
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/11ea8b89-c326-307c-8031-9272ff40ca55.roa
File: 11ea8b89-c326-307c-8031-9272ff40ca55.roa (raw, json)
Hash identifier: t5RhCNU8e4FmuLXf1SN6I135aH50Y1YgU0ft8Z4N+II=
Subject key identifier: 7D:B7:15:96:09:85:F7:C4:C0:55:EE:72:F0:60:46:4F:AB:6C:FF:F8
Certificate issuer: /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial: 010D0C9F4328584D2644BECC4101DFE51D57B2E0
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/11ea8b89-c326-307c-8031-9272ff40ca55.roa
Signing time: Fri 13 Mar 2026 01:00:31 +0000
ROA not before: Fri 13 Mar 2026 01:00:31 +0000
ROA not after: Thu 11 Jun 2026 01:00:31 +0000
asID: 835
IP address blocks: 2602:fd50:4::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:26:44:be:cc:41:01:df:e5:1d:57:b2:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Validity
Not Before: Mar 13 01:00:31 2026 GMT
Not After : Jun 11 01:00:31 2026 GMT
Subject: CN=4d59f7cb-c4c0-4fda-a965-dad4d029ac5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:c7:86:10:c6:b1:0d:c1:ae:e2:8f:be:03:
46:c4:c9:f0:3f:64:c0:4d:e6:16:3a:9d:4b:4b:67:
1f:99:9e:3d:72:ba:22:7f:c5:e3:be:0e:c2:d8:6f:
83:d4:bb:05:18:12:51:b1:97:b5:7c:91:55:56:f2:
eb:a6:9e:06:53:95:3c:a5:ca:1d:27:21:59:b8:88:
32:e8:a9:76:3b:12:45:c1:f1:4d:c3:98:a2:26:91:
2c:c1:49:a8:ec:94:db:d0:27:c5:27:91:74:20:45:
d9:a7:ba:53:dd:ae:5b:3b:18:7e:18:75:59:08:42:
5f:e3:09:48:63:8a:5c:34:19:6f:ff:f0:99:f3:48:
38:02:bd:33:db:18:e8:5e:16:cf:0d:99:34:14:82:
5e:46:74:0a:30:23:9d:f6:da:c4:9a:23:89:4c:eb:
b3:61:26:13:62:e6:26:e5:63:01:e1:4f:b3:32:1b:
32:67:43:6a:55:82:b0:08:c2:b4:53:6b:6c:c1:01:
90:6f:55:86:18:5d:da:ab:6d:31:0d:40:57:d2:39:
1f:1d:2c:fa:ea:bb:72:00:18:d3:a6:d2:89:23:78:
25:9a:72:1b:3d:74:8f:5a:df:c7:5e:8a:f4:99:d6:
bd:47:ea:ac:f2:37:fc:2a:f9:44:1c:04:88:0a:72:
e2:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B7:15:96:09:85:F7:C4:C0:55:EE:72:F0:60:46:4F:AB:6C:FF:F8
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/11ea8b89-c326-307c-8031-9272ff40ca55.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
X509v3 Authority Key Identifier:
keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fd50:4::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2c:d6:25:12:38:56:12:9d:e5:db:e1:fb:4f:fc:b1:4f:40:4a:
40:b8:37:67:21:28:0e:ef:b3:5e:91:9f:ea:74:11:06:b2:e6:
e9:56:df:7f:88:a9:b3:26:67:d2:74:f7:18:a7:f4:28:1f:75:
19:51:c4:5b:14:60:9a:29:bf:62:94:05:1e:41:7d:62:66:86:
88:12:98:06:da:50:65:ac:03:3b:24:f2:a9:4a:12:a0:89:56:
70:ff:a4:b8:e2:0b:16:3d:8f:08:7e:d4:8f:1f:1b:09:af:14:
43:42:ad:22:04:6c:21:8d:b7:17:da:e5:0b:68:a1:ce:82:c9:
2c:60:06:9f:4a:a4:b2:f0:6e:4a:f4:5e:6f:ab:b6:a7:23:78:
f9:80:4e:93:1a:c9:a6:ec:c0:7b:88:16:e9:f3:8b:f0:84:d8:
ee:ff:81:2d:4a:79:fc:0b:5c:63:67:24:7e:21:46:f2:c5:a6:
13:f8:6e:6a:d7:2a:1c:08:d5:d9:d4:62:4b:f5:66:67:30:c9:
99:ea:61:c0:73:f0:a5:b8:ae:34:bb:21:71:db:a5:8a:b6:4c:
be:7b:9c:35:56:dd:96:46:7f:cb:34:af:7e:21:d0:d2:19:8f:
96:71:7a:03:2b:d6:1f:8a:ba:d4:11:24:0a:a4:1a:f4:34:16:
6d:2e:a4:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:11:30 2026 by rpki-client