
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9bbbe6-62ad-3008-a915-e3486f5574f7.roa
File: 0c9bbbe6-62ad-3008-a915-e3486f5574f7.roa (raw, json)
Hash identifier: DULxhIuF1bisDMmY+DPfY6RDxHZ9/HgaE14D1VdEpZ4=
Subject key identifier: AB:03:10:73:C6:72:AC:F7:D6:32:2F:62:2A:E0:2F:14:E7:C8:B9:1D
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584DF7A5E28A0167C0ED30293480
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9bbbe6-62ad-3008-a915-e3486f5574f7.roa
Signing time: Wed 27 May 2026 01:00:14 +0000
ROA not before: Wed 27 May 2026 01:00:14 +0000
ROA not after: Tue 25 Aug 2026 01:00:14 +0000
asID: 30036
IP address blocks: 2604:2d80:7e80::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:f7:a5:e2:8a:01:67:c0:ed:30:29:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 27 01:00:14 2026 GMT
Not After : Aug 25 01:00:14 2026 GMT
Subject: CN=28ebdb0b-14db-41ec-8ef8-792f30cf3c34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:f9:bc:8a:3f:1f:b6:c2:4c:c9:5d:5a:8b:0f:
1b:d0:74:09:45:6a:39:ec:ac:9a:57:23:ef:ec:13:
95:b7:38:f4:cc:39:de:bc:24:2e:00:df:00:b2:3c:
40:fa:57:05:77:3f:88:e9:17:e9:fc:7e:05:14:fa:
87:06:9a:ae:d8:01:96:b5:f5:2d:e1:7e:5b:cb:60:
90:08:9a:9f:ee:dd:3f:2c:70:32:07:25:ff:e8:69:
97:2c:7f:58:35:fb:0b:23:e7:4a:1c:af:1f:95:ee:
ac:ac:92:87:7f:bb:a7:72:15:3f:ab:28:be:0c:ec:
6a:13:95:9d:6e:33:77:9b:a2:42:a9:ba:95:4d:18:
7f:7f:1f:6f:44:62:4b:c8:e8:74:3b:99:7e:88:bb:
fe:4d:3c:cb:2d:7c:05:87:c3:98:f3:f8:61:0f:7b:
48:64:47:d5:3d:8a:35:d2:10:b4:9b:74:e0:85:3e:
81:9b:1c:70:8c:21:a5:f9:a2:92:ad:ee:b1:75:aa:
13:4a:fd:a1:15:13:99:5e:9b:59:bc:2f:6c:a7:74:
94:4d:f8:0d:be:b2:4f:e7:46:b3:a4:5d:5e:79:bd:
6e:ff:74:38:66:f8:50:49:7e:49:bd:f1:5d:e3:8d:
6a:57:95:0b:ef:84:d4:21:36:76:40:d1:55:a2:a7:
c7:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:03:10:73:C6:72:AC:F7:D6:32:2F:62:2A:E0:2F:14:E7:C8:B9:1D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/0c9bbbe6-62ad-3008-a915-e3486f5574f7.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:7e80::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
04:87:1a:fe:06:58:71:fd:6c:0c:30:10:9b:90:2d:75:9e:9a:
9b:22:96:9e:29:1a:5e:38:cf:8d:af:84:eb:10:d8:d4:40:ff:
57:d8:5c:20:ec:37:40:8f:5e:47:67:53:7a:9f:1a:9b:a8:bb:
fe:88:39:a5:35:02:ad:7b:d8:f4:ca:01:54:52:a2:cd:80:a4:
63:0b:de:30:27:90:b2:12:8e:20:ee:45:53:92:09:ee:e4:50:
b6:29:10:f4:84:3c:21:d0:d2:52:66:ff:21:cd:38:2c:34:8f:
3a:69:87:fd:03:7e:60:e3:2b:64:0e:e0:7a:f6:a2:02:67:ae:
3c:cd:1b:cc:77:e7:73:d6:06:df:f8:05:4d:c1:46:83:0d:f1:
17:fd:c8:04:ae:e9:e5:a6:35:a4:75:b7:78:0b:dc:2b:4a:43:
34:af:75:3c:d9:f3:c3:bc:94:aa:48:25:06:e4:70:57:33:39:
0b:7b:c3:46:50:bb:25:6a:27:be:c8:a7:81:8a:14:32:5f:1b:
fa:14:c3:ff:0e:5d:6c:cc:38:59:db:77:d5:50:c8:dc:47:14:
d0:58:91:f4:45:eb:25:83:a8:48:3e:c5:38:dd:58:b8:8a:cf:
29:ac:03:f0:86:76:a4:3f:b0:e5:67:c4:61:08:fb:54:e8:da:
15:c4:c5:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 18:03:03 2026 by rpki-client