
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa
File: c8a7e846-09f2-3189-8880-b661bfde1d4d.roa (raw, json)
Hash identifier: 2FFr7jCLnnDj7wSoJkwTES4n/jx+x+uXvY+pfqsp4iE=
Subject key identifier: 74:55:6B:AB:00:86:C3:9F:02:3D:D1:04:37:A3:90:1E:28:ED:A6:E2
Certificate issuer: /CN=89dfa952-929a-4c50-a372-96882b2b33e2
Certificate serial: 010D0C9F4328584DAC457C83DBCECE2B2E5C6780
Authority key identifier: 39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa
Signing time: Thu 30 Apr 2026 01:00:26 +0000
ROA not before: Thu 30 Apr 2026 01:00:26 +0000
ROA not after: Wed 29 Jul 2026 01:00:26 +0000
asID: 397511
IP address blocks: 2607:ac80::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 08 May 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:ac:45:7c:83:db:ce:ce:2b:2e:5c:67:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89dfa952-929a-4c50-a372-96882b2b33e2
Validity
Not Before: Apr 30 01:00:26 2026 GMT
Not After : Jul 29 01:00:26 2026 GMT
Subject: CN=48f08c37-d977-4076-8ceb-293b5f71c9c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:56:2b:1c:74:d9:2a:4d:60:90:df:7f:29:c2:
e1:4a:66:9b:97:21:1e:8a:13:29:08:9d:1f:cc:fb:
a7:60:08:18:b4:37:fb:e7:05:8f:61:d3:37:61:06:
30:b0:be:2b:0e:5b:63:2b:b1:24:c6:fa:ba:72:02:
f3:a3:37:d8:e2:f8:d4:b0:bb:1a:07:85:94:4a:5e:
89:14:b1:46:a9:68:2a:bf:2f:6f:51:fe:06:0c:67:
9e:0d:c0:e7:13:eb:dd:fa:87:e3:5b:03:1c:4c:42:
05:c1:eb:86:7c:ac:e8:3d:fb:5a:c0:54:24:58:5a:
30:16:f7:bd:dc:d3:d5:55:59:78:af:87:e8:57:27:
56:25:cc:7a:f2:c1:28:75:af:24:c3:15:61:36:f8:
7c:c0:74:b2:47:52:11:20:97:58:71:66:36:27:cd:
b5:c7:e6:6e:48:3c:8c:6c:b0:cb:dd:2a:ee:53:b8:
89:74:f6:3f:57:4f:3a:b3:d5:d9:d3:b8:15:69:1d:
84:62:a9:d5:5c:c9:85:cf:4a:92:06:a4:49:b8:7a:
0d:e7:1c:b2:de:77:c2:56:76:92:2c:f2:17:14:d5:
a7:22:cf:fd:32:28:64:63:16:dd:b6:88:ab:e2:3b:
a6:f0:a5:fb:55:f6:75:98:cb:ec:8a:c5:bc:6d:20:
c5:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:55:6B:AB:00:86:C3:9F:02:3D:D1:04:37:A3:90:1E:28:ED:A6:E2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/c8a7e846-09f2-3189-8880-b661bfde1d4d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2/89dfa952-929a-4c50-a372-96882b2b33e2.crl
X509v3 Authority Key Identifier:
keyid:39:AB:0C:9E:E4:5D:F8:25:0A:DF:8C:85:5D:D8:EC:B1:27:27:62:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/89dfa952-929a-4c50-a372-96882b2b33e2.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:ac80::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
25:19:d1:9d:83:6e:ad:5f:b8:07:9b:1e:4f:f7:59:b0:61:e6:
7b:fd:7a:49:9d:6f:6a:5e:67:ad:b6:87:62:fb:63:d1:a2:87:
a2:7e:1e:f9:2f:ee:f5:4b:57:9a:c5:2f:0e:17:9c:d3:4f:c1:
64:60:e4:5e:fd:5f:07:25:63:d0:7b:37:84:48:c6:d0:98:56:
d1:66:fe:e6:c2:5c:b5:a0:af:5b:ad:4b:d7:ca:4e:9e:64:df:
15:38:01:8d:d4:c6:7c:66:53:06:95:fe:4f:7a:bb:34:36:0e:
82:cd:27:ac:b0:ed:37:6c:9f:2c:45:89:d7:7c:e1:f6:f6:03:
fe:a3:00:54:f4:60:fd:3f:52:41:09:d3:b5:d5:cf:a8:01:e9:
22:42:05:fa:6f:58:b9:c0:da:d1:17:07:aa:32:60:d8:18:23:
eb:43:bd:58:53:6c:bf:ad:3c:a2:3f:ae:29:98:cb:68:68:a2:
d4:21:9b:bf:f7:05:6b:90:f4:3a:d4:3c:99:9b:3a:24:ec:25:
09:80:d7:bd:e3:57:f4:39:05:66:4b:0f:b6:df:f9:63:4e:16:
6d:1b:79:c1:f3:ee:b6:e8:1c:3d:0c:0c:b9:18:19:10:a1:7b:
db:5e:4c:4b:c4:ca:b5:66:18:af:ff:b6:20:c3:bb:d4:2a:30:
52:93:1b:54
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE2sRXyD287OKy5cZ4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODlkZmE5NTItOTI5YS00YzUwLWEzNzItOTY4ODJiMmIz
M2UyMB4XDTI2MDQzMDAxMDAyNloXDTI2MDcyOTAxMDAyNlowLzEtMCsGA1UEAxMk
NDhmMDhjMzctZDk3Ny00MDc2LThjZWItMjkzYjVmNzFjOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFYrHHTZKk1gkN9/KcLhSmablyEeihMpCJ0f
zPunYAgYtDf75wWPYdM3YQYwsL4rDltjK7Ekxvq6cgLzozfY4vjUsLsaB4WUSl6J
FLFGqWgqvy9vUf4GDGeeDcDnE+vd+ofjWwMcTEIFweuGfKzoPftawFQkWFowFve9
3NPVVVl4r4foVydWJcx68sEoda8kwxVhNvh8wHSyR1IRIJdYcWY2J821x+ZuSDyM
bLDL3SruU7iJdPY/V086s9XZ07gVaR2EYqnVXMmFz0qSBqRJuHoN5xyy3nfCVnaS
LPIXFNWnIs/9MihkYxbdtoir4jum8KX7VfZ1mMvsisW8bSDF9QIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFHRVa6sAhsOfAj3RBDejkB4o7abiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84OWRm
YTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4MmIyYjMzZTIvYzhhN2U4NDYtMDlmMi0z
MTg5LTg4ODAtYjY2MWJmZGUxZDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvODlkZmE5NTItOTI5YS00YzUwLWEz
NzItOTY4ODJiMmIzM2UyLzg5ZGZhOTUyLTkyOWEtNGM1MC1hMzcyLTk2ODgyYjJi
MzNlMi5jcmwwHwYDVR0jBBgwFoAUOasMnuRd+CUK34yFXdjssScnYpMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84OWRmYTk1Mi05MjlhLTRjNTAtYTM3Mi05Njg4
MmIyYjMzZTIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAJgesgDBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQAlGdGdg26tX7gHmx5P91mwYeZ7/XpJnW9qXmettodi+2PRooeifh75
L+71S1eaxS8OF5zTT8FkYORe/V8HJWPQezeESMbQmFbRZv7mwly1oK9brUvXyk6e
ZN8VOAGN1MZ8ZlMGlf5Pers0Ng6CzSessO03bJ8sRYnXfOH29gP+owBU9GD9P1JB
CdO11c+oAekiQgX6b1i5wNrRFweqMmDYGCPrQ71YU2y/rTyiP64pmMtoaKLUIZu/
9wVrkPQ61DyZmzok7CUJgNe941f0OQVmSw+23/ljThZtG3nB8+626Bw9DAy5GBkQ
oXvbXkxLxMq1Zhiv/7Ygw7vUKjBSkxtU
-----END CERTIFICATE-----
Generated at Thu May 7 01:13:20 2026 by rpki-client