
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
File: f34e70eb-f511-378d-a8f9-037aebbc577a.roa (raw, json)
Hash identifier: UJ991Gpa/GLhVzuQ/TM8SAFY+WVdt6hDlhsxOUqE+tg=
Subject key identifier: 73:B8:BA:91:48:74:D6:9F:27:8E:16:BF:39:B5:A0:F2:B6:7F:64:DF
Certificate issuer: /CN=23f061ce-1a61-493b-8f3b-472334453f0d
Certificate serial: 010D0C9F4328584D1F4A1CD923E5D315C7B63480
Authority key identifier: B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 0
IP address blocks: 2620:10f:b000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:1c:d9:23:e5:d3:15:c7:b6:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23f061ce-1a61-493b-8f3b-472334453f0d
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=6fe75399-4505-4a5d-8413-e2abd712b6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:f7:00:6b:72:e5:55:43:07:dc:78:4e:05:75:
c6:1f:1c:46:b7:20:52:89:4a:b4:3a:7c:d2:2e:76:
48:c3:9a:3c:38:ba:73:34:e0:bd:e1:b6:ce:2e:02:
c4:d1:f0:85:d7:3c:1a:5e:9b:64:7b:b8:7b:ef:29:
33:e3:b3:d0:ad:ee:15:55:e8:4a:82:18:8c:53:32:
f0:46:85:d9:55:97:89:a1:34:2f:53:a7:73:e5:be:
c6:cb:e0:db:5e:98:d4:58:15:c9:24:8e:c6:79:08:
b0:a8:8c:b1:7c:3a:7d:af:d7:fd:fb:6a:a8:c2:0a:
53:bf:a9:a6:b3:45:b1:fb:3e:ff:bd:d6:ca:8f:b3:
34:8f:61:c2:d8:ca:0b:a1:18:0e:25:ab:9f:cc:55:
be:52:2c:19:61:83:d4:94:2d:1f:d0:a7:0b:66:82:
88:9d:32:18:4d:e3:4b:31:0c:24:3e:04:5f:46:79:
a4:e2:37:1b:bd:fb:6f:d9:e6:9a:51:6d:d9:ee:6a:
0c:6f:3d:d9:45:b3:9c:c6:b7:42:5f:f8:2d:b5:72:
bd:a3:d2:18:1b:c1:52:0d:e4:31:55:2c:3a:3b:74:
98:6f:ab:ea:79:c9:98:30:bd:ab:ea:8e:d3:c4:e6:
db:6a:a4:5f:ef:b0:3b:7f:b9:6e:ca:f7:2e:26:8b:
c8:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:B8:BA:91:48:74:D6:9F:27:8E:16:BF:39:B5:A0:F2:B6:7F:64:DF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/f34e70eb-f511-378d-a8f9-037aebbc577a.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d/23f061ce-1a61-493b-8f3b-472334453f0d.crl
X509v3 Authority Key Identifier:
keyid:B0:4C:1C:BF:DB:0C:EF:A5:7E:B9:AF:53:02:90:A0:E7:4C:BC:DC:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/23f061ce-1a61-493b-8f3b-472334453f0d.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:10f:b000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
27:37:65:c3:c7:83:0a:d5:59:59:e6:d5:b7:59:c8:c7:62:07:
31:10:b3:a8:47:10:32:70:fb:7f:27:60:a1:ff:03:23:a5:cc:
2d:4d:94:39:da:ba:27:41:33:4c:b9:50:b1:87:16:c6:29:f3:
5b:fc:8d:ac:81:62:86:d5:a6:28:03:81:19:61:a9:9c:f1:fa:
91:f5:34:ef:1c:c6:38:4f:54:9f:9b:a1:d6:41:88:c8:57:31:
03:a7:d3:58:1a:8c:5d:17:d9:74:b8:c4:9b:30:0a:62:36:29:
87:08:30:1f:c2:65:d7:b6:df:8a:df:7a:29:df:ee:b8:76:dd:
e0:1f:60:53:38:3e:4e:90:be:19:a2:d7:87:c5:aa:f3:fc:87:
07:08:b7:f2:09:77:0e:b9:7d:04:13:e3:eb:ca:91:08:7e:7c:
df:a6:06:30:ad:9a:db:5a:89:5f:e4:95:37:75:c3:7e:b4:a1:
41:01:d1:24:20:81:10:1a:05:6d:44:13:27:28:f4:02:48:4e:
ef:25:41:80:3a:1b:ad:64:a6:7a:e1:5c:47:c6:6e:aa:da:ff:
23:e6:9d:1e:42:1e:6e:19:4a:2f:ef:80:45:3d:02:ff:c0:e1:
a5:ae:b1:81:82:a0:11:45:1d:37:28:c1:3f:2e:f1:14:2c:6e:
3d:3b:76:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 18:08:09 2026 by rpki-client