
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa
File: 52ea9329-199b-3173-bb35-8fdad2b9a372.roa (raw, json)
Hash identifier: qeNFeIKLyVbWYZhh+1px7p8Z8v9Vrbvo1Hf9crn2xvA=
Subject key identifier: EA:52:7F:9D:66:26:08:FC:25:BE:0B:25:E0:84:C7:FC:71:5F:D8:5A
Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial: 010D0C9F4328584D386A37A6EE3D1D4D3DC57450
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 5744
IP address blocks: 2610:20:5160::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:37:a6:ee:3d:1d:4d:3d:c5:74:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=cfa1b6a8-e595-4ea2-b4e6-15c8ad04f88c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0e:c5:9b:8e:b6:5d:d9:e1:1e:25:0b:1b:e0:
56:ed:ff:9d:f5:16:50:0e:29:69:fd:95:ff:f4:70:
28:4b:49:18:f5:cd:1a:b4:bd:1d:1b:4a:63:ba:39:
25:ac:84:d6:d2:b8:6d:38:16:7b:77:f6:f4:df:4e:
14:bb:c2:a7:c0:7a:10:30:80:29:20:28:79:20:db:
21:7e:98:44:ca:84:9e:54:70:e8:60:6f:e0:fa:98:
27:07:e0:ad:27:0b:03:61:51:42:f0:ad:f5:bb:2f:
fe:b2:18:b1:a1:f6:ec:88:f8:5d:75:1f:ef:68:7e:
48:47:b4:db:11:a4:2d:8c:8a:fd:1b:de:9a:4d:f2:
51:d1:07:1b:a3:87:9f:1d:bc:77:0c:56:90:88:bc:
af:0c:5b:5b:59:90:46:86:47:37:a4:fe:48:cf:27:
df:bf:1b:a0:5b:85:70:c3:c6:46:b2:48:a0:08:68:
d4:17:58:8f:65:39:43:3a:ea:2d:e5:0c:ca:c5:8b:
39:35:40:ae:b5:dc:91:0d:32:e4:01:97:bc:8f:b0:
c2:57:c9:17:b9:6d:77:d4:23:c3:16:09:e1:61:6b:
8b:71:68:62:a1:39:18:7b:86:db:12:56:e8:4d:7d:
c1:66:a8:e2:af:fe:bb:cc:f1:a7:f9:d2:42:ed:fa:
71:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:52:7F:9D:66:26:08:FC:25:BE:0B:25:E0:84:C7:FC:71:5F:D8:5A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/52ea9329-199b-3173-bb35-8fdad2b9a372.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
X509v3 Authority Key Identifier:
keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:5160::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
35:90:ab:25:78:6a:9a:c7:78:30:d7:96:74:ca:30:38:7e:6a:
ce:cb:01:3f:13:36:31:e8:17:15:4d:d4:0d:b1:11:09:3a:d2:
f2:74:5e:e6:84:a2:30:0e:71:55:d5:fd:1b:9d:ba:77:ce:26:
59:74:b0:11:ef:e9:d6:6d:20:8c:2c:2f:42:c3:bf:24:8f:b2:
9b:ec:36:a5:d5:f6:be:1a:2a:89:0e:15:d0:cb:2f:f2:5a:e1:
b2:5e:d4:b0:49:df:0d:7f:d8:33:7c:b5:13:23:46:1a:54:15:
66:41:cb:bd:0f:97:a9:e8:a3:28:eb:2d:63:33:1d:93:90:e5:
74:b6:42:d0:af:2d:f0:eb:1c:c3:59:ed:9f:06:8f:64:2f:b3:
74:66:b0:ee:1e:b1:1e:f7:b7:e6:93:c9:23:21:d6:cd:8f:af:
e4:8a:77:93:84:6d:cf:e6:81:a7:f5:9a:19:0b:e5:5d:f2:2a:
4c:6c:1a:a6:8e:ce:ec:8f:57:16:39:02:e4:df:45:38:d0:25:
38:a4:ac:08:ec:df:b1:04:08:ab:79:0e:80:38:8f:23:ac:d7:
2f:f6:98:4e:60:c1:56:31:dd:a1:c2:cd:27:22:ef:bd:2a:65:
af:e4:cd:ee:dc:43:08:ea:1c:97:a8:77:c5:0b:d9:eb:c3:b0:
ab:57:e5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 23:51:50 2026 by rpki-client