
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/60d6707d-305c-3a9f-9835-f680c5a9dfa3.roa
File: 60d6707d-305c-3a9f-9835-f680c5a9dfa3.roa (raw, json)
Hash identifier: cERsmAc7W/tcEk+Osu3/fJRbu2J7X0q+x541NHe1DDs=
Subject key identifier: D5:7D:DC:49:F2:E7:93:1B:F7:C1:DD:CE:EE:79:7D:02:83:A6:D6:FD
Certificate issuer: /CN=adff0409-d8b3-46fb-a7e7-b062e9eb9abc
Certificate serial: 010D0C9F4328584D44FA2F084146508D15253064
Authority key identifier: 61:5A:FA:16:90:2D:E0:2A:46:B6:5B:C2:47:D3:18:35:58:11:B0:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/60d6707d-305c-3a9f-9835-f680c5a9dfa3.roa
Signing time: Tue 24 Mar 2026 01:00:31 +0000
ROA not before: Tue 24 Mar 2026 01:00:31 +0000
ROA not after: Mon 22 Jun 2026 01:00:31 +0000
asID: 32478
IP address blocks: 2606:2d00::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:44:fa:2f:08:41:46:50:8d:15:25:30:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adff0409-d8b3-46fb-a7e7-b062e9eb9abc
Validity
Not Before: Mar 24 01:00:31 2026 GMT
Not After : Jun 22 01:00:31 2026 GMT
Subject: CN=843e48fb-33d6-41f4-a537-bb677185313c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:73:f6:57:b7:92:74:43:3c:8b:f7:f7:55:59:
4e:0a:ce:e5:3f:1b:9e:b4:c2:ae:33:33:92:d4:10:
d3:bc:08:66:cf:68:ad:28:9f:0f:ac:56:a8:a0:7e:
12:6b:c9:e3:ad:cd:bb:16:a0:0e:49:4c:24:3e:dd:
97:19:bb:a7:a1:cf:aa:55:69:db:3f:89:d9:b8:55:
d0:b1:ba:35:3a:59:ce:fa:30:a1:aa:a8:41:77:a8:
be:32:f3:9f:2c:36:1d:6d:f0:77:b9:e2:e2:a5:71:
f2:1a:32:56:6e:54:f6:5e:9a:35:eb:55:fd:bf:29:
87:8a:0f:78:85:24:a1:bc:43:57:12:e2:c5:3e:f6:
64:c7:43:a7:d7:b4:c1:11:78:1e:98:7c:90:4b:88:
35:70:a5:7e:83:6d:eb:26:07:b7:a7:aa:04:76:dc:
c6:99:6d:58:1d:81:ea:ec:51:64:3b:ec:9c:0d:24:
8e:98:17:76:82:dd:47:d6:be:e8:ff:c3:55:47:79:
1c:58:f3:95:00:2d:63:9d:31:be:d6:ec:81:61:58:
47:f1:42:f1:5a:49:fd:00:14:4d:b1:f1:43:e5:82:
d6:29:9f:40:0b:0e:20:15:65:5b:97:81:4a:76:a8:
14:70:0c:3d:c6:9f:c8:2e:1b:41:bb:8b:00:30:8a:
ed:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:7D:DC:49:F2:E7:93:1B:F7:C1:DD:CE:EE:79:7D:02:83:A6:D6:FD
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/60d6707d-305c-3a9f-9835-f680c5a9dfa3.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.crl
X509v3 Authority Key Identifier:
keyid:61:5A:FA:16:90:2D:E0:2A:46:B6:5B:C2:47:D3:18:35:58:11:B0:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/adff0409-d8b3-46fb-a7e7-b062e9eb9abc.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:2d00::/36
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
94:12:9e:cf:2c:aa:65:fe:82:71:6f:80:47:03:03:06:10:5a:
46:5e:35:16:af:9d:74:8e:de:62:91:83:fe:57:c2:d2:3f:8a:
f1:e8:f9:9c:36:db:82:7d:07:79:8d:31:3a:de:4f:d9:de:8c:
6e:98:d4:9f:a2:c1:85:e7:95:dd:63:3b:af:6e:9f:64:5e:04:
83:06:00:6c:62:28:d4:3b:5d:94:80:9f:1a:de:63:ec:df:a4:
44:82:35:2f:bc:c6:44:5f:37:52:4f:29:14:83:04:37:4e:6f:
50:f2:90:70:f9:8d:44:9d:94:c2:5f:c0:fb:0e:e5:f1:1e:9f:
37:d0:ef:77:00:d8:0d:90:97:3d:57:aa:47:05:4e:3c:ea:1e:
46:eb:6c:e5:76:d0:fe:60:1b:25:f7:37:60:90:50:4d:c4:16:
28:00:5c:88:ad:13:f4:da:93:92:36:f6:83:b9:64:96:42:d3:
40:14:0a:98:f4:ec:c4:e8:9e:eb:18:af:48:11:25:4c:8d:e7:
20:3e:04:b2:c3:d2:81:25:0e:92:47:f9:dd:05:f6:98:da:0d:
c3:57:58:28:ce:ae:b3:73:82:44:65:6f:ce:0e:52:2a:0e:22:
67:7c:01:bd:18:47:c0:87:7f:67:22:73:ec:b3:aa:26:bf:3d:
e8:9e:9e:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 13:11:09 2026 by rpki-client