
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
File: caaf40e4-468e-3ac7-9c5c-80d776e26587.roa (raw, json)
Hash identifier: UGa8/4gXCpKpustsqgdxEaV+Zpbe1jKA8co9MT/VQLY=
Subject key identifier: 40:90:FF:65:B2:0A:B9:32:74:05:97:B4:FC:8B:F6:63:51:AE:9E:90
Certificate issuer: /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial: 010D0C9F4328584D3DFFBF6FC4CA2DCDADC25800
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
Signing time: Sat 21 Mar 2026 13:00:39 +0000
ROA not before: Sat 21 Mar 2026 13:00:39 +0000
ROA not after: Fri 19 Jun 2026 13:00:39 +0000
asID: 33363
IP address blocks: 2607:f098:6000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:3d:ff:bf:6f:c4:ca:2d:cd:ad:c2:58:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Validity
Not Before: Mar 21 13:00:39 2026 GMT
Not After : Jun 19 13:00:39 2026 GMT
Subject: CN=f54cd767-9d7d-4579-8520-da507dd3e596
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:ab:7d:e3:60:bd:a1:35:d3:51:6d:78:47:f2:
3e:21:e1:9d:9f:b6:56:38:94:3f:97:a7:41:a4:9f:
8d:7f:6c:ef:15:e5:c8:15:cc:1a:b1:d3:07:db:6d:
4b:86:3a:9c:80:8e:14:16:05:cf:22:ff:b9:99:0f:
b5:d3:50:33:50:31:66:3a:5f:db:b7:c3:3c:1c:e1:
7c:e3:da:6d:7a:d7:37:eb:e2:58:d9:8b:3e:86:8b:
4e:f4:0a:b6:0e:e7:ca:48:b1:4c:c7:0d:99:de:f3:
f5:9d:b3:f1:23:a9:28:04:1f:1c:c5:3b:c2:5d:38:
c2:67:cc:3c:65:fa:0d:5f:23:74:1d:33:d5:aa:3d:
03:22:6e:5a:c1:b0:f6:33:0b:a1:db:24:bc:a8:a9:
f2:94:16:d4:4e:c5:f5:8f:cc:12:95:10:f3:0c:69:
81:3d:7a:d2:6e:0f:c5:4e:8c:dc:28:4b:da:9f:65:
1e:f0:bd:97:99:09:a0:c4:d2:4c:19:71:c7:56:f5:
3c:2f:b6:a4:d6:a1:3f:81:df:9c:49:fb:29:d3:c2:
76:c6:70:12:87:bc:27:6d:d8:a2:26:c5:ab:cf:1f:
df:e3:df:2f:49:7e:f4:79:1d:02:17:91:a3:5d:30:
a2:e3:4c:82:0e:2e:9d:22:fe:f9:4c:3d:ff:95:91:
c1:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:90:FF:65:B2:0A:B9:32:74:05:97:B4:FC:8B:F6:63:51:AE:9E:90
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/caaf40e4-468e-3ac7-9c5c-80d776e26587.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
X509v3 Authority Key Identifier:
keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f098:6000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:7a:c5:c2:27:06:98:cb:75:77:98:7f:8c:f1:8d:46:78:23:
c9:08:44:62:dd:71:d4:ba:ea:a1:ff:e6:f5:ef:00:b8:69:90:
53:fc:45:5f:0e:fb:66:31:ef:76:70:d8:74:2b:0a:bc:c8:8b:
be:30:08:c4:a7:32:3e:87:68:0f:f5:3e:3f:27:40:ba:ef:91:
83:81:f7:4e:93:5b:dd:90:ce:bb:0c:c3:aa:ba:1a:4b:06:38:
4a:ac:d9:bc:d9:83:78:ca:10:c8:ab:7d:74:8c:50:a7:9c:ae:
0a:6a:b8:b1:09:17:f6:3d:42:80:b6:40:76:23:a9:b8:73:1f:
97:65:f1:f5:ce:10:2e:01:28:e0:d4:43:6a:c9:52:56:7d:39:
5d:92:41:d7:c6:d8:3f:fe:e2:a8:08:a7:09:bf:ed:2a:35:0f:
23:86:17:9d:d7:52:40:2c:bd:bc:86:04:fd:ed:65:89:71:e4:
1d:57:5c:c9:46:67:8d:84:d4:98:ae:5a:2c:ab:86:71:ba:3a:
91:0d:93:04:ea:dd:18:66:16:04:44:84:af:04:19:79:c8:7f:
34:b9:9d:6b:b0:5e:81:64:12:d1:10:1d:3d:94:e6:02:47:c9:
90:0c:fd:00:bd:cb:93:f2:71:b4:eb:84:ee:14:df:92:a0:3b:
bd:f9:d1:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:08:50 2026 by rpki-client