
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/866e7380-eac5-3df1-9f3c-76c36568f7bc.roa
File: 866e7380-eac5-3df1-9f3c-76c36568f7bc.roa (raw, json)
Hash identifier: +Flb38L20BSxvPWbGdP1ijsTAskUf3BzJy8Kj8v7kTM=
Subject key identifier: 49:3B:74:91:62:B0:08:46:A2:2F:A3:86:B2:2A:31:50:9E:E0:42:D2
Certificate issuer: /CN=e0016267-dc0a-4a90-a925-951bf1a98788
Certificate serial: 010D0C9F4328584DB1DAD7246594BB1ED2C4FC80
Authority key identifier: 66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/866e7380-eac5-3df1-9f3c-76c36568f7bc.roa
Signing time: Sat 02 May 2026 01:00:24 +0000
ROA not before: Sat 02 May 2026 01:00:24 +0000
ROA not after: Fri 31 Jul 2026 01:00:24 +0000
asID: 401165
IP address blocks: 2605:2880:5::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:b1:da:d7:24:65:94:bb:1e:d2:c4:fc:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0016267-dc0a-4a90-a925-951bf1a98788
Validity
Not Before: May 2 01:00:24 2026 GMT
Not After : Jul 31 01:00:24 2026 GMT
Subject: CN=cd2868fb-2101-4c09-9c87-25d8aefa74d9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:f5:9c:55:23:f6:5a:d0:4c:ab:b5:79:f3:9c:
f0:51:d6:d8:fc:62:c6:04:ca:7b:b3:5e:2f:15:a3:
44:ac:dd:a6:c2:38:ae:2f:24:10:d1:ee:a2:8f:39:
df:63:4c:b0:6a:8e:4c:56:4e:f7:28:6d:30:ca:3d:
09:67:34:9e:a9:de:74:83:ec:59:58:01:bf:68:86:
d6:ea:91:20:57:5a:73:df:cf:7a:c5:94:e4:2f:dc:
76:25:d5:2c:8f:8e:13:28:e4:c3:a1:a5:a3:07:ef:
93:41:24:fe:11:6f:fe:7f:f0:1c:e9:78:27:7c:32:
0f:4a:78:9d:00:8e:f6:4f:cd:9d:67:a5:72:7c:2d:
c5:ab:48:ec:22:6a:3b:7f:d4:e1:e3:44:c1:79:6d:
ec:1d:0a:cd:da:f9:67:b6:77:ed:09:18:00:08:2c:
58:7e:62:68:f7:74:39:54:0d:ce:b0:c3:0a:88:92:
1e:da:b5:59:e2:f4:b9:ae:e0:b1:d5:b3:66:cc:be:
62:3f:8e:fa:6e:6d:6f:08:3d:54:e9:f7:d5:57:20:
8c:63:d7:e3:8c:dc:1d:b6:40:53:df:3b:5b:35:0b:
b9:72:08:5f:56:01:66:9d:bf:a0:cd:15:6a:e8:d4:
8c:70:b4:7d:8f:e7:7a:02:e5:e0:33:5a:41:4c:29:
d0:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:3B:74:91:62:B0:08:46:A2:2F:A3:86:B2:2A:31:50:9E:E0:42:D2
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/866e7380-eac5-3df1-9f3c-76c36568f7bc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788/e0016267-dc0a-4a90-a925-951bf1a98788.crl
X509v3 Authority Key Identifier:
keyid:66:23:7B:02:0A:2F:12:7A:B9:C1:CD:B7:FA:A4:D8:AD:57:87:76:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e0016267-dc0a-4a90-a925-951bf1a98788.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:2880:5::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2f:d6:13:71:9a:15:13:a5:ce:a8:dc:9f:ad:98:2b:59:32:15:
27:b9:ed:f7:2a:cc:ff:86:1c:7a:cd:c5:9d:3a:88:65:4e:68:
78:58:2b:6c:9e:05:97:c3:10:9f:e1:c0:a6:d3:8e:60:2a:bf:
5d:72:99:40:10:45:5f:e1:ac:8a:fd:56:8c:09:98:42:fe:1d:
cf:9c:a4:b0:4e:c3:9b:25:4c:1b:ab:19:5b:d8:02:f9:5d:ea:
67:b6:8a:3b:5b:71:c2:9b:26:64:ec:81:d6:d5:a3:de:4c:77:
06:f9:ab:8d:e2:64:5e:2e:f0:e0:68:92:5b:9b:06:95:1d:50:
6b:09:2f:f5:10:d5:23:06:ea:f9:3f:0e:f7:a8:49:7d:75:f6:
47:4f:4e:f5:5e:b9:68:ac:c9:bf:0d:c8:04:8d:8b:d6:55:5a:
6c:f4:c8:44:2c:52:12:37:18:75:1d:a6:1f:fa:e8:c9:9a:b0:
84:ca:4a:4e:0f:a4:cc:bd:b7:d8:1d:1f:2e:31:38:0d:dc:76:
12:f6:1d:d1:6e:a2:b7:8d:4b:40:fa:cc:c8:17:94:f8:d2:19:
9e:47:38:e1:4f:55:1c:64:e6:1b:cb:a9:13:6a:0f:49:9e:ef:
9f:eb:37:66:e0:e6:d8:c6:e7:a2:16:11:92:8a:bd:16:45:d6:
ee:84:db:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 18:23:02 2026 by rpki-client