
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/473dfcc9-d90b-32d2-ab67-675866203084.roa
File: 473dfcc9-d90b-32d2-ab67-675866203084.roa (raw, json)
Hash identifier: v/jKFr42/SIeTrto00c1aqgRSrV+AxPGsGd4NXqEXrE=
Subject key identifier: BD:5B:B6:8B:A6:AB:26:86:4C:C0:1E:3C:B7:16:23:96:C4:7A:0A:7E
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFF4E96F20F2CBD15E2BC0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/473dfcc9-d90b-32d2-ab67-675866203084.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2605:a401:8024::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:f4:e9:6f:20:f2:cb:d1:5e:2b:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=3fbadb33-a6e3-48b2-a2ff-7374ba3d84ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:36:49:c9:9c:65:9c:c0:04:bf:da:14:b6:31:
be:95:6d:08:4f:7a:a1:3d:a9:75:12:7e:87:88:00:
71:be:04:84:32:5b:72:d6:c9:fc:62:f0:e4:a8:b2:
8e:f4:c4:96:97:fe:9e:20:02:cb:ce:45:e3:73:26:
3d:31:33:e2:73:21:c8:5a:1a:ea:66:bf:ad:bf:d4:
19:01:8a:97:7c:83:0f:fa:f5:89:24:46:0c:1e:7f:
8e:d3:b4:8c:e2:b0:74:14:9c:3a:04:be:c1:2f:ed:
d3:0b:5a:d8:21:73:40:c9:80:58:14:2b:9c:bd:26:
40:bc:5a:98:79:21:fe:70:2d:87:f4:99:e3:56:4e:
f5:49:30:42:cd:bf:b6:0b:3a:eb:15:5e:fc:cc:a1:
8a:71:2f:70:c5:55:0e:b1:d4:41:73:8e:2a:a5:c0:
85:61:bd:b4:a6:ec:c9:77:7a:35:d8:83:72:18:05:
17:6a:68:7b:fb:34:7f:22:27:23:37:43:d7:5f:2d:
40:62:e9:c6:75:32:fe:64:7a:b3:14:a6:b9:a6:27:
de:f6:96:2f:bc:44:2c:46:c1:52:5f:70:c2:87:51:
05:24:6f:27:c3:3e:e3:d3:b0:20:9f:3c:55:f7:de:
78:6b:85:da:00:e7:49:af:8b:5a:77:2b:9b:fb:2c:
58:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:5B:B6:8B:A6:AB:26:86:4C:C0:1E:3C:B7:16:23:96:C4:7A:0A:7E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/473dfcc9-d90b-32d2-ab67-675866203084.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:a401:8024::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
13:89:44:7a:21:7b:56:89:82:32:8c:0d:27:11:c7:73:cc:eb:
51:fa:dd:7b:fa:c5:a8:1f:7e:69:fc:26:64:7e:b3:0d:f7:67:
8c:53:98:bf:19:ec:bc:3f:60:79:b5:0f:3f:6b:a9:d8:f2:05:
33:bc:e2:26:1b:6c:91:fd:8c:cf:05:8c:85:2a:c4:19:b8:74:
bc:46:6d:30:be:b9:c6:bf:d2:81:d4:a7:53:15:a1:69:73:4b:
56:a4:f2:da:d4:e7:a8:c9:e0:54:50:d9:a2:5a:e1:ec:77:2d:
da:f3:17:0c:25:75:c0:b8:65:00:98:d9:fb:5e:b7:f7:72:db:
83:00:b9:22:29:80:4a:9c:02:0c:b2:09:f7:e9:23:83:27:d1:
93:b0:12:47:90:8b:a1:bb:52:fe:b4:0e:99:4f:b4:97:21:1d:
9d:5f:d3:09:75:eb:e0:cb:bc:4d:1e:ae:52:49:af:80:57:ae:
fa:bf:b9:52:18:3c:c8:c0:12:1d:1a:30:cc:1f:c3:f7:9d:5f:
d5:14:18:63:eb:71:a6:7e:97:ce:19:bd:b1:64:44:53:16:c2:
75:88:93:2c:5e:cd:24:cf:23:ca:93:71:02:16:78:43:20:01:
77:8c:da:43:97:31:39:d6:8b:14:44:9b:4c:fa:72:6f:35:62:
3f:ea:ca:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:45:48 2026 by rpki-client