
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/1c4f0b49-777b-3502-86d1-1fe048bd7975.roa
File: 1c4f0b49-777b-3502-86d1-1fe048bd7975.roa (raw, json)
Hash identifier: 0FNxz7j+jWQYTxJup7K+PNNmqqTqgU6e/GLiqKE+zLo=
Subject key identifier: AD:49:9E:10:08:D5:43:F5:56:89:3F:77:81:1C:D4:A8:BD:5C:41:3E
Certificate issuer: /CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Certificate serial: 010D0C9F4328584D98BAAC7F193E6C3A02C03680
Authority key identifier: B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/1c4f0b49-777b-3502-86d1-1fe048bd7975.roa
Signing time: Thu 23 Apr 2026 01:00:24 +0000
ROA not before: Thu 23 Apr 2026 01:00:24 +0000
ROA not after: Wed 22 Jul 2026 01:00:24 +0000
asID: 31799
IP address blocks: 2620:13f:b000::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Thu 14 May 2026 18:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:98:ba:ac:7f:19:3e:6c:3a:02:c0:36:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97e60b77-17e3-4250-9bc8-b5e7664a320a
Validity
Not Before: Apr 23 01:00:24 2026 GMT
Not After : Jul 22 01:00:24 2026 GMT
Subject: CN=4cbd8490-7c43-4d54-82cf-7fe0c4b7722e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:51:05:dd:8b:bd:98:4c:21:d5:32:bf:4c:3c:
d1:75:0a:46:bf:84:42:e5:25:db:3c:b7:25:b8:d6:
72:89:97:af:be:69:d1:5f:dc:9d:e1:d7:eb:45:75:
e2:fb:c9:4c:82:b8:1d:9d:3d:7b:e0:1d:b8:ca:13:
49:e0:2a:7a:59:4e:94:ef:46:33:b3:79:3a:ba:65:
9a:21:5c:ad:34:c2:ce:11:09:ea:a0:fa:6f:e0:e0:
72:25:18:c1:e8:e6:02:c1:35:03:f7:89:05:02:f8:
f2:47:32:e4:30:b1:e0:e2:30:8a:b2:f1:26:9f:61:
fb:cd:01:da:fc:4a:75:18:2e:7d:17:e7:a5:59:fc:
68:20:d1:ec:3e:b4:8d:b4:17:f0:6b:14:0e:e4:4e:
0c:1a:c5:5f:34:65:ba:0f:de:be:9e:d9:5c:b7:1d:
7e:62:cd:65:7e:e4:9d:d5:00:e3:09:a6:d6:50:07:
3a:f3:d9:2a:15:a9:af:b9:b0:1e:6e:f2:f8:ff:b0:
db:9b:d3:43:db:52:e9:af:92:83:b5:d7:7f:f8:ba:
e9:95:30:ac:7f:a6:7e:12:6b:a2:d2:23:ad:6c:94:
9d:ac:73:c2:09:be:c4:1c:a0:db:59:5b:16:b5:7a:
6e:6d:ef:ca:54:23:7c:03:4b:6f:17:5e:dc:ff:66:
27:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:49:9E:10:08:D5:43:F5:56:89:3F:77:81:1C:D4:A8:BD:5C:41:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/1c4f0b49-777b-3502-86d1-1fe048bd7975.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a/97e60b77-17e3-4250-9bc8-b5e7664a320a.crl
X509v3 Authority Key Identifier:
keyid:B8:3C:8A:BE:AA:A4:F3:7E:DF:5D:15:2A:04:3A:ED:6C:A1:84:B6:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/97e60b77-17e3-4250-9bc8-b5e7664a320a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:13f:b000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
60:3c:f3:89:44:d3:f2:a0:08:99:06:2f:98:8a:fd:6f:c2:a4:
b2:a9:94:8e:1d:ff:79:24:b5:03:60:af:39:2b:ef:15:b6:d2:
c7:68:8d:ef:f4:05:67:d8:e6:b2:ae:27:03:bb:c7:05:06:a6:
92:82:a2:2a:72:9c:a6:eb:0b:5f:1d:df:6c:95:98:92:8d:02:
d2:e7:05:22:f0:03:19:c8:ca:b0:ac:d5:df:2e:a6:b4:3f:f8:
31:03:14:cb:fd:8a:f4:37:68:a6:17:b8:83:74:d5:f2:5e:1b:
bf:1e:d5:d3:f2:7c:04:31:d7:60:c4:d7:3f:f8:ca:da:6d:32:
f4:0d:63:1c:d6:e0:ac:fd:cb:9b:12:0c:c4:04:9b:4d:93:7a:
fe:f2:15:01:3c:84:cd:73:0e:34:0f:d1:ac:25:de:6e:eb:33:
0e:39:a4:96:38:a7:ba:31:48:71:1e:66:15:0c:c7:11:33:ff:
00:6f:f7:3d:de:f6:db:a4:51:5d:d4:79:dd:a7:f7:82:c4:bf:
a0:4f:a1:a4:45:fa:74:94:ec:b7:39:9b:dd:62:80:00:70:65:
96:05:c0:ee:47:17:6b:88:17:a3:69:d7:ba:f3:db:08:63:14:
2b:5a:00:cd:48:89:3c:fd:b4:79:5e:c1:be:69:3d:84:eb:dd:
76:d9:dc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 19:07:34 2026 by rpki-client