
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/d2a8cd38-9dfb-3b45-a150-74f305998452.roa
File: d2a8cd38-9dfb-3b45-a150-74f305998452.roa (raw, json)
Hash identifier: tkylgSaZYraqDb4iEaZN4KGXgXgiQjOR3FqaoOKifPA=
Subject key identifier: DF:F9:E3:BA:B8:ED:2E:F8:3C:06:D0:A3:D4:4D:2B:01:46:D2:ED:13
Certificate issuer: /CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
Certificate serial: 010D0C9F4328584D23B153E74301ACD480723E7E
Authority key identifier: B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/d2a8cd38-9dfb-3b45-a150-74f305998452.roa
Signing time: Thu 12 Mar 2026 02:52:10 +0000
ROA not before: Thu 12 Mar 2026 02:52:10 +0000
ROA not after: Wed 10 Jun 2026 02:52:10 +0000
asID: 6364
IP address blocks: 2607:f170::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:b1:53:e7:43:01:ac:d4:80:72:3e:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c6981fd-28f4-4238-8558-d3d7498f0af2
Validity
Not Before: Mar 12 02:52:10 2026 GMT
Not After : Jun 10 02:52:10 2026 GMT
Subject: CN=708a7211-726c-40a7-b876-fc66e55f2f32
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:ce:c3:4b:87:45:df:0c:e2:93:4f:f4:f6:b7:
48:d2:29:b9:1d:38:45:76:f0:ac:be:e2:4d:ca:c4:
89:67:4b:b3:33:1c:e0:25:4f:66:52:7d:98:ba:ee:
93:9b:3a:94:b5:af:79:50:e6:d3:62:97:50:3d:c3:
4e:e8:68:a1:83:4b:b8:cb:df:dc:2e:c6:ff:2d:55:
d2:4b:0b:1f:e3:b9:63:89:91:27:a5:54:96:67:b1:
e3:91:01:52:35:9b:71:41:75:2d:54:ca:5f:a9:93:
f4:59:d8:23:55:5b:e2:90:5b:fc:8b:6a:0c:a6:10:
ab:10:0a:95:ad:9c:c5:26:3d:70:d0:f7:01:42:ed:
9e:55:4d:e2:8a:4f:58:94:96:4e:d4:b3:de:c0:9b:
18:dc:1f:7a:ec:c2:ca:f9:ab:33:5d:a6:88:33:26:
1d:ff:33:da:b2:7d:c2:58:a3:e5:8b:d5:87:96:90:
0d:21:56:9c:08:b1:1c:29:e0:a7:ba:4b:b6:ee:07:
85:2f:86:69:6d:00:d6:38:84:f3:18:3e:62:3f:66:
c2:7c:f8:fa:b8:6b:32:67:27:e2:fb:b4:ba:a2:73:
8b:65:fc:7d:48:82:9e:b8:de:40:71:30:74:2f:ae:
49:16:31:5d:3a:6b:28:7e:8e:67:db:07:ca:d7:e8:
d4:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DF:F9:E3:BA:B8:ED:2E:F8:3C:06:D0:A3:D4:4D:2B:01:46:D2:ED:13
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/d2a8cd38-9dfb-3b45-a150-74f305998452.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2/6c6981fd-28f4-4238-8558-d3d7498f0af2.crl
X509v3 Authority Key Identifier:
keyid:B9:76:E7:CC:10:B3:DB:2C:CA:97:2A:15:DB:ED:34:60:EA:81:E5:34
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6c6981fd-28f4-4238-8558-d3d7498f0af2.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f170::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
10:6f:6b:c6:b4:1c:d5:25:f5:ef:40:e5:bc:4b:ea:4a:4a:07:
c0:58:db:e5:b5:3c:1b:24:a2:3b:7b:9e:a3:17:1f:02:e4:70:
4a:fa:62:40:f2:be:b3:10:5f:8a:93:05:bc:5e:32:71:07:d9:
b3:7e:8b:87:be:54:db:3d:e1:32:12:cd:ad:ee:4e:a7:50:26:
c6:df:59:ff:24:49:ae:f4:96:f3:0f:9a:91:46:a9:79:6b:26:
50:5c:72:23:29:99:c9:55:44:80:86:2f:1e:c0:8c:23:b7:54:
dd:c9:f8:c8:97:fe:c3:ee:32:9e:76:9a:1b:89:a6:7b:d3:c5:
1a:a7:83:af:b1:5c:6d:2b:0f:0d:a8:55:96:ca:37:7e:66:22:
04:41:a6:3c:fb:47:86:91:6b:34:fd:a5:e3:ed:c7:0b:d4:50:
0b:bb:fa:38:98:91:2f:b1:60:b3:03:f2:cc:c7:6c:53:6e:61:
67:62:58:dc:d8:50:fd:1a:1c:3e:b6:1b:2c:88:04:39:83:02:
87:1b:73:8e:c7:a7:f5:87:52:93:40:24:aa:68:1d:27:7b:8b:
71:f3:ca:2c:fa:d0:73:99:2f:5a:8c:b5:35:f7:d4:1a:f0:c3:
ba:66:1f:12:34:30:09:5c:4c:24:fb:f1:f6:fc:e6:28:9d:17:
84:35:93:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 16:12:02 2026 by rpki-client