
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60cf2fcb-d647-3a26-87f8-e46f24e68572.roa
File: 60cf2fcb-d647-3a26-87f8-e46f24e68572.roa (raw, json)
Hash identifier: YF/KU3kIotySECRFFGQzJB+opWlfsVeKcJlhVC3eUDI=
Subject key identifier: 75:7E:E7:0C:0B:C1:74:20:16:15:9D:17:D4:25:64:3E:F1:63:55:86
Certificate issuer: /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial: 010D0C9F4328584D237A5F5023639292872B0700
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60cf2fcb-d647-3a26-87f8-e46f24e68572.roa
Signing time: Thu 12 Mar 2026 01:00:32 +0000
ROA not before: Thu 12 Mar 2026 01:00:32 +0000
ROA not after: Wed 10 Jun 2026 01:00:32 +0000
asID: 207266
IP address blocks: 2001:500:41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:23:7a:5f:50:23:63:92:92:87:2b:07:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
Validity
Not Before: Mar 12 01:00:32 2026 GMT
Not After : Jun 10 01:00:32 2026 GMT
Subject: CN=2ad77f7c-cf34-4025-b10f-7f7681139bbd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:6a:e0:95:58:da:45:71:69:b5:35:ba:66:57:
42:42:0b:48:b5:63:ab:09:b9:2f:b6:37:0c:da:1a:
fd:f2:ec:07:6e:84:dd:69:3e:36:d3:46:7b:80:73:
08:94:e4:a6:a2:14:af:05:ed:8b:9e:db:25:5d:77:
0e:34:02:cb:ba:87:78:2b:44:e2:8b:5f:36:36:39:
cd:d0:d6:db:dd:bb:e4:06:68:0e:4b:7d:a1:a6:09:
cd:8d:44:78:46:bf:f9:3b:73:18:79:b4:af:fe:89:
54:23:53:c2:e9:8e:ba:03:20:a0:dc:9b:1a:b7:fd:
db:34:1f:d4:f6:5b:19:86:b3:a9:68:82:fb:b6:42:
a1:29:ce:97:7d:39:c9:52:34:92:ab:b0:5d:12:a4:
81:3e:ef:68:87:ff:5e:ba:8b:c6:4d:3e:99:98:51:
71:3d:70:dd:14:9d:94:ec:00:0b:7c:81:1b:02:ad:
56:b0:77:48:f6:96:65:de:54:11:4d:11:a6:c6:a1:
5c:9a:9e:c0:17:a5:61:2b:53:fe:44:d8:49:a9:8e:
5e:48:a7:f9:1b:bd:89:c6:05:61:ae:58:21:40:e4:
3f:e9:90:c5:fb:ed:9d:97:79:5b:70:89:23:75:dc:
08:34:fa:bf:06:77:51:3b:7f:35:10:78:cc:1e:5f:
72:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:7E:E7:0C:0B:C1:74:20:16:15:9D:17:D4:25:64:3E:F1:63:55:86
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/60cf2fcb-d647-3a26-87f8-e46f24e68572.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
X509v3 Authority Key Identifier:
keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
sbgp-ipAddrBlock: critical
IPv6:
2001:500:41::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
30:44:83:0f:2c:fa:aa:ed:6c:52:1c:0c:a5:1a:35:c5:d5:87:
31:d5:75:2f:fc:80:51:4b:07:c3:5d:2a:dc:fd:b4:8d:64:42:
1e:17:6b:1e:70:4e:c4:fd:0e:4d:7b:4d:f9:4f:59:ac:b8:4b:
fa:14:12:34:02:d9:5b:57:c7:05:10:02:c3:c4:9a:ea:d3:d0:
34:70:03:4e:64:55:2e:2c:43:61:68:e9:d5:28:54:f8:99:f9:
4d:b5:ce:db:5b:9d:10:9c:85:d3:31:67:3a:55:d9:bc:5b:44:
5e:9a:a2:5d:9a:90:e2:c0:e4:f5:62:c2:36:2f:9f:27:bf:0b:
b8:88:bc:ad:97:a9:dd:ca:65:2a:82:06:e8:d1:8c:2b:41:22:
3b:3b:b7:d3:e0:01:e3:41:66:82:fc:aa:10:16:1c:57:86:9f:
d6:14:56:f1:e0:4f:3e:3a:14:37:2d:84:ee:0d:a0:a2:e4:1e:
d3:56:2b:d1:c7:a5:67:85:f3:5b:f5:93:05:e5:b1:8c:d2:a6:
3e:ca:4d:74:31:eb:f2:bb:4f:c3:77:45:91:39:4a:48:35:eb:
34:26:85:99:7e:f6:76:b3:a9:4c:e8:ea:71:b0:c6:bd:3b:fb:
2e:10:64:16:c4:67:66:f7:3f:5e:d4:8e:48:c1:69:cd:29:aa:
27:9c:ad:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 04:15:07 2026 by rpki-client