
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa
File: a20c2df9-68c3-3920-812e-1578e81c4ea6.roa (raw, json)
Hash identifier: Zy+6biav66ERRYS7qHZOv35QEPkfkWKStFTMk/9jARo=
Subject key identifier: 98:10:17:B8:94:90:91:D0:1A:35:0B:EA:EC:27:6D:D8:DE:6D:34:AF
Certificate issuer: /CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Certificate serial: 010D0C9F4328584D9FB58E8E528ABD718E2AF3A0
Authority key identifier: 61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa
Signing time: Sat 25 Apr 2026 13:00:30 +0000
ROA not before: Sat 25 Apr 2026 13:00:30 +0000
ROA not after: Fri 24 Jul 2026 13:00:30 +0000
asID: 397423
IP address blocks: 2604:7580:9::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 15 May 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:9f:b5:8e:8e:52:8a:bd:71:8e:2a:f3:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff
Validity
Not Before: Apr 25 13:00:30 2026 GMT
Not After : Jul 24 13:00:30 2026 GMT
Subject: CN=3b653eab-c2ed-43f3-8d65-2d75b13455ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:1c:9a:f0:07:bd:e9:e6:fd:40:7a:9e:1f:7f:
3d:09:f1:c9:61:84:13:a1:0b:14:ee:90:a1:be:2f:
f8:b8:b8:b0:89:3e:f2:33:42:59:40:85:e0:23:d6:
3c:e2:bb:09:3a:8c:9d:ce:f2:db:5e:be:24:ac:ac:
d8:3a:bc:7a:1f:77:97:80:91:72:44:e6:a5:46:32:
9a:b7:1c:55:18:22:67:43:50:f4:2c:3f:b1:44:c9:
c2:6e:f5:0f:e7:0b:64:d6:32:4b:09:cf:fd:e1:b0:
2a:86:fd:9f:c5:a6:1b:95:d6:26:00:5d:dc:7a:b0:
87:44:e3:fd:de:d7:c0:69:d0:c0:be:99:6c:04:5c:
be:1b:08:79:98:61:d7:05:4b:33:d9:fa:24:0f:62:
69:0e:dd:e2:15:69:81:e8:c6:05:1a:60:63:29:75:
9d:62:16:04:10:0b:0b:39:bb:18:ca:15:55:ae:74:
c0:23:b5:d1:3f:d5:ec:a5:e6:7c:f9:fb:d4:2e:b4:
b2:64:9a:33:7d:08:05:05:d9:77:a9:7a:c7:5f:dc:
82:f3:53:a7:bf:0f:96:97:dd:a8:6f:dd:9b:46:c4:
c6:2e:93:59:43:24:1f:b8:0f:12:fb:05:2f:d3:8c:
b3:ff:53:03:3a:bc:2a:ed:97:18:e3:fe:5f:8d:f3:
1f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:10:17:B8:94:90:91:D0:1A:35:0B:EA:EC:27:6D:D8:DE:6D:34:AF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/a20c2df9-68c3-3920-812e-1578e81c4ea6.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.crl
X509v3 Authority Key Identifier:
keyid:61:A2:CD:53:94:CD:6E:75:69:56:72:39:F6:0B:34:15:6C:1C:75:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8bd5bc1a-5f48-4ce7-b952-b94b8ece87ff.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7580:9::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
65:fc:d8:48:55:a1:45:cf:fb:ee:39:28:08:24:dc:a3:d7:e2:
01:6f:35:f2:30:5c:f5:ae:79:30:2f:98:16:c9:05:50:ff:e4:
94:c5:40:bf:44:b1:c1:6c:1d:13:4e:21:af:0b:a1:0b:65:fe:
46:f9:7e:77:31:42:f2:59:60:f6:7b:0f:17:78:66:3f:dc:6c:
d1:5f:26:dd:d0:f0:7d:68:d7:44:7c:0a:5f:8d:f5:43:ff:9b:
85:ad:cd:f8:2d:ba:05:45:8e:75:53:52:79:8e:7c:1c:cc:fd:
0b:9d:fe:a5:12:46:83:75:88:f7:13:33:88:b7:b1:10:a4:ba:
fb:7b:f1:2c:ac:67:b0:41:56:58:1a:38:48:cd:81:78:b2:11:
68:fa:26:f9:05:5c:cf:44:07:63:9a:bd:1d:ef:e2:8b:fd:21:
1d:d5:63:91:36:7b:f5:47:0f:dc:fc:da:b8:ea:0a:09:2e:1a:
97:61:3e:f8:67:ac:78:4a:7f:f1:bc:c5:4d:2d:4b:8a:9c:23:
2d:e3:93:70:44:b9:c4:d5:fe:98:35:4a:19:c8:7b:bf:94:b7:
1e:b6:17:36:28:17:14:54:43:92:5e:1c:1f:30:6f:e7:e5:4b:
d6:50:05:ca:eb:a9:29:21:91:a0:b9:1c:a2:bc:11:7b:29:39:
9d:d9:3d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:54:01 2026 by rpki-client