
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/91908aa0-f606-3ddb-bdcf-a1261a9a638a.roa
File: 91908aa0-f606-3ddb-bdcf-a1261a9a638a.roa (raw, json)
Hash identifier: /1Vgz38x9B97VRJb7gh9va3f7WsitZM8zpXtJFhIap0=
Subject key identifier: 55:EC:58:A6:A7:34:6E:32:D2:89:51:A5:56:78:AC:49:04:26:30:5E
Certificate issuer: /CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
Certificate serial: 010D0C9F4328584D422F7FB296F00D2B7EB51F00
Authority key identifier: A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/91908aa0-f606-3ddb-bdcf-a1261a9a638a.roa
Signing time: Mon 23 Mar 2026 01:00:32 +0000
ROA not before: Mon 23 Mar 2026 01:00:32 +0000
ROA not after: Sun 21 Jun 2026 01:00:32 +0000
asID: 14618
IP address blocks: 2604:1fe0:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/85e06eaf-37a7-4588-abea-e4909ef1b4e2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 04:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:42:2f:7f:b2:96:f0:0d:2b:7e:b5:1f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2da00291-9798-4c46-adc8-0fe85d9e6c31
Validity
Not Before: Mar 23 01:00:32 2026 GMT
Not After : Jun 21 01:00:32 2026 GMT
Subject: CN=3e758dd3-e125-4c1b-99c0-bbafbf2980b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:82:12:56:70:17:06:af:4c:b3:be:70:c7:95:8c:
88:bc:5b:0b:29:db:a8:91:9f:90:43:42:33:6d:72:
10:de:cb:45:79:a1:b8:6d:12:b1:62:0b:f7:06:44:
6c:7d:99:c8:4d:a1:46:ad:d7:3b:ba:b2:28:9c:4b:
e0:31:e5:3d:bf:44:59:e0:78:5f:3c:91:58:fb:b1:
70:c7:09:f8:94:7f:86:02:eb:3c:23:ce:e1:f1:ec:
ca:ed:6d:c4:24:6f:3a:05:5e:8c:9f:c7:5c:20:23:
4c:21:5d:ec:25:a6:14:aa:0e:8f:a8:59:51:ec:e4:
71:78:0d:65:dd:5d:eb:7f:96:d1:3e:42:db:b1:a7:
46:76:16:58:f3:64:82:ef:31:98:74:67:8b:6e:96:
e7:72:a7:a3:98:05:f5:54:51:f1:30:db:13:a6:09:
18:b7:02:35:16:dc:de:63:79:18:72:7a:9c:1b:23:
8c:3f:ea:51:b8:7f:5f:2a:87:d7:1b:1b:1c:07:e0:
21:17:e1:17:6a:30:22:c7:2d:39:3f:c9:8e:8d:7e:
0e:39:1d:1a:22:cd:eb:b7:37:c6:65:16:12:b1:3a:
3a:e0:57:ab:cb:f9:96:39:24:a2:91:f1:6a:7e:e2:
40:a0:eb:ff:28:87:c8:d4:36:24:b3:cf:f4:f8:ce:
2e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:EC:58:A6:A7:34:6E:32:D2:89:51:A5:56:78:AC:49:04:26:30:5E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/91908aa0-f606-3ddb-bdcf-a1261a9a638a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31/2da00291-9798-4c46-adc8-0fe85d9e6c31.crl
X509v3 Authority Key Identifier:
keyid:A4:58:3F:28:14:57:BA:5E:8D:88:6C:E3:D9:FF:C9:9E:88:FD:67:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/85e06eaf-37a7-4588-abea-e4909ef1b4e2/2da00291-9798-4c46-adc8-0fe85d9e6c31.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:1fe0:ffff::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:6e:ff:e5:1d:bc:0d:25:2b:6c:63:14:a6:5f:e3:f9:c7:4d:
c9:1e:58:17:db:2b:8e:bd:12:6c:92:22:f2:b2:fc:25:91:51:
f3:85:76:64:db:84:a0:75:33:bd:44:b8:a3:96:02:57:ac:79:
12:65:c1:62:db:b2:ce:d9:b8:5d:de:9f:0d:1c:84:7e:cd:1e:
fe:a2:64:a4:7a:29:ef:b9:09:02:0e:01:f2:ac:78:9b:a1:b4:
21:0d:1f:e7:93:b6:a0:76:1a:24:58:25:0c:b6:69:b7:99:ea:
ac:5b:d4:95:34:4c:16:a0:58:be:42:c9:84:15:41:3b:3e:f3:
67:2c:07:84:1d:7d:22:ff:5c:4d:ba:87:40:a9:f3:aa:6d:4c:
fd:ab:38:f5:fc:c1:05:9b:ab:3a:a2:f7:af:66:e4:e0:a5:41:
dd:fc:32:77:43:d9:fb:7d:54:f2:a1:42:05:7c:b8:f9:89:d9:
b2:c3:cf:b2:bb:cb:a3:6e:d8:cd:d9:8f:2a:04:14:7f:8b:ae:
e8:39:ea:6a:15:b1:fd:c1:ca:99:ab:43:e1:ca:0f:0e:ff:da:
e5:e3:9e:e1:c2:7e:4d:c9:96:13:17:8b:b7:d7:81:3c:02:de:
0e:26:eb:99:1d:e3:03:6b:43:2c:a8:09:2f:45:56:9e:5a:4d:
47:d2:34:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:33:02 2026 by rpki-client