
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
File: cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa (raw, json)
Hash identifier: zPSOfuykUS2gUbFmexGqpkPZ68wEtZ+xX70QOc4mSm0=
Subject key identifier: 90:D3:C0:71:21:10:29:E4:1F:FC:47:19:04:3B:41:17:D6:84:DD:EF
Certificate issuer: /CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Certificate serial: 010D0C9F4328584CB551D6DF1DF3D4B141C47100
Authority key identifier: 24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
Signing time: Sat 31 Jan 2026 14:00:39 +0000
ROA not before: Sat 31 Jan 2026 14:00:39 +0000
ROA not after: Fri 01 May 2026 13:00:39 +0000
asID: 14618
IP address blocks: 2606:7bc0:1060::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 11:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:b5:51:d6:df:1d:f3:d4:b1:41:c4:71:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=458edb4b-8474-44dc-8841-30a6c66f33d7
Validity
Not Before: Jan 31 14:00:39 2026 GMT
Not After : May 1 13:00:39 2026 GMT
Subject: CN=31089b1b-eb03-422e-8c53-d6e80c10462b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:53:cd:33:98:3f:c1:e4:6a:40:c5:e6:8c:3d:
76:f8:6a:fc:36:f4:19:91:04:87:a0:79:f3:59:83:
44:19:a1:7c:e5:01:ca:09:55:5c:d8:4b:88:ce:85:
61:35:fb:da:86:19:d8:cc:d5:68:0a:a6:3a:27:f6:
16:a2:41:e9:33:19:c6:2c:22:af:85:cd:ce:82:10:
63:08:91:46:a8:32:f6:51:e9:ad:ee:f6:84:13:63:
81:c1:cc:93:41:ec:b3:a0:3a:5c:09:64:a6:35:58:
b2:63:8e:af:00:ec:22:7a:52:35:d8:ba:53:0a:a5:
72:7e:8c:44:d3:95:4f:7b:78:5d:63:db:72:26:a9:
f6:96:97:09:8a:40:8e:1e:38:12:9a:e4:c4:71:65:
c8:ed:e7:d7:9f:ba:f7:33:cc:ee:27:7b:5c:0d:71:
f8:af:92:a1:ac:d0:01:8c:d2:ca:f9:df:26:85:9a:
a6:5a:34:e3:d4:55:9e:2c:51:5f:21:df:0c:21:9f:
39:dc:a6:f6:09:db:bf:2f:e8:46:8c:57:8b:07:6f:
66:de:e4:0c:37:85:f5:d1:be:a8:80:e9:e3:8c:66:
ef:22:43:79:b3:1c:7e:35:a5:34:09:f3:e4:49:f3:
c3:51:88:76:13:7b:6f:93:75:b2:10:49:53:24:b5:
78:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D3:C0:71:21:10:29:E4:1F:FC:47:19:04:3B:41:17:D6:84:DD:EF
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/cbfb1fb3-6662-3691-a60d-1e84526c4ea0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7/458edb4b-8474-44dc-8841-30a6c66f33d7.crl
X509v3 Authority Key Identifier:
keyid:24:52:F8:AD:49:BE:5B:52:B9:A6:FF:C2:41:29:91:3E:E7:CB:F1:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/458edb4b-8474-44dc-8841-30a6c66f33d7.cer
sbgp-ipAddrBlock: critical
IPv6:
2606:7bc0:1060::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
2b:be:88:79:65:b5:7f:64:56:2b:e4:6c:3a:8c:a8:34:95:75:
7c:87:6f:db:a6:3c:46:bb:6c:f0:43:20:00:a3:1d:cf:34:fc:
da:1f:fa:9a:8e:be:3b:48:fa:d2:75:2b:cc:a0:e6:f0:a7:a9:
1d:c8:a5:38:40:44:09:1a:85:84:fb:57:c3:96:11:66:c7:06:
85:90:46:ff:64:a6:12:84:8c:05:1e:72:2e:f1:09:28:85:14:
59:03:88:e6:c1:3c:18:c9:dc:a9:c5:66:26:4f:1e:29:f2:4d:
fd:91:c2:a1:df:de:14:81:b4:c9:50:03:a5:99:44:0e:86:9a:
49:36:98:cd:65:ec:23:d8:14:c6:4f:82:4d:5f:6f:4a:c3:a7:
11:72:c2:d6:4e:ca:08:77:82:27:b2:7d:75:c4:b6:ae:08:66:
61:c5:17:f9:6e:f8:0d:b3:96:9f:3b:35:ba:7d:64:0a:d6:f3:
c9:4b:2f:d2:18:97:d6:ce:f8:ed:6b:91:99:ba:3f:85:69:cc:
fe:ed:6e:ca:29:fe:d8:be:7e:f9:93:4f:05:d3:42:70:d6:86:
e0:73:1b:4a:d7:35:92:c0:e2:48:32:f8:e1:a5:91:e6:5c:3f:
02:c9:55:2e:ef:2f:4f:1c:b5:79:79:0b:df:fe:2d:e4:1a:1c:
72:3f:05:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:33:49 2026 by rpki-client