
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/f5555b4d-a956-333f-b992-e8607559231f.roa
File: f5555b4d-a956-333f-b992-e8607559231f.roa (raw, json)
Hash identifier: oKDSB4sb2uoC288WYWiBAOP2SLgR1HKLvTlOToSz+3I=
Subject key identifier: BA:D7:76:71:8A:54:2A:1F:FC:96:E3:A9:EE:27:D1:96:EB:AB:41:C0
Certificate issuer: /CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Certificate serial: 010D0C9F4328584D0EA7B47E69AA17787400B180
Authority key identifier: F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/f5555b4d-a956-333f-b992-e8607559231f.roa
Signing time: Wed 04 Mar 2026 14:00:41 +0000
ROA not before: Wed 04 Mar 2026 14:00:41 +0000
ROA not after: Tue 02 Jun 2026 13:00:41 +0000
asID: 63141
IP address blocks: 2620:11b:9000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 15:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:0e:a7:b4:7e:69:aa:17:78:74:00:b1:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c98136f0-3efc-4dfb-a3fe-596d9a8df01a
Validity
Not Before: Mar 4 14:00:41 2026 GMT
Not After : Jun 2 13:00:41 2026 GMT
Subject: CN=4de9bfde-40c6-45c8-81bd-510c3f6eeb19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:1e:a9:1b:7c:c3:97:42:4e:3b:e5:d1:fa:7c:
22:9b:88:38:44:b9:fd:7f:3d:f4:72:20:a3:9e:58:
45:e7:61:fe:40:d6:00:a3:e0:eb:48:bf:16:98:ce:
79:d8:a4:ad:6d:94:4b:a8:4e:9a:8b:20:c2:9e:85:
82:14:42:97:ba:b3:ec:e9:03:a1:ff:d0:47:f5:75:
5a:9b:62:73:80:82:4c:f6:3d:e3:6e:34:30:39:09:
95:1c:cb:b2:da:8e:73:f7:da:2c:9c:f5:46:4e:df:
f2:f4:82:69:56:7d:b1:39:7c:ea:e2:a6:9e:6f:e9:
88:83:26:d7:b0:36:32:30:1d:d3:1b:08:f3:ed:aa:
86:83:73:87:9b:e5:2e:18:bd:41:6b:96:c4:66:c2:
c9:32:0b:8c:06:24:11:c6:2a:65:a1:1e:3f:ea:37:
29:1f:f9:cc:b0:dd:2e:53:d1:c8:01:51:4a:17:5d:
f8:f1:03:25:be:ad:97:9d:2d:2f:d4:bc:f0:f2:47:
dc:93:23:eb:60:4c:68:28:82:8c:73:c1:57:3f:6b:
86:45:8b:fe:62:f3:5d:23:38:e7:e0:c7:cf:29:8d:
ae:de:d0:97:af:13:66:f3:40:2b:8a:d2:11:9b:f5:
53:ac:21:bc:24:68:b8:72:06:f5:f0:c4:47:28:5f:
b9:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:D7:76:71:8A:54:2A:1F:FC:96:E3:A9:EE:27:D1:96:EB:AB:41:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/f5555b4d-a956-333f-b992-e8607559231f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.crl
X509v3 Authority Key Identifier:
keyid:F9:A6:75:02:28:D4:3A:8D:33:46:9E:1C:BC:95:0E:36:D7:3B:3E:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c98136f0-3efc-4dfb-a3fe-596d9a8df01a.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:11b:9000::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
67:aa:e2:e9:d3:40:e3:54:8a:2c:46:37:cd:2f:2d:f3:de:e8:
a8:f4:48:4a:90:30:1f:e1:45:77:64:00:41:f7:15:4e:b3:f4:
9a:0b:83:49:76:73:d1:03:48:9c:3f:be:2f:69:f5:79:01:68:
40:3a:35:8b:a0:98:68:ba:44:7b:58:3d:40:ae:63:ff:e3:db:
63:e4:39:18:9c:a0:08:0d:12:b2:f6:ef:ad:77:1b:a3:b9:dd:
ea:0c:05:3a:cf:aa:3d:e3:b7:2a:50:c5:7b:98:63:8d:38:d9:
be:cc:95:6a:a7:42:64:0d:32:30:d6:91:7b:7f:0d:fd:5b:56:
0c:e0:e2:be:ac:d4:8b:eb:76:9e:16:55:b5:8d:4e:dd:e4:49:
78:07:0f:b9:f9:9a:69:d8:44:0e:29:0c:a9:9f:c0:ba:ca:02:
29:ac:06:d9:1e:64:72:27:17:fb:87:7a:01:b6:47:c7:04:a1:
10:b5:21:d3:6a:55:da:e3:1d:0d:45:7f:1a:3f:49:ea:4d:d9:
9d:1c:31:04:f6:c2:ac:7e:87:6c:e8:e7:26:54:74:82:6c:b6:
68:bb:19:74:8d:10:78:f6:69:9f:f0:6f:37:ff:ed:28:e1:0f:
36:29:09:ff:59:79:7e:f0:eb:f8:41:1a:03:8b:36:af:45:df:
50:05:63:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:20:34 2026 by rpki-client