
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa
File: 844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa (raw, json)
Hash identifier: QKIR+45nxzTMiNgUOdTAyWV+ZhH6dK1Mh3IyHIPSE5k=
Subject key identifier: 63:23:13:6B:BA:AA:FD:6C:B0:1F:28:2B:06:7E:BD:D4:45:B4:19:1F
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584DDA55BF5028F2B4DFEBBA5D80
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa
Signing time: Sat 16 May 2026 13:00:31 +0000
ROA not before: Sat 16 May 2026 13:00:31 +0000
ROA not after: Fri 14 Aug 2026 13:00:31 +0000
asID: 30036
IP address blocks: 2604:2d81:8000::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:da:55:bf:50:28:f2:b4:df:eb:ba:5d:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: May 16 13:00:31 2026 GMT
Not After : Aug 14 13:00:31 2026 GMT
Subject: CN=a453c392-fee8-4359-9e30-7a378d8215ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:47:03:dc:01:b0:58:3a:70:90:f9:62:2c:4f:
27:68:16:6a:bb:72:44:e7:cc:96:a4:af:6a:66:e7:
ff:3d:d0:de:44:fe:bf:62:77:8f:ef:fa:e6:2b:67:
ce:38:33:d9:70:7a:61:f2:2e:0a:de:54:5c:33:df:
b8:0e:67:e2:53:13:80:94:bb:bd:f5:7d:cc:66:87:
88:0f:a3:61:37:6e:7c:7a:db:ef:75:8f:21:51:ce:
46:15:7c:7b:8b:cc:61:c1:44:ee:ff:c4:d5:ab:9a:
30:9f:25:47:b0:57:89:3d:78:10:56:e0:77:39:14:
aa:de:b3:55:90:03:72:01:f5:80:a4:f1:92:c2:25:
7e:dc:2a:28:2c:d3:50:23:95:7e:66:0e:a1:82:e4:
60:3d:f3:67:04:18:84:b3:e0:62:75:bc:53:d2:dc:
be:79:1c:b7:17:43:12:1b:11:55:7c:00:e2:9e:2a:
ff:5b:a4:25:59:22:bd:09:0f:1e:a2:d1:38:51:7e:
f5:bc:9d:e7:74:3f:6b:fc:30:2f:c3:64:40:77:4e:
56:78:4a:cb:b6:ef:dc:50:1c:3c:2a:72:d8:9a:8c:
62:cb:b3:70:df:19:c1:fb:c7:91:88:a4:92:69:63:
22:1e:fb:e0:aa:d8:f7:ac:f2:c7:10:0a:71:51:ea:
d8:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:23:13:6B:BA:AA:FD:6C:B0:1F:28:2B:06:7E:BD:D4:45:B4:19:1F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/844e3e07-672b-3fb9-9d9a-4d371b0fa180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d81:8000::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
47:c3:36:03:4a:d5:01:07:9f:57:d9:78:72:89:2f:7c:cc:c4:
ca:d7:6d:11:dc:25:09:7f:ef:9e:b0:07:fa:08:98:2b:84:a6:
b5:b3:89:19:44:76:28:ae:ec:51:c1:72:9c:a1:6c:8c:ea:c7:
95:94:8f:d1:f6:8c:39:8c:35:1d:b7:14:2e:7b:71:e5:36:e4:
88:34:ad:fb:69:7b:37:9a:d9:5f:09:08:1d:b3:7c:6d:92:ff:
a3:d6:a3:9f:a4:3c:34:f0:5b:77:af:a4:61:eb:8c:0a:b2:ee:
08:02:62:ff:14:75:dd:77:12:34:28:be:6d:cf:bb:1a:29:c9:
c8:f5:dd:0d:f3:7d:83:47:7f:ae:4e:4a:11:d5:d2:fb:2f:d3:
04:82:42:fb:8e:91:6e:a0:a2:d9:f6:ce:49:67:a3:d8:fb:fc:
3b:72:b8:07:77:b5:72:00:7f:6a:73:03:9d:4a:9d:5e:59:ee:
ff:a3:12:eb:fb:48:ea:c2:cf:c0:d0:54:e8:54:1a:13:e2:f8:
09:72:cb:6e:b8:18:b1:8d:f7:34:d0:41:17:65:3b:24:ee:69:
eb:db:6d:00:80:2a:c6:44:68:03:08:0b:44:06:ac:cd:42:bc:
8c:0c:a4:42:ac:78:89:94:b9:3f:8d:de:68:48:07:7e:c2:a8:
27:d3:d2:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 17:11:53 2026 by rpki-client