
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/df5bc089-dade-3d21-b218-df56e9dde606.roa
File: df5bc089-dade-3d21-b218-df56e9dde606.roa (raw, json)
Hash identifier: TVLFZ4c5LUgP7DbWAH/wEK1sDRnljSqWPqQjliLFV4Q=
Subject key identifier: D0:39:43:96:3A:BC:60:F9:F0:ED:59:F4:80:5C:4D:55:E1:FB:3D:0A
Certificate issuer: /CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
Certificate serial: 010D0C9F4328584D3F64DCEB022C72A628149F20
Authority key identifier: AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/df5bc089-dade-3d21-b218-df56e9dde606.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 57976
IP address blocks: 2620:10b:9000::/44 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:dc:eb:02:2c:72:a6:28:14:9f:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799440b-1f9c-4e88-926e-9ee073c7ee48
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=524a7a93-b46d-45f2-a24c-785efacff46b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:49:11:14:79:19:8e:00:b5:91:ce:48:65:
84:66:04:26:3f:bc:32:22:b6:80:a2:96:cf:46:55:
49:27:71:b5:7d:8b:f2:7a:26:1d:9f:9b:e8:9e:e9:
60:74:f0:92:ff:e6:5a:b0:32:bf:22:49:1a:6e:86:
80:4a:14:d5:db:f5:80:34:19:4a:e3:79:3e:ad:f2:
b9:91:3c:5a:94:77:3b:ed:33:ec:03:a1:4e:ee:b8:
95:9b:38:18:fa:08:e5:ff:5f:95:f9:c9:d6:f0:b5:
9b:6e:8b:ed:b6:7d:fd:da:0e:17:0f:f1:92:70:43:
8c:f6:05:03:fa:cf:f4:d9:85:38:9e:b3:00:82:da:
3e:52:65:1e:28:5d:2a:e2:e1:3c:8f:15:c4:cc:e2:
ec:ad:39:d2:ab:8f:f5:30:75:61:58:8f:dd:01:5d:
df:a1:23:40:2f:31:c6:53:9b:55:c2:a1:d3:51:91:
7b:a3:c0:b0:9a:5b:6b:13:32:61:01:58:3e:39:9e:
54:d8:62:7a:f6:aa:c0:36:52:82:a5:33:59:12:48:
b4:5f:aa:98:50:3f:9f:6d:53:c9:c6:1d:4a:e0:73:
bf:af:eb:13:74:44:4a:97:fa:4b:00:f2:56:8e:f7:
96:5a:1c:c8:7d:eb:62:1b:31:56:f9:d8:0a:ac:65:
10:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:39:43:96:3A:BC:60:F9:F0:ED:59:F4:80:5C:4D:55:E1:FB:3D:0A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/df5bc089-dade-3d21-b218-df56e9dde606.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48/9799440b-1f9c-4e88-926e-9ee073c7ee48.crl
X509v3 Authority Key Identifier:
keyid:AE:91:15:AE:9D:A1:09:2F:44:EE:3B:25:81:F6:C1:89:E1:82:6D:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9799440b-1f9c-4e88-926e-9ee073c7ee48.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10b:9000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
78:99:1b:af:b3:bc:dc:5a:e1:f8:b0:c6:83:a7:74:67:c4:0c:
a8:50:16:12:8e:4c:da:21:a4:88:02:f6:62:d9:10:46:07:45:
d8:25:ec:d3:f6:0d:25:8d:ae:f1:e3:a7:8c:9e:6c:1d:5d:86:
62:9a:11:7d:d8:a7:b0:81:3f:9f:a8:40:28:5c:98:13:7d:d8:
f9:9f:e0:b1:a5:8f:41:09:60:3f:cb:9e:b6:f2:a5:18:98:39:
28:d8:f7:bf:d2:44:34:53:4a:e2:1b:94:20:1b:0b:71:79:ae:
05:89:50:6f:dd:06:a8:41:16:60:c5:1b:2a:98:11:86:95:51:
08:1f:32:59:26:44:7c:aa:62:56:52:8b:7a:73:9c:3a:e1:d4:
9b:af:fb:98:91:bf:37:7a:d5:ee:d1:ed:b1:f7:25:0f:5e:8e:
bc:bf:a9:0f:51:c4:4b:d9:e0:1b:a5:fa:4d:ff:74:7f:81:f3:
bf:fa:85:d6:ca:94:94:43:7c:da:ba:83:c7:78:f1:a6:10:20:
c0:f8:e6:e2:98:b8:84:92:7b:0a:ff:69:bd:fd:5e:3f:6d:ea:
c9:07:20:1d:63:ff:bf:03:fa:b6:d4:52:4f:2c:0e:e8:26:35:
95:30:1b:ae:07:5e:89:ec:a4:8b:f0:79:34:ec:68:cf:59:58:
53:d4:71:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 21:10:08 2026 by rpki-client