
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
File: 39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa (raw, json)
Hash identifier: 5RHfaWQ6ewf2SPBz5T4baLU1LekXOnK79brN+iKz3Lk=
Subject key identifier: 80:17:A5:13:A1:58:F0:6E:E5:5E:89:C5:F2:2F:D5:08:E6:82:A7:46
Certificate issuer: /CN=8e2da239-793e-4082-afde-6458f2319e7e
Certificate serial: 010D0C9F4328584CE4C770B0A7B8C7905DA60B00
Authority key identifier: B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
Signing time: Tue 17 Feb 2026 14:00:41 +0000
ROA not before: Tue 17 Feb 2026 14:00:41 +0000
ROA not after: Mon 18 May 2026 13:00:41 +0000
asID: 3754
IP address blocks: 2620:f::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 17:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:e4:c7:70:b0:a7:b8:c7:90:5d:a6:0b:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e2da239-793e-4082-afde-6458f2319e7e
Validity
Not Before: Feb 17 14:00:41 2026 GMT
Not After : May 18 13:00:41 2026 GMT
Subject: CN=0ef047f7-1739-42ef-b80d-8902fe9b801d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:33:cb:56:9d:e9:21:d8:0c:9b:86:0b:ec:f9:
8b:c3:87:ad:03:a4:48:a9:6f:27:38:38:b2:e1:1f:
4a:35:57:69:83:45:4d:7e:0a:b6:66:03:e4:b9:a1:
f2:9b:4a:06:c7:38:c8:d7:c5:bd:fc:c6:6c:9a:c4:
5e:5d:41:68:0b:32:e6:4f:23:8e:d3:b4:fc:01:4f:
d8:57:90:82:b8:ac:f3:0e:1a:dd:3b:96:26:e7:5a:
8f:35:bc:0f:34:8a:9d:d5:39:d8:c4:ba:32:8b:f2:
32:fe:0c:a0:41:b7:19:6e:b4:d1:05:e1:4a:04:9c:
1f:d1:4f:26:07:9c:6e:cb:8a:f0:b3:8d:69:fb:fe:
2e:a0:c0:b1:6a:e8:c7:7b:65:10:a0:b9:49:9e:cd:
34:c4:c8:af:8d:d9:ea:8b:14:3a:30:36:61:70:2b:
8d:91:9f:6b:3e:c8:03:10:df:cd:ba:2a:57:1d:7c:
73:5e:64:ba:81:c6:67:95:73:da:11:3a:8a:e8:5d:
ee:ef:dc:25:00:49:b0:d4:d7:99:60:0b:59:7b:f0:
79:78:a7:37:f9:62:4e:47:52:d3:e7:26:f3:cf:ba:
14:d2:06:d6:2a:40:14:5e:ff:74:b1:ed:2e:7d:df:
63:a0:c0:c6:2b:70:ce:3d:c5:f4:89:ee:01:07:d4:
73:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:17:A5:13:A1:58:F0:6E:E5:5E:89:C5:F2:2F:D5:08:E6:82:A7:46
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/39d8cebb-5e1b-34d7-9ea7-07b1c663d180.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e/8e2da239-793e-4082-afde-6458f2319e7e.crl
X509v3 Authority Key Identifier:
keyid:B6:1E:B0:C8:29:6F:59:D0:64:2B:44:2F:41:AC:38:58:E0:07:01:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/8e2da239-793e-4082-afde-6458f2319e7e.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:f::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
11:9a:42:85:d3:2e:fe:39:a8:9e:74:28:91:51:5e:f1:9c:30:
a7:ca:58:0a:47:9a:a5:31:9a:d3:2e:8a:0e:ea:87:16:14:05:
6b:e0:f2:f6:ef:34:96:0e:2e:7d:16:09:91:9e:52:bc:e5:cc:
c3:5f:fe:34:5e:cd:d2:cf:56:14:45:5a:80:de:7f:01:af:e1:
11:f5:02:df:1a:a5:55:a4:e0:54:04:ce:23:36:be:8c:61:a3:
3b:73:dc:9d:1f:df:68:6a:8d:95:bf:a7:16:7d:0f:84:aa:8a:
0e:df:1b:8a:e2:dd:ce:2e:b8:c6:6e:83:5d:20:67:5c:61:bb:
1f:c7:6a:31:06:5d:c9:46:2d:1f:83:b5:d9:29:76:1c:37:94:
6c:ce:e6:0d:0f:88:ba:52:32:8c:17:11:07:64:e8:d2:68:19:
d3:c7:9a:da:f9:0a:9b:0c:9b:1b:a8:49:8f:28:6d:54:d7:56:
92:ad:59:f1:80:1c:b3:77:d9:63:42:56:11:e5:fe:d9:59:15:
dd:af:f0:cb:42:59:1b:c5:4b:1f:87:04:f1:f3:14:85:78:c9:
00:f2:d2:1e:d2:fc:97:fb:2b:99:fc:fd:25:e4:17:35:af:d9:
3a:ee:fe:fa:09:88:70:05:12:93:27:aa:f8:95:76:63:22:d1:
26:6e:9a:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 13:51:52 2026 by rpki-client