
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/7019d13c-6214-3c59-a451-9a427b53fc92.roa
File: 7019d13c-6214-3c59-a451-9a427b53fc92.roa (raw, json)
Hash identifier: 6fAvl9o9gBBsc7BaRAUGYo0SCDFpy1UsWUF7SoWyvIE=
Subject key identifier: 48:0B:9F:D6:80:D2:EB:4C:00:CD:7E:E5:51:2D:4D:E5:26:16:18:82
Certificate issuer: /CN=d4919c1e-24c8-430e-8811-91383c31b96a
Certificate serial: 010D0C9F4328584D3F64E03122504DD9B2519780
Authority key identifier: DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/7019d13c-6214-3c59-a451-9a427b53fc92.roa
Signing time: Sun 22 Mar 2026 01:00:32 +0000
ROA not before: Sun 22 Mar 2026 01:00:32 +0000
ROA not after: Sat 20 Jun 2026 01:00:32 +0000
asID: 715
IP address blocks: 2620:0:870::/45 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3f:64:e0:31:22:50:4d:d9:b2:51:97:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4919c1e-24c8-430e-8811-91383c31b96a
Validity
Not Before: Mar 22 01:00:32 2026 GMT
Not After : Jun 20 01:00:32 2026 GMT
Subject: CN=cac70cb6-43f8-427e-8971-ad6a66af8a47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:c7:22:56:30:34:65:37:ca:6d:3e:ad:e4:f5:
7d:c1:01:16:00:26:57:e0:20:77:92:79:59:8a:ab:
3c:f3:cc:d2:38:1c:ea:c1:30:f8:94:dc:7b:d8:06:
62:0d:a7:17:0a:5c:c5:ce:e5:58:21:7d:76:95:2c:
3f:72:b3:a4:6b:e4:1a:fa:7a:00:bf:fb:9d:35:fa:
cc:f0:08:49:05:94:39:23:c6:85:fa:53:45:a5:f9:
ce:6f:11:6b:6e:ce:15:8e:29:87:f7:16:01:3a:bd:
f1:eb:d0:ca:9a:37:01:da:0e:10:a0:75:4f:ea:c6:
bc:b4:b5:3d:7f:9f:77:b1:6c:5a:ce:31:2d:4b:cf:
7d:55:78:0f:0e:55:d2:c5:cf:30:ea:74:51:7e:3d:
c3:47:8a:6f:c8:bc:ca:41:d2:40:52:a6:be:1c:ec:
53:4a:d7:78:66:2c:c3:52:d6:97:6a:11:d6:f2:3d:
62:44:16:80:aa:01:d7:cf:2f:02:28:12:ff:e4:28:
3b:57:8b:a1:18:3c:6b:af:7b:e3:fa:75:e2:95:a2:
ba:20:c1:16:ba:50:d3:9a:8d:92:29:f1:56:fb:1a:
c0:e1:a9:ff:47:27:20:36:b4:1a:63:e6:69:60:16:
7e:30:39:0b:50:4d:cc:b9:be:68:1a:22:45:ae:03:
ea:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:0B:9F:D6:80:D2:EB:4C:00:CD:7E:E5:51:2D:4D:E5:26:16:18:82
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/7019d13c-6214-3c59-a451-9a427b53fc92.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a/d4919c1e-24c8-430e-8811-91383c31b96a.crl
X509v3 Authority Key Identifier:
keyid:DF:24:14:6D:BE:CF:7B:A7:A3:79:0C:17:46:95:44:80:14:78:29:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/d4919c1e-24c8-430e-8811-91383c31b96a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:0:870::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
01:88:02:ef:da:1b:4b:e3:60:3c:74:78:19:8d:76:a9:c3:2c:
03:c3:0a:7b:61:1e:24:b7:57:9a:62:53:0e:74:80:1e:d5:e1:
79:7b:78:3d:83:0c:90:d0:15:19:47:02:c4:79:3b:e2:48:ee:
13:20:fa:4f:ce:d9:02:a4:21:fa:d5:b9:74:93:7b:39:4b:f0:
ed:c2:1b:69:a1:00:67:22:d5:c8:ee:de:26:62:65:24:19:d5:
3e:cb:38:85:48:c8:49:dc:ee:d3:26:af:f4:4b:b0:5a:5f:e3:
37:66:ec:6b:50:24:a8:2a:42:6f:48:7e:a0:27:78:85:4b:15:
76:5f:99:3c:06:f8:f0:63:57:4a:c5:71:d3:65:c0:84:0c:28:
9c:42:f8:b8:ad:30:e5:44:2a:6e:fd:1a:fd:6b:5f:68:18:8e:
74:3d:c2:76:de:88:15:08:08:4d:cd:dc:09:4a:fb:1c:80:0f:
61:f4:1e:41:ee:51:33:25:bf:a2:ca:b5:98:5e:ad:49:b7:68:
f6:a3:cd:fe:10:99:7d:05:22:66:7a:d7:54:d9:98:b1:46:de:
62:07:91:03:bb:02:db:aa:3b:c8:fe:f0:d3:aa:5b:7b:5d:76:
c3:3a:13:27:52:f0:4e:b9:5b:50:19:80:8f:bc:1d:ea:ae:ad:
c8:46:7c:25
-----BEGIN CERTIFICATE-----
MIIGRjCCBS6gAwIBAgIUAQ0Mn0MoWE0/ZOAxIlBN2bJRl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ5MTljMWUtMjRjOC00MzBlLTg4MTEtOTEzODNjMzFi
OTZhMB4XDTI2MDMyMjAxMDAzMloXDTI2MDYyMDAxMDAzMlowLzEtMCsGA1UEAxMk
Y2FjNzBjYjYtNDNmOC00MjdlLTg5NzEtYWQ2YTY2YWY4YTQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo8ciVjA0ZTfKbT6t5PV9wQEWACZX4CB3knlZ
iqs888zSOBzqwTD4lNx72AZiDacXClzFzuVYIX12lSw/crOka+Qa+noAv/udNfrM
8AhJBZQ5I8aF+lNFpfnObxFrbs4VjimH9xYBOr3x69DKmjcB2g4QoHVP6sa8tLU9
f593sWxazjEtS899VXgPDlXSxc8w6nRRfj3DR4pvyLzKQdJAUqa+HOxTStd4ZizD
UtaXahHW8j1iRBaAqgHXzy8CKBL/5Cg7V4uhGDxrr3vj+nXilaK6IMEWulDTmo2S
KfFW+xrA4an/RycgNrQaY+ZpYBZ+MDkLUE3Mub5oGiJFrgPqIwIDAQABo4IDWDCC
A1QwHQYDVR0OBBYEFEgLn9aA0utMAM1+5VEtTeUmFhiCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkx
OWMxZS0yNGM4LTQzMGUtODgxMS05MTM4M2MzMWI5NmEvNzAxOWQxM2MtNjIxNC0z
YzU5LWE0NTEtOWE0MjdiNTNmYzkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZDQ5MTljMWUtMjRjOC00MzBlLTg4
MTEtOTEzODNjMzFiOTZhL2Q0OTE5YzFlLTI0YzgtNDMwZS04ODExLTkxMzgzYzMx
Yjk2YS5jcmwwHwYDVR0jBBgwFoAU3yQUbb7Pe6ejeQwXRpVEgBR4KTwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9kNDkxOWMxZS0yNGM4LTQzMGUtODgxMS05MTM4
M2MzMWI5NmEuY2VyMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcDJiAAAAhw
MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6
Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcN
AQELBQADggEBAAGIAu/aG0vjYDx0eBmNdqnDLAPDCnthHiS3V5piUw50gB7V4Xl7
eD2DDJDQFRlHAsR5O+JI7hMg+k/O2QKkIfrVuXSTezlL8O3CG2mhAGci1cju3iZi
ZSQZ1T7LOIVIyEnc7tMmr/RLsFpf4zdm7GtQJKgqQm9IfqAneIVLFXZfmTwG+PBj
V0rFcdNlwIQMKJxC+LitMOVEKm79Gv1rX2gYjnQ9wnbeiBUICE3N3AlK+xyAD2H0
HkHuUTMlv6LKtZherUm3aPajzf4QmX0FImZ611TZmLFG3mIHkQO7AtuqO8j+8NOq
W3tddsM6EydS8E65W1AZgI+8HequrchGfCU=
-----END CERTIFICATE-----
Generated at Thu Mar 26 18:23:04 2026 by rpki-client