
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/389a20f9-3cdc-387c-8a6b-5afb25917a53.roa
File: 389a20f9-3cdc-387c-8a6b-5afb25917a53.roa (raw, json)
Hash identifier: hVT2ZwvY7jols23AJJLf3sBkUbA5fBsb4zgqTcwWABI=
Subject key identifier: 22:59:1C:33:B5:C4:7B:7E:A8:79:BF:32:6B:E7:40:E0:B7:23:33:5E
Certificate issuer: /CN=398117f0-030c-4fca-8a7f-c35017830f8f
Certificate serial: 010D0C9F4328584F9D331C52943243D105CCE000
Authority key identifier: D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/389a20f9-3cdc-387c-8a6b-5afb25917a53.roa
Signing time: Sun 25 Oct 2026 01:00:13 +0000
ROA not before: Sun 25 Oct 2026 01:00:13 +0000
ROA not after: Sat 23 Jan 2027 02:00:13 +0000
asID: 26286
IP address blocks: 2602:f689:10::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 29 Oct 2026 19:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:9d:33:1c:52:94:32:43:d1:05:cc:e0:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=398117f0-030c-4fca-8a7f-c35017830f8f
Validity
Not Before: Oct 25 01:00:13 2026 GMT
Not After : Jan 23 02:00:13 2027 GMT
Subject: CN=18f56600-da3a-421e-af54-eb52df495393
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d7:70:fe:e4:cb:89:5e:ba:bb:5a:33:e1:87:
71:3c:d0:1d:f1:d4:7e:1f:8d:6f:e5:13:8d:11:de:
bb:cf:3a:bd:c8:33:20:60:31:74:5c:9e:1a:c6:f9:
00:43:19:8b:74:02:73:14:cd:82:c4:7b:8d:90:e6:
5c:12:8a:05:f9:ad:5a:f9:84:2d:df:c6:50:64:7f:
9b:16:b6:55:03:74:5c:86:b0:f8:35:cb:f0:7d:29:
06:22:26:d2:13:27:d9:06:6f:3b:36:55:ce:77:14:
d1:66:1b:9a:cb:ab:65:ae:5e:14:c7:74:82:a4:8f:
72:cc:ee:4a:89:fb:d9:12:fb:05:7c:6b:77:3d:a1:
13:d7:3a:6d:1a:83:dc:06:ef:7a:78:09:1a:8f:14:
3c:cb:3c:89:a7:e4:59:14:7f:1c:bd:3e:37:28:7c:
ad:7c:65:40:18:7d:29:98:ce:94:63:e3:6d:8d:28:
9a:5a:2c:8f:ab:0d:30:a5:49:88:fb:90:d2:20:b9:
f2:3c:e3:35:c3:c2:25:60:3e:c6:99:61:70:b9:c7:
bf:53:79:9f:db:0e:f7:b1:b0:c1:b0:80:90:b1:25:
3d:9e:5e:98:84:88:cb:e5:ce:65:f1:a5:2b:4c:b9:
ee:89:c1:45:d8:bb:99:c4:4f:8c:2f:ab:5c:c5:94:
5a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:59:1C:33:B5:C4:7B:7E:A8:79:BF:32:6B:E7:40:E0:B7:23:33:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/389a20f9-3cdc-387c-8a6b-5afb25917a53.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f/398117f0-030c-4fca-8a7f-c35017830f8f.crl
X509v3 Authority Key Identifier:
keyid:D3:3A:96:9F:E5:37:84:BA:35:73:D8:1D:76:AD:EF:9E:96:5D:E1:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/398117f0-030c-4fca-8a7f-c35017830f8f.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f689:10::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
70:c9:2f:06:9f:f9:e4:ac:27:c7:ee:8a:68:d8:f6:8d:6b:85:
b3:48:16:62:08:f1:7e:f1:df:fb:76:40:97:39:55:3f:aa:60:
38:0c:07:fc:32:b9:68:6c:f0:ad:10:0f:f1:3a:41:19:20:9a:
83:e3:dd:9b:6b:5c:86:6c:33:b5:d3:de:b7:18:7e:97:a4:e5:
73:83:e0:f4:22:20:7e:fa:01:34:db:75:9b:68:83:36:96:12:
6b:49:23:45:9f:c4:c9:96:62:48:34:36:ad:19:1a:73:e9:2f:
16:c4:cd:9c:41:37:e9:98:a1:1e:3a:ee:24:d4:bf:78:29:56:
c1:de:c8:64:22:07:2a:ea:91:98:75:a5:2d:e9:e0:7e:93:00:
3d:c1:16:0c:36:6c:56:dd:62:e6:66:ca:9b:05:cd:85:f7:bc:
73:7e:53:8c:ad:0a:70:24:37:02:5c:87:99:fd:cf:1e:55:b1:
32:f5:1f:35:82:d0:bf:3d:1c:e4:8e:49:c3:1c:80:bc:78:d8:
cc:52:43:ca:2f:f2:ae:14:82:57:5f:48:0c:b4:9f:8d:27:d9:
08:43:5d:b7:5d:ca:10:5b:58:8f:d7:e5:91:c0:f9:05:3c:f8:
77:59:3b:34:7d:d1:4c:36:10:91:ff:99:d9:b9:cf:b4:b5:ab:
5d:17:cd:e1
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE+dMxxSlDJD0QXM4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk4MTE3ZjAtMDMwYy00ZmNhLThhN2YtYzM1MDE3ODMw
ZjhmMB4XDTI2MTAyNTAxMDAxM1oXDTI3MDEyMzAyMDAxM1owLzEtMCsGA1UEAxMk
MThmNTY2MDAtZGEzYS00MjFlLWFmNTQtZWI1MmRmNDk1MzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Ndw/uTLiV66u1oz4YdxPNAd8dR+H41v5RON
Ed67zzq9yDMgYDF0XJ4axvkAQxmLdAJzFM2CxHuNkOZcEooF+a1a+YQt38ZQZH+b
FrZVA3RchrD4NcvwfSkGIibSEyfZBm87NlXOdxTRZhuay6tlrl4Ux3SCpI9yzO5K
ifvZEvsFfGt3PaET1zptGoPcBu96eAkajxQ8yzyJp+RZFH8cvT43KHytfGVAGH0p
mM6UY+NtjSiaWiyPqw0wpUmI+5DSILnyPOM1w8IlYD7GmWFwuce/U3mf2w73sbDB
sICQsSU9nl6YhIjL5c5l8aUrTLnuicFF2LuZxE+ML6tcxZRaWwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFCJZHDO1xHt+qHm/MmvnQOC3IzNeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgx
MTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUwMTc4MzBmOGYvMzg5YTIwZjktM2NkYy0z
ODdjLThhNmItNWFmYjI1OTE3YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMzk4MTE3ZjAtMDMwYy00ZmNhLThh
N2YtYzM1MDE3ODMwZjhmLzM5ODExN2YwLTAzMGMtNGZjYS04YTdmLWMzNTAxNzgz
MGY4Zi5jcmwwHwYDVR0jBBgwFoAU0zqWn+U3hLo1c9gddq3vnpZd4cIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zOTgxMTdmMC0wMzBjLTRmY2EtOGE3Zi1jMzUw
MTc4MzBmOGYuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEJgL2iQAQ
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAHDJLwaf+eSsJ8fuimjY9o1rhbNIFmII8X7x3/t2QJc5VT+qYDgM
B/wyuWhs8K0QD/E6QRkgmoPj3ZtrXIZsM7XT3rcYfpek5XOD4PQiIH76ATTbdZto
gzaWEmtJI0WfxMmWYkg0Nq0ZGnPpLxbEzZxBN+mYoR467iTUv3gpVsHeyGQiByrq
kZh1pS3p4H6TAD3BFgw2bFbdYuZmypsFzYX3vHN+U4ytCnAkNwJch5n9zx5VsTL1
HzWC0L89HOSOScMcgLx42MxSQ8ov8q4UgldfSAy0n40n2QhDXbddyhBbWI/X5ZHA
+QU8+HdZOzR90Uw2EJH/mdm5z7S1q10XzeE=
-----END CERTIFICATE-----
Generated at Wed Oct 28 10:12:26 2026 by rpki-client