
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4/ce58afd8-17c1-3a90-9933-da9959ecf387.roa
File: ce58afd8-17c1-3a90-9933-da9959ecf387.roa (raw, json)
Hash identifier: 3V1CbX4g+tMbk3onvTauIUjIvwgMGiHhpjaL8Yj418A=
Subject key identifier: C5:F3:FB:72:8E:F5:CF:CF:83:7A:56:08:72:C3:63:58:46:02:F1:F1
Certificate issuer: /CN=fdb8bd22-c292-4706-8c26-cc4ddfc91ed4
Certificate serial: 010D0C9F4328584D386A3DD0FC4009B8ADB5ED20
Authority key identifier: 82:A7:73:C0:BD:69:25:0F:6C:A8:CA:FD:39:1A:1D:ED:4A:A0:60:04
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4/ce58afd8-17c1-3a90-9933-da9959ecf387.roa
Signing time: Thu 19 Mar 2026 13:00:41 +0000
ROA not before: Thu 19 Mar 2026 13:00:41 +0000
ROA not after: Wed 17 Jun 2026 13:00:41 +0000
asID: 30208
IP address blocks: 2602:fa5f::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 27 Mar 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:38:6a:3d:d0:fc:40:09:b8:ad:b5:ed:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdb8bd22-c292-4706-8c26-cc4ddfc91ed4
Validity
Not Before: Mar 19 13:00:41 2026 GMT
Not After : Jun 17 13:00:41 2026 GMT
Subject: CN=3ebaba1b-f9d7-4954-8482-3795fc993cff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:e7:2c:aa:5f:fb:19:f9:69:bc:2c:de:24:31:
8c:6b:9b:5c:f8:2a:f5:08:20:c7:4c:59:90:17:1f:
a9:ee:86:80:cd:39:bf:9a:88:c0:58:e5:19:2e:b9:
2a:58:1f:68:e2:ba:10:9e:d9:04:8a:28:fd:be:9a:
de:03:18:e2:77:92:63:5d:ba:37:3b:c2:d0:88:0c:
f2:00:0e:0e:c2:6f:75:85:80:6f:c6:1f:c2:b0:3f:
4d:09:08:05:1c:06:92:2d:02:3c:53:70:73:cf:7d:
00:b8:1c:2a:ac:49:fa:11:79:32:2c:bd:fc:7c:0b:
41:a7:d8:57:df:9c:1b:33:f5:69:a2:12:20:16:31:
f0:5d:a8:18:07:7f:78:f4:bd:e2:0f:3c:0c:a3:42:
6b:c2:81:83:7e:66:f9:aa:19:fe:7d:8a:28:22:16:
04:8f:08:48:7a:c5:3d:6b:82:80:b2:be:61:cc:2f:
6b:06:4b:e6:f1:86:a0:94:31:b1:0f:2d:0d:0f:31:
08:23:48:fc:86:16:90:6a:ec:00:35:a5:03:50:6b:
4a:0d:78:c9:43:37:b3:db:d6:a2:47:d8:66:61:5d:
27:1c:60:47:75:59:ed:9f:d3:6a:48:3d:62:2f:b5:
06:3e:4f:9f:2f:6f:b6:30:44:36:46:82:40:87:f4:
16:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:F3:FB:72:8E:F5:CF:CF:83:7A:56:08:72:C3:63:58:46:02:F1:F1
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4/ce58afd8-17c1-3a90-9933-da9959ecf387.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4.crl
X509v3 Authority Key Identifier:
keyid:82:A7:73:C0:BD:69:25:0F:6C:A8:CA:FD:39:1A:1D:ED:4A:A0:60:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fdb8bd22-c292-4706-8c26-cc4ddfc91ed4.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fa5f::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
52:49:ab:99:39:b9:a1:38:01:2b:96:78:0d:d1:e7:35:33:dc:
a2:13:b0:7e:76:2f:bb:f9:97:3b:b2:de:ad:00:c0:1b:00:17:
62:8c:5c:d7:bf:7f:57:4f:ac:18:af:ec:b2:74:ed:3d:de:e4:
01:1a:d7:1c:44:97:dd:e2:2d:7f:7c:c8:22:38:a1:a9:e7:3b:
56:69:64:11:b3:cc:73:98:eb:c1:65:15:db:ef:e0:aa:c5:3f:
91:af:d2:77:2c:e3:16:05:8e:29:49:b9:e5:76:ac:78:2f:6d:
bc:3d:44:8e:ef:55:96:53:af:68:64:d7:fc:a6:73:de:28:40:
1c:d6:4b:f0:cb:cc:43:00:3b:84:71:60:4c:96:33:63:95:35:
c0:89:04:61:84:69:1f:85:9c:19:ff:c6:55:aa:af:d4:62:23:
7d:a0:af:ca:6f:b0:f2:c8:fd:de:36:d5:a3:a6:72:e6:ae:b2:
7c:68:70:83:76:24:ca:43:9a:f7:3a:76:a4:fd:09:80:a4:14:
5b:f6:09:b1:83:12:01:09:60:9b:18:42:08:bd:17:06:97:df:
fb:f9:59:62:e3:1f:c6:14:28:68:16:4a:3e:a5:3c:fb:70:5f:
66:1c:7c:0d:32:1c:57:17:ec:92:c0:a0:ec:27:ac:7f:ae:34:
12:5c:57:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 12:42:12 2026 by rpki-client