZTFkZC1k
ODI5LTRjODctYjJjYy01Njg5MzgxYTNjNDIvNDlkMDcwOWEtMzJmMS00OTQwLTg4
NjQtZTQzMjcyMWNmM2VmLzQ5ZDA3MDlhLTMyZjEtNDk0MC04ODY0LWU0MzI3MjFj
ZjNlZi5jcmwwHwYDVR0jBBgwFoAUVsDaKRcUydaT62VmYIvOAFMEqzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzYxNWZlMWRkLWQ4MjktNGM4
Ny1iMmNjLTU2ODkzODFhM2M0Mi80OWQwNzA5YS0zMmYxLTQ5NDAtODg2NC1lNDMy
NzIxY2YzZWYuY2VyMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAAjALAwkAJgL8O/8A
AGUwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRw
czovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG
9w0BAQsFAAOCAQEAHTsLOZKCFmElDnw8QReD4o8Rs1PEQb+vjVjq780Wliv0Zp1u
l+RnoqAu6Q8FyTaoOxJ0T5Jm4IbLk6U4QSb45HN2gcazmmJzw50G3D5LImj6Xdgz
RPgvZZYeN6e8Jo4T77WhU5rkk3FCg8I3MMYIoq/ZctpSjHFZ9o4DtmOnbFLB8DC8
Ogl4JaafUTXlIgIt6U329gqcmkVAj2vWm6OB0ZMB3mypzWhqj2SdhhFXOse5aB8B
h5VIYDDj+Cqq82PK+xM66UT+Y1v0xyyGaSLN7lJp9U3+4EzpIw0cfQqSVyOgvnrt
6a+zO5zcuXp0Jl58JfCmyY5H1hRdM2+ZuVZfYw==
-----END CERTIFICATE-----
Generated at Fri Jul 31 08:13:22 2026 by rpki-client