
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
File: 081735a6-8094-3e29-bc11-0063831723b9.roa (raw, json)
Hash identifier: Iih4NhsAdamupFKX+a6oMoMuL7gDMtuZybgjDidLQZQ=
Subject key identifier: 0E:5A:EB:53:19:14:E9:02:04:92:6E:DF:B0:BB:BE:54:A8:2B:5C:63
Certificate issuer: /CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
Certificate serial: 010D0C9F4328584C44410928DBCB550DB6F10B00
Authority key identifier: 1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
Signing time: Mon 22 Dec 2025 02:00:32 +0000
ROA not before: Mon 22 Dec 2025 02:00:32 +0000
ROA not after: Sun 22 Mar 2026 01:00:32 +0000
asID: 30674
IP address blocks: 2605:c780::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 24 Feb 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:44:41:09:28:db:cb:55:0d:b6:f1:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12352ca2-f873-472d-a22f-0aebad4ce9bd
Validity
Not Before: Dec 22 02:00:32 2025 GMT
Not After : Mar 22 01:00:32 2026 GMT
Subject: CN=d75af1d5-3c4b-4241-9efe-5949ba1e8717
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fd:85:62:1a:66:d5:92:ab:87:be:18:81:97:
1b:2f:45:59:fb:ee:da:8c:ba:f9:1b:53:32:ac:64:
52:d7:36:55:04:3c:d1:c5:05:29:72:1b:f9:0a:a6:
df:60:b5:c1:22:7e:90:01:40:9d:e5:11:2e:41:cd:
36:50:d2:77:ac:17:b0:19:e7:6b:8b:07:1e:1b:17:
f4:81:c7:77:93:c8:4c:d3:30:55:68:ee:23:ee:75:
01:42:55:3f:28:30:e5:38:13:65:30:37:24:8b:ab:
5f:f5:b7:33:ff:cc:f7:44:32:ee:63:fc:a2:25:39:
a1:3f:1b:f6:e3:e2:30:f4:30:12:75:86:e8:29:00:
e8:aa:19:cb:86:cb:29:f4:9b:57:b4:2d:0f:a4:12:
9f:78:4c:27:75:e3:4d:2f:fa:c9:a0:7f:64:66:2a:
ad:67:45:e2:76:80:f6:4f:03:23:cf:95:98:de:da:
03:43:e5:9b:ec:38:68:0c:0f:1c:47:4b:54:34:43:
b4:79:e5:2d:11:1e:c1:c8:c6:2d:59:04:58:da:e9:
e7:f5:d4:75:46:f5:71:90:3a:b0:74:82:95:97:a0:
38:22:68:28:10:cc:1b:4d:4e:d1:06:78:91:34:4a:
b0:2e:a9:4e:37:53:cc:13:56:6d:94:2e:35:df:4e:
e6:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:5A:EB:53:19:14:E9:02:04:92:6E:DF:B0:BB:BE:54:A8:2B:5C:63
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/081735a6-8094-3e29-bc11-0063831723b9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd/12352ca2-f873-472d-a22f-0aebad4ce9bd.crl
X509v3 Authority Key Identifier:
keyid:1F:A7:08:1F:E7:AA:64:71:26:58:3A:97:9D:7F:6A:7D:85:40:C9:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/12352ca2-f873-472d-a22f-0aebad4ce9bd.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:c780::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
50:58:4e:33:9a:40:f4:69:2d:76:5c:86:5f:78:6c:12:75:ea:
cf:0e:27:7d:1f:6d:d7:18:bb:20:f0:4f:82:84:09:dc:9d:08:
5a:df:97:f6:f5:0a:5d:ed:8c:27:1f:44:8a:98:11:24:33:0b:
61:2b:53:74:05:64:13:fe:2a:d9:ba:44:41:7a:dd:78:d4:33:
c7:05:00:ac:69:6b:cd:cb:e1:65:d5:c0:66:15:51:af:23:50:
6f:72:ae:90:31:89:e9:6e:d4:a7:1d:15:20:f2:42:f3:7d:3b:
10:38:4e:1a:ac:f8:f1:16:6f:01:6f:e8:b1:7d:45:33:e1:5d:
fd:cf:99:d6:6e:78:a4:de:44:b3:5b:46:0f:d0:57:69:d6:6e:
fc:9a:4a:ab:90:91:01:94:14:00:c3:d2:b8:fd:c5:2d:55:31:
0c:50:74:e6:50:b6:c2:7d:46:fd:0f:4a:fb:84:e6:f6:d9:61:
1e:e1:e4:7d:e9:05:82:d4:46:23:a8:57:92:89:23:2d:a9:79:
d3:50:63:87:05:fd:50:43:64:f8:92:cf:5f:59:7b:68:42:f6:
48:1c:f9:f6:cc:ac:8d:3b:51:f9:b3:52:79:e1:97:60:20:57:
82:76:72:d0:d8:15:c3:2a:dc:e6:eb:92:c8:3c:13:5a:12:82:
b9:f9:8c:e9
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWExEQQko28tVDbbxCwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIzNTJjYTItZjg3My00NzJkLWEyMmYtMGFlYmFkNGNl
OWJkMB4XDTI1MTIyMjAyMDAzMloXDTI2MDMyMjAxMDAzMlowLzEtMCsGA1UEAxMk
ZDc1YWYxZDUtM2M0Yi00MjQxLTllZmUtNTk0OWJhMWU4NzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvv2FYhpm1ZKrh74YgZcbL0VZ++7ajLr5G1My
rGRS1zZVBDzRxQUpchv5CqbfYLXBIn6QAUCd5REuQc02UNJ3rBewGedriwceGxf0
gcd3k8hM0zBVaO4j7nUBQlU/KDDlOBNlMDcki6tf9bcz/8z3RDLuY/yiJTmhPxv2
4+Iw9DASdYboKQDoqhnLhssp9JtXtC0PpBKfeEwndeNNL/rJoH9kZiqtZ0XidoD2
TwMjz5WY3toDQ+Wb7DhoDA8cR0tUNEO0eeUtER7ByMYtWQRY2unn9dR1RvVxkDqw
dIKVl6A4ImgoEMwbTU7RBniRNEqwLqlON1PME1ZtlC41307mgQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFA5a61MZFOkCBJJu37C7vlSoK1xjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMjM1
MmNhMi1mODczLTQ3MmQtYTIyZi0wYWViYWQ0Y2U5YmQvMDgxNzM1YTYtODA5NC0z
ZTI5LWJjMTEtMDA2MzgzMTcyM2I5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTIzNTJjYTItZjg3My00NzJkLWEy
MmYtMGFlYmFkNGNlOWJkLzEyMzUyY2EyLWY4NzMtNDcyZC1hMjJmLTBhZWJhZDRj
ZTliZC5jcmwwHwYDVR0jBBgwFoAUH6cIH+eqZHEmWDqXnX9qfYVAyXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMjM1MmNhMi1mODczLTQ3MmQtYTIyZi0wYWVi
YWQ0Y2U5YmQuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgXHgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBQWE4zmkD0aS12XIZfeGwSderPDid9H23XGLsg8E+ChAncnQha35f2
9Qpd7YwnH0SKmBEkMwthK1N0BWQT/irZukRBet141DPHBQCsaWvNy+Fl1cBmFVGv
I1Bvcq6QMYnpbtSnHRUg8kLzfTsQOE4arPjxFm8Bb+ixfUUz4V39z5nWbnik3kSz
W0YP0Fdp1m78mkqrkJEBlBQAw9K4/cUtVTEMUHTmULbCfUb9D0r7hOb22WEe4eR9
6QWC1EYjqFeSiSMtqXnTUGOHBf1QQ2T4ks9fWXtoQvZIHPn2zKyNO1H5s1J54Zdg
IFeCdnLQ2BXDKtzm65LIPBNaEoK5+Yzp
-----END CERTIFICATE-----
Generated at Sun Feb 22 19:23:16 2026 by rpki-client