
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa
File: 78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa (raw, json)
Hash identifier: doWWNfyJOoriw45QgB76+uPZenRq4kBCajxyjZntSCQ=
Subject key identifier: 8B:BF:D0:2E:BE:6C:81:4D:AA:F0:5E:CC:02:AA:6E:26:35:8D:B7:23
Certificate issuer: /CN=aace0f29-5693-492a-b1c9-a3bbc6ecf694
Certificate serial: 010D0C9F4328584E3E5F431AACFF1F2A44B75700
Authority key identifier: AA:89:0A:A0:B6:05:79:8B:C3:84:5D:43:D2:25:ED:B5:D9:71:7E:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa
Signing time: Sun 21 Jun 2026 09:00:12 +0000
ROA not before: Sun 21 Jun 2026 09:00:12 +0000
ROA not after: Sat 19 Sep 2026 09:00:12 +0000
asID: 29773
IP address blocks: 2620:22:4000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/aace0f29-5693-492a-b1c9-a3bbc6ecf694.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/aace0f29-5693-492a-b1c9-a3bbc6ecf694.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 10 Jul 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:3e:5f:43:1a:ac:ff:1f:2a:44:b7:57:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aace0f29-5693-492a-b1c9-a3bbc6ecf694
Validity
Not Before: Jun 21 09:00:12 2026 GMT
Not After : Sep 19 09:00:12 2026 GMT
Subject: CN=9d1d54d0-9fcc-4573-9239-13c4788bce8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:2d:d4:d9:20:ef:04:c7:36:bb:3b:29:04:54:
11:be:9c:40:5c:48:bc:d0:9f:64:9e:be:71:38:7f:
3b:ae:bf:87:d9:36:73:23:ec:de:23:9b:76:32:9d:
4c:0d:83:b1:f0:3c:ed:4a:f1:d9:76:a3:16:26:2b:
e8:83:be:5e:01:23:a8:a5:38:5a:71:fb:e3:a2:a4:
41:14:d5:42:b8:fb:3d:06:e9:bb:83:6c:a5:1d:6b:
c8:74:f5:33:2b:e4:aa:f9:59:95:00:7e:15:2d:c5:
20:3c:47:ff:1e:21:30:a6:39:03:fb:7e:41:cb:0d:
98:ca:fe:ec:55:94:d3:99:db:42:5e:35:b5:82:18:
d4:64:d7:ef:db:a6:02:f7:ca:e7:a2:e9:03:a1:75:
f0:c1:d9:f4:5b:03:5d:f5:7a:40:63:2f:06:8e:86:
ee:88:98:54:0d:3f:4d:35:fe:57:b8:19:52:5d:c4:
d6:87:84:04:b3:5e:8c:18:11:ba:60:60:78:88:e7:
8e:28:e9:39:95:45:6b:69:cb:08:3f:11:1e:44:39:
13:f3:fe:7d:ef:f7:81:7a:aa:ee:5d:83:00:dc:6e:
e9:5a:4f:61:28:51:8b:f8:51:89:d1:44:eb:8e:50:
bc:df:64:8a:4f:b5:f3:25:63:6d:01:51:be:fa:8b:
5e:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:BF:D0:2E:BE:6C:81:4D:AA:F0:5E:CC:02:AA:6E:26:35:8D:B7:23
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/78d8f39e-b80e-3c01-9f15-e3f5d7f01399.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694/aace0f29-5693-492a-b1c9-a3bbc6ecf694.crl
X509v3 Authority Key Identifier:
keyid:AA:89:0A:A0:B6:05:79:8B:C3:84:5D:43:D2:25:ED:B5:D9:71:7E:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aace0f29-5693-492a-b1c9-a3bbc6ecf694.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:22:4000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
95:99:f4:1c:37:66:24:69:45:ce:7d:61:f7:0a:1d:f4:da:91:
05:ce:32:90:95:6f:44:67:77:82:d7:47:d2:48:6b:c1:9a:23:
69:5e:e5:8d:23:55:7a:7f:2d:fe:cf:ff:d2:a4:00:5b:c3:c3:
92:61:0f:85:de:30:1f:31:cb:1d:19:a5:ed:2d:86:df:c8:17:
b6:f3:c8:50:fb:db:fc:d1:cf:99:21:d6:c8:44:64:c3:ca:1b:
1d:6e:53:c0:4f:23:1f:07:58:52:45:5a:88:6a:0b:81:fa:97:
3c:8b:1d:55:c3:03:b0:f9:ea:b1:c0:48:6d:a2:3e:94:2b:13:
64:0b:3e:ed:57:ae:2a:b2:12:00:0b:a7:b0:d2:53:4d:fb:a4:
5a:b4:12:bb:23:9e:06:3d:9b:f9:ba:26:62:a8:fc:93:10:83:
32:92:9e:f3:fa:c9:66:bf:d2:09:70:03:f7:95:43:2d:0c:a3:
9d:26:40:13:97:84:ca:21:5d:6e:51:76:b8:76:34:42:47:fa:
0f:24:52:ee:08:3c:bc:94:24:f0:26:20:28:c6:31:19:e3:bd:
b9:2e:86:5d:6c:f0:ab:90:7d:23:18:a8:b2:dd:00:22:76:5d:
76:a3:d1:be:6e:22:e9:56:37:84:61:46:32:35:3c:28:f8:ec:
c4:95:d3:27
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE4+X0MarP8fKkS3VwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFjZTBmMjktNTY5My00OTJhLWIxYzktYTNiYmM2ZWNm
Njk0MB4XDTI2MDYyMTA5MDAxMloXDTI2MDkxOTA5MDAxMlowLzEtMCsGA1UEAxMk
OWQxZDU0ZDAtOWZjYy00NTczLTkyMzktMTNjNDc4OGJjZThmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkS3U2SDvBMc2uzspBFQRvpxAXEi80J9knr5x
OH87rr+H2TZzI+zeI5t2Mp1MDYOx8DztSvHZdqMWJivog75eASOopThacfvjoqRB
FNVCuPs9Bum7g2ylHWvIdPUzK+Sq+VmVAH4VLcUgPEf/HiEwpjkD+35Byw2Yyv7s
VZTTmdtCXjW1ghjUZNfv26YC98rnoukDoXXwwdn0WwNd9XpAYy8GjobuiJhUDT9N
Nf5XuBlSXcTWh4QEs16MGBG6YGB4iOeOKOk5lUVracsIPxEeRDkT8/597/eBeqru
XYMA3G7pWk9hKFGL+FGJ0UTrjlC832SKT7XzJWNtAVG++otegQIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFIu/0C6+bIFNqvBezAKqbiY1jbcjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWNl
MGYyOS01NjkzLTQ5MmEtYjFjOS1hM2JiYzZlY2Y2OTQvNzhkOGYzOWUtYjgwZS0z
YzAxLTlmMTUtZTNmNWQ3ZjAxMzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFjZTBmMjktNTY5My00OTJhLWIx
YzktYTNiYmM2ZWNmNjk0L2FhY2UwZjI5LTU2OTMtNDkyYS1iMWM5LWEzYmJjNmVj
ZjY5NC5jcmwwHwYDVR0jBBgwFoAUqokKoLYFeYvDhF1D0iXttdlxfvswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWNlMGYyOS01NjkzLTQ5MmEtYjFjOS1hM2Ji
YzZlY2Y2OTQuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJiAAIkAA
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAJWZ9Bw3ZiRpRc59YfcKHfTakQXOMpCVb0Rnd4LXR9JIa8GaI2le
5Y0jVXp/Lf7P/9KkAFvDw5JhD4XeMB8xyx0Zpe0tht/IF7bzyFD72/zRz5kh1shE
ZMPKGx1uU8BPIx8HWFJFWohqC4H6lzyLHVXDA7D56rHASG2iPpQrE2QLPu1Xriqy
EgALp7DSU037pFq0ErsjngY9m/m6JmKo/JMQgzKSnvP6yWa/0glwA/eVQy0Mo50m
QBOXhMohXW5Rdrh2NEJH+g8kUu4IPLyUJPAmICjGMRnjvbkuhl1s8KuQfSMYqLLd
ACJ2XXaj0b5uIulWN4RhRjI1PCj47MSV0yc=
-----END CERTIFICATE-----
Generated at Wed Jul 8 19:04:14 2026 by rpki-client