
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
File: 3c58dacd-b17a-3904-a883-f1d2e402127c.roa (raw, json)
Hash identifier: vlE1Mf5hQY3lWHLzi9kje1OYMseRw8Mh/yWx70LjqEU=
Subject key identifier: 18:E3:5D:AE:F0:60:C5:E7:B2:0F:41:AA:E1:61:40:F0:EC:14:7C:F5
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584D95EFF718D3B767D521273200
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
Signing time: Wed 22 Apr 2026 01:00:23 +0000
ROA not before: Wed 22 Apr 2026 01:00:23 +0000
ROA not after: Tue 21 Jul 2026 01:00:23 +0000
asID: 395831
IP address blocks: 2606:7bc0:1081::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:95:ef:f7:18:d3:b7:67:d5:21:27:32:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Apr 22 01:00:23 2026 GMT
Not After : Jul 21 01:00:23 2026 GMT
Subject: CN=d00aecd3-d358-440b-822a-953245fadd88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:1b:92:e8:73:0e:bb:c9:53:d6:c0:ef:03:5c:
72:b0:fd:b0:07:5d:4e:22:e5:39:86:32:45:ba:ce:
6b:f1:e2:57:5e:76:96:6b:85:fb:6b:33:39:bc:ad:
4a:68:f1:97:eb:cf:67:4a:12:e3:f1:a9:83:0a:21:
fe:93:0c:94:d2:32:90:9e:10:cd:2b:9d:03:92:57:
99:86:c8:36:16:3b:a4:b2:3c:cc:3d:de:a5:a0:73:
75:bf:ef:21:1f:e2:8f:6f:d3:2c:06:d2:74:f6:d7:
5e:a9:ab:98:3b:97:83:cf:d5:f2:8a:f3:a4:14:d9:
80:e8:72:da:20:12:3b:7c:d2:98:78:12:93:18:b6:
d3:5f:1d:21:db:78:47:31:9e:db:75:50:5e:ee:fd:
59:ae:2a:c1:1f:18:d2:c0:b5:3f:4f:95:8b:22:85:
d3:30:43:78:49:73:88:70:68:bc:07:77:03:6e:12:
7f:03:7b:3e:30:aa:58:68:20:95:c0:65:3b:cd:15:
cc:a1:8b:e0:3a:7b:bf:ac:2b:50:90:ca:a1:3e:bd:
fa:f1:3f:28:2f:87:e6:cd:8f:dc:2b:61:d4:d4:78:
b5:aa:bb:85:7d:6d:c2:6a:12:4d:33:a8:6c:a1:5c:
b6:fe:66:89:ee:85:9e:9a:c0:58:7b:f5:b8:1d:d4:
df:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:E3:5D:AE:F0:60:C5:E7:B2:0F:41:AA:E1:61:40:F0:EC:14:7C:F5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/3c58dacd-b17a-3904-a883-f1d2e402127c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1081::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
48:e2:35:4e:14:df:5e:26:a0:13:f9:b9:d5:25:d5:8e:f9:6f:
09:a5:b0:5d:73:0a:e9:57:55:5a:2b:0d:66:5a:f0:6b:45:4f:
be:2e:cd:16:a0:a3:54:c5:b9:8d:b2:6a:5a:56:8f:bb:e8:18:
29:a3:04:32:19:19:17:54:8a:8d:73:79:ad:b3:83:28:d6:fd:
60:e6:c1:07:d3:5e:5a:55:f8:69:4a:1a:d1:0e:a3:88:27:c8:
cb:a5:60:9d:c9:24:a9:81:d5:97:79:9f:2c:c9:9a:cb:85:b0:
91:ca:85:84:02:cb:8a:fc:c4:a7:e4:d9:d5:c9:aa:2a:a5:aa:
c3:d4:d8:f0:57:fd:b0:9e:91:3f:35:3c:3c:0a:19:ea:77:9c:
55:4f:ae:53:cd:5a:30:06:8f:e1:c7:b4:02:33:f1:93:c5:3b:
b0:a6:64:c7:a8:9a:4e:43:72:35:fb:99:38:c3:b6:30:ac:d9:
ac:1c:57:40:79:9e:c9:ed:6f:b1:70:ac:3f:5d:d5:83:3f:1d:
67:4a:5b:3e:15:5a:98:80:67:13:df:31:a8:6c:7a:ad:ba:3b:
26:2a:24:74:e1:ac:4b:f1:1d:d3:de:6d:2b:73:34:4f:b6:b8:
d6:35:8a:d6:a3:b1:72:e1:1f:fe:33:1f:4c:70:70:7a:9e:a8:
fc:e1:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 14:30:36 2026 by rpki-client