
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa
File: 89d495fd-c6b7-3f8c-8100-290c9bcef233.roa (raw, json)
Hash identifier: TyrI8M/1z0YhB0ieluoVj4rebTS04Kf061E58UCJJWY=
Subject key identifier: 22:A1:4C:25:9A:8A:6C:2F:28:64:75:48:DC:FF:D8:FD:70:EC:75:DB
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D1F4A173837F049051334EA80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa
Signing time: Tue 10 Mar 2026 13:00:41 +0000
ROA not before: Tue 10 Mar 2026 13:00:41 +0000
ROA not after: Mon 08 Jun 2026 13:00:41 +0000
asID: 6167
IP address blocks: 2600:1009:a128::/45 maxlen: 45
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1f:4a:17:38:37:f0:49:05:13:34:ea:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Mar 10 13:00:41 2026 GMT
Not After : Jun 8 13:00:41 2026 GMT
Subject: CN=20ba838c-a2eb-4479-a1ce-ca8c2f08680b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:e9:31:4d:c5:d5:d5:40:03:0d:22:c9:5c:aa:
24:ff:43:1a:ea:df:27:83:d6:40:8e:de:02:cb:7d:
17:28:79:df:e7:cb:bb:2f:a0:4f:d7:05:8d:79:2f:
7a:55:c9:e1:03:9d:87:93:2d:05:d2:1f:01:d1:b2:
ff:4c:6e:e3:ff:d0:f0:c3:3a:b3:23:01:a9:6e:8d:
18:7a:62:d6:05:e3:99:cd:eb:50:1b:d3:21:8d:23:
85:66:5e:59:82:8a:7c:49:9a:84:38:86:0f:dc:51:
a4:ff:57:2c:ad:9e:71:96:01:d7:89:de:ad:4f:ec:
1a:ec:05:bf:33:f5:bb:29:84:2d:dc:7e:59:22:f3:
38:20:59:4f:85:ed:39:e1:f7:04:60:8a:8b:1e:2e:
94:12:08:9e:74:f8:9c:a0:d5:d7:54:23:25:0a:74:
78:a5:e6:56:da:2f:8f:3a:8a:28:3e:ab:16:bb:17:
67:97:39:4e:59:93:51:2b:be:0f:31:f4:72:ef:49:
d8:f4:eb:13:fa:eb:1d:10:32:26:4f:6a:de:0e:59:
f8:ba:13:07:58:43:bb:ba:2a:8c:28:b5:c6:0e:af:
43:c9:43:3e:06:67:a6:40:91:82:1e:a6:2f:fd:5a:
cd:4a:3a:18:85:b6:ee:7e:21:61:7a:06:fb:9d:46:
33:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:A1:4C:25:9A:8A:6C:2F:28:64:75:48:DC:FF:D8:FD:70:EC:75:DB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/89d495fd-c6b7-3f8c-8100-290c9bcef233.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1009:a128::/45
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
80:04:f7:90:4e:ca:f1:1b:25:bb:37:1f:96:44:87:97:eb:b3:
39:d4:34:36:45:94:80:22:a7:ee:48:de:40:5c:f8:8f:01:26:
f4:7a:91:e2:56:c9:6d:63:cc:35:8d:ad:b5:12:0b:84:0c:d0:
21:fd:03:76:2a:10:a7:b0:7c:6e:78:7c:df:1a:1c:7f:91:d5:
f0:7a:cc:ee:29:48:94:01:c7:3d:8f:69:fa:eb:0b:bf:cd:09:
9c:39:67:0a:0a:7d:e2:89:2e:8c:e6:90:6b:bc:5f:06:db:1e:
42:86:ad:01:07:ef:26:b6:b6:ea:7a:69:80:b8:71:1d:c7:6e:
35:10:51:ae:7e:ed:d4:92:15:cf:5e:10:a1:d1:b4:09:c0:ab:
f5:91:71:20:04:d3:80:33:87:b6:c7:c1:f9:8d:de:db:09:9b:
cc:d1:83:da:1e:97:92:98:1e:a9:4e:d0:21:d2:11:c6:72:3f:
f4:2c:1e:11:fa:a9:9e:43:e9:6a:fc:8c:18:ea:1a:83:30:d6:
d7:85:2e:c4:4f:6c:de:00:5d:e5:63:cc:ad:a7:84:4d:78:f5:
68:e4:bf:76:af:3c:14:80:4a:16:e6:bb:68:b1:4f:9d:8a:70:
bd:c3:1d:3d:21:40:3d:84:0c:d9:cb:51:6a:35:11:ec:25:34:
6c:d4:29:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:57:09 2026 by rpki-client