
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa
File: e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa (raw, json)
Hash identifier: +jqi6Jq+s4oO2pcEbhULsaY/t2tcGAVyPHRI2AiqKO0=
Subject key identifier: 43:80:EE:87:8F:E3:7E:9C:1E:78:97:DB:FC:8B:8B:08:2C:99:CB:18
Certificate issuer: /CN=b32217e1-2473-49a5-919e-08e1896c5019
Certificate serial: 010D0C9F4328584D40CA3DA4B17CD8E12EB64D60
Authority key identifier: 48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa
Signing time: Sun 22 Mar 2026 13:00:41 +0000
ROA not before: Sun 22 Mar 2026 13:00:41 +0000
ROA not after: Sat 20 Jun 2026 13:00:41 +0000
asID: 22191
IP address blocks: 2604:1dc0::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:40:ca:3d:a4:b1:7c:d8:e1:2e:b6:4d:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32217e1-2473-49a5-919e-08e1896c5019
Validity
Not Before: Mar 22 13:00:41 2026 GMT
Not After : Jun 20 13:00:41 2026 GMT
Subject: CN=e0ece709-ee05-4ee0-a536-7a61c31ff2d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:70:91:90:95:be:e3:b3:7e:43:45:39:b2:f0:
a8:61:d0:d7:44:64:b5:6d:f4:f3:32:04:de:c7:45:
fa:d7:e2:73:b1:48:c0:e8:ba:84:0c:49:bf:a2:e9:
63:ba:7d:98:b4:42:b4:a7:d5:1a:7c:e6:98:3a:a9:
41:2a:55:35:9a:64:76:31:43:ec:26:68:17:4d:e5:
3a:fd:68:25:73:2e:d6:7e:6a:da:19:10:ed:22:a0:
02:0f:22:3d:2a:3e:68:33:2b:a2:d3:55:40:0a:41:
d3:cd:e9:30:cf:b2:93:ba:2d:6c:4a:fd:3b:a4:7a:
cf:49:b7:8e:7b:1e:65:04:00:1e:26:bf:b7:aa:13:
20:09:87:3f:df:55:d5:e2:d8:bf:07:b4:b2:9f:3b:
35:c4:e6:89:fe:f2:6e:66:4c:0c:3e:e3:8a:b0:f3:
27:2b:d1:57:2c:8e:7d:5f:dd:57:60:d0:e6:70:6c:
ed:2b:2d:50:b1:fb:be:e1:51:0d:aa:57:d5:8e:67:
57:ba:bc:04:e1:ca:41:27:93:e7:66:16:df:c0:58:
f1:e1:64:c0:35:fb:01:04:0d:a9:34:1a:a8:32:a8:
2e:3a:67:e5:93:21:0d:0f:36:0b:90:fd:a3:80:29:
76:3f:fc:66:4e:15:f2:5d:2b:3b:e8:3b:e8:44:49:
fa:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:EE:87:8F:E3:7E:9C:1E:78:97:DB:FC:8B:8B:08:2C:99:CB:18
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/e8f4510c-5de6-3f1e-8e6c-8a4f890a242d.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019/b32217e1-2473-49a5-919e-08e1896c5019.crl
X509v3 Authority Key Identifier:
keyid:48:AE:0D:F8:A0:D7:74:90:58:A4:5A:B5:23:A6:6E:B7:B1:C0:77:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b32217e1-2473-49a5-919e-08e1896c5019.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:1dc0::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7c:2a:08:5a:e1:20:e2:da:ba:67:49:08:75:30:6c:63:2e:62:
fd:bb:c5:f3:2b:8c:37:eb:40:7a:67:cc:e2:e2:7c:47:3a:ee:
97:e2:97:25:8e:18:f0:44:64:05:10:ab:b5:a3:7a:a7:78:2c:
8a:4c:3b:d2:37:10:6c:2c:a6:1d:2b:7d:81:17:a5:6c:4f:c5:
32:db:54:61:a6:da:c4:99:5d:01:37:c8:07:c0:76:56:00:c4:
80:8d:63:73:42:ea:ed:9e:9c:e3:71:b5:88:47:42:8d:a2:42:
b1:76:06:ac:47:12:ae:90:c8:b4:ce:62:95:e5:4b:a1:a4:39:
35:58:b4:69:47:2f:81:8a:d6:cd:39:82:f6:65:a8:5b:c1:a6:
1f:75:0f:42:39:b9:56:ad:0c:2e:6e:d4:ab:78:18:67:8b:08:
23:45:5b:9d:e6:74:81:f4:72:26:12:0a:e3:e2:69:81:4a:5a:
c9:07:a5:aa:c5:87:a9:ac:b4:2c:17:4e:7f:3e:07:13:a5:4d:
77:ae:df:b8:45:af:b4:bb:dc:33:0f:34:ec:19:34:25:5c:0e:
9d:82:f2:58:31:43:d5:bf:8a:3e:43:de:1b:77:5a:dd:fd:0e:
cf:4c:28:6d:d9:83:bf:02:4d:9a:6a:7c:8c:86:b4:f3:62:02:
46:0d:08:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:50:26 2026 by rpki-client