
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa
File: cc57b996-1472-3501-b7aa-16621af1a48c.roa (raw, json)
Hash identifier: i5bQwFMmUMe48rwx7Au1Ui/9+nkbezCN3w+JUC/h18M=
Subject key identifier: C6:D2:AE:20:12:B8:26:BD:1D:F3:4F:D4:83:3F:D1:C2:EB:52:4F:D5
Certificate issuer: /CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1
Certificate serial: 010D0C9F4328584D4D5A9B9A7AC60FF739062320
Authority key identifier: 03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa
Signing time: Fri 27 Mar 2026 01:00:31 +0000
ROA not before: Fri 27 Mar 2026 01:00:31 +0000
ROA not after: Thu 25 Jun 2026 01:00:31 +0000
asID: 393468
IP address blocks: 2620:135:f000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 28 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:4d:5a:9b:9a:7a:c6:0f:f7:39:06:23:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c6e98c6-c317-4bae-8a4b-23e26037e1f1
Validity
Not Before: Mar 27 01:00:31 2026 GMT
Not After : Jun 25 01:00:31 2026 GMT
Subject: CN=8d3032f2-20a8-4096-882c-a96e976fdcc9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:c7:b7:b6:48:06:f4:c2:a1:c6:2c:a1:c6:db:
dd:7c:ec:b0:ee:aa:0e:94:19:64:f8:28:0e:0f:2a:
18:dd:d2:83:15:ff:ae:52:c0:69:81:19:b0:70:08:
c0:2b:ef:00:7c:5c:63:cd:76:af:d1:a7:5d:7e:94:
19:a5:45:38:ad:3c:55:4c:e0:fa:3f:b6:c7:73:0f:
93:8d:af:63:62:bd:5e:9a:fb:34:4b:3f:f6:7e:13:
f4:47:08:43:8b:11:e8:20:98:7a:a6:b3:56:64:80:
ad:16:a9:32:d3:5b:f0:de:48:63:c5:ac:9d:f3:2b:
5f:44:1b:41:fa:c0:af:c7:61:11:54:c6:03:f1:36:
fc:17:85:75:d2:97:7f:7c:2f:aa:c7:df:22:30:c9:
5a:52:8a:fa:d5:d4:aa:dd:b1:6e:09:6a:5b:61:8f:
3c:87:4a:97:d5:50:6e:09:7b:da:bb:d1:2e:60:a3:
c0:2d:2a:40:75:97:75:f4:3f:15:68:1d:21:f7:d0:
4a:ba:f7:1e:e2:ff:fd:37:4a:de:6c:a8:c0:27:3f:
10:ef:e2:93:2f:f6:d0:20:24:7c:46:1d:95:3c:c4:
bd:f0:e8:9a:e5:ec:39:af:b9:98:46:2f:79:c2:06:
99:c9:4c:9b:28:c6:fc:23:1d:a9:a3:e5:6a:fc:94:
0b:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:D2:AE:20:12:B8:26:BD:1D:F3:4F:D4:83:3F:D1:C2:EB:52:4F:D5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/cc57b996-1472-3501-b7aa-16621af1a48c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.crl
X509v3 Authority Key Identifier:
keyid:03:E5:92:7A:88:59:9A:F7:18:56:4F:32:FC:04:9D:9D:6E:45:4A:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/1c6e98c6-c317-4bae-8a4b-23e26037e1f1.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:135:f000::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
34:bd:96:e8:47:0b:96:08:7a:8d:7b:39:f7:d4:b0:19:05:4e:
2e:b9:09:34:1b:33:f3:ed:e7:93:38:74:47:7e:23:68:36:b4:
a0:f6:3d:7b:94:d0:9b:8d:e9:45:72:db:0f:91:2e:d6:aa:80:
96:c0:51:ec:55:47:5a:80:6a:bb:a5:10:ff:86:e5:2d:73:12:
45:26:d6:f3:1f:e1:59:16:bd:68:11:e9:6f:42:93:01:01:72:
17:e4:ef:78:35:b3:ba:e3:7d:4b:22:78:9c:ae:7f:2c:fd:6e:
8b:13:8c:2b:af:96:07:8f:bd:91:c7:31:45:35:de:9a:71:22:
b0:30:2a:fb:5c:c5:5e:92:27:ff:27:31:f0:c0:e1:28:6d:35:
fc:41:c1:f0:d9:c8:ae:3a:75:3c:75:4b:91:20:ba:0c:f7:91:
25:16:4f:2d:7c:40:6b:da:cc:5f:c5:d2:f9:d5:9d:cf:ec:9a:
6f:d3:d5:9a:11:cb:dd:b9:d8:fe:87:00:af:06:22:4c:ea:c0:
07:aa:91:70:f1:d3:51:85:d4:30:5e:a8:b3:11:52:f9:c7:17:
8b:ae:1d:22:5f:ed:d0:91:f9:2a:54:ce:af:1d:a1:4e:7c:1e:
31:8b:be:d8:87:66:ce:90:84:0f:fa:83:27:76:48:a7:9d:26:
68:bc:6c:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 03:45:06 2026 by rpki-client