
$ rpki-client -vvvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/0e257de8-9cf0-3d64-80a8-3b83e8ea170c.roa
File: 0e257de8-9cf0-3d64-80a8-3b83e8ea170c.roa (raw, json)
Hash identifier: YxAZK/pc9vDb1Y8dbzOzJgUS8GRUS9Lu+uxPHExXqSM=
Subject key identifier: FF:50:BA:B1:7D:19:E9:EB:D5:94:56:62:82:5E:AC:13:B9:63:70:2A
Certificate issuer: /CN=4d309cdf-7ecd-401e-9f75-b4b181b44b63
Certificate serial: 010D0C9F4328584F549D47FFF788E1D21CC90300
Authority key identifier: 06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/0e257de8-9cf0-3d64-80a8-3b83e8ea170c.roa
Signing time: Tue 29 Sep 2026 01:00:12 +0000
ROA not before: Tue 29 Sep 2026 01:00:12 +0000
ROA not after: Mon 28 Dec 2026 02:00:12 +0000
asID: 402038
IP address blocks: 2602:f538::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 08 Oct 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4f:54:9d:47:ff:f7:88:e1:d2:1c:c9:03:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4d309cdf-7ecd-401e-9f75-b4b181b44b63
Validity
Not Before: Sep 29 01:00:12 2026 GMT
Not After : Dec 28 02:00:12 2026 GMT
Subject: CN=2507fd01-f649-45cc-be32-3f4d4f01293b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:27:6b:2f:7a:6e:cf:c3:2f:31:3d:7b:b4:8f:
87:4b:06:30:c3:bc:28:19:2f:85:77:3a:6c:26:6f:
3f:53:71:96:0a:7b:e1:a6:96:f0:8b:ab:05:fd:2b:
c0:f3:22:89:67:17:2f:68:ad:f5:bb:9f:3c:c1:80:
76:49:5a:a6:cf:ee:39:7b:24:d2:14:df:5d:4e:d5:
00:0e:30:e4:5b:e0:3a:4d:8f:b0:f1:f4:bb:f2:d2:
15:95:1c:96:73:92:dd:10:2c:ce:d3:18:17:13:1e:
f3:f5:c9:b0:39:1a:bc:6b:6d:72:b3:30:fa:44:a5:
72:50:1c:64:56:7d:34:b0:fb:f3:77:65:f3:d8:38:
03:87:16:9b:50:23:88:47:d3:9f:0e:68:65:05:26:
1c:2c:f1:10:9e:0b:67:2c:bc:17:0f:44:3f:72:39:
c8:15:87:ac:0c:6f:ce:b2:81:8e:d1:40:59:b7:96:
eb:4a:21:cf:5c:e7:d1:f4:5b:49:dc:fa:b5:5a:51:
42:e1:e6:cc:1c:f4:8d:8b:33:14:c0:92:cd:98:d8:
c7:1a:01:cc:91:32:76:b2:be:43:42:45:84:01:9a:
59:9e:e8:23:80:29:8c:79:1c:4e:b2:c6:0f:40:ea:
5f:22:ce:fc:b5:79:1c:f0:d1:a5:f9:a2:d8:05:90:
4f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:50:BA:B1:7D:19:E9:EB:D5:94:56:62:82:5E:AC:13:B9:63:70:2A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/0e257de8-9cf0-3d64-80a8-3b83e8ea170c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63/4d309cdf-7ecd-401e-9f75-b4b181b44b63.crl
X509v3 Authority Key Identifier:
keyid:06:3E:49:D0:A4:13:BF:01:82:5E:BB:9E:0E:F6:28:38:57:01:71:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/4d309cdf-7ecd-401e-9f75-b4b181b44b63.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:f538::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:f7:78:b5:96:17:b2:2d:85:4e:5b:e2:a8:a1:9d:b2:c2:58:
11:63:ca:65:ac:6b:5e:c3:47:0e:ba:b9:56:c8:69:67:bf:8f:
e2:6a:90:56:5a:86:50:95:c0:fa:38:7d:49:e8:af:88:9b:5c:
3b:13:3d:d4:85:70:6e:a6:fe:5b:1c:5c:1a:d6:58:57:de:ec:
99:3b:f3:38:24:3f:3f:f7:70:45:6d:e2:b5:19:30:b0:93:e3:
f0:95:3e:cc:c7:ba:28:38:7c:34:f9:04:8a:39:97:31:05:e7:
28:ae:7f:b6:20:a0:0f:7a:6b:7e:f9:24:7d:cd:ad:d6:e8:83:
ae:f0:7c:74:a5:92:be:6e:29:1c:17:ab:3c:9c:87:c5:c6:a2:
7f:ce:03:a9:a3:2c:a8:72:34:61:1d:bd:13:66:5f:aa:b6:67:
f0:f1:6a:e6:d5:f5:1d:97:39:da:e4:5e:89:00:32:26:7d:07:
39:08:a3:47:b8:ac:ec:de:c0:2a:af:61:9d:d5:9c:8e:a3:af:
5a:e2:2b:98:42:bd:cb:ab:95:b7:b2:2a:fd:8c:ea:3b:b6:1a:
e8:8e:a7:94:dc:6a:3d:f6:6a:2c:b4:f5:61:cc:dd:9b:0d:42:
e6:7e:31:cc:b2:f7:17:89:50:1c:1d:63:12:62:59:63:cf:9b:
7b:b7:4c:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 11:22:47 2026 by rpki-client