
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3d8fee9-c846-3939-93da-e4b162d9ec26.roa
File: a3d8fee9-c846-3939-93da-e4b162d9ec26.roa (raw, json)
Hash identifier: NcrbZDUC+pEyV3i7HXBQjZ8v5vlImGojnNKyEjWYPKM=
Subject key identifier: D3:F9:D8:86:F4:6F:AD:3A:6A:3F:A0:A7:40:D5:9C:F9:69:CA:BD:C0
Certificate issuer: /CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Certificate serial: 010D0C9F4328584CF5879A5CF4916E547140CB00
Authority key identifier: 29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3d8fee9-c846-3939-93da-e4b162d9ec26.roa
Signing time: Mon 23 Feb 2026 14:00:41 +0000
ROA not before: Mon 23 Feb 2026 14:00:41 +0000
ROA not after: Sun 24 May 2026 13:00:41 +0000
asID: 11055
IP address blocks: 2604:7a00:ff83::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Mon 02 Mar 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4c:f5:87:9a:5c:f4:91:6e:54:71:40:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e463b2c-538a-4f93-bfa3-fe1643a77085
Validity
Not Before: Feb 23 14:00:41 2026 GMT
Not After : May 24 13:00:41 2026 GMT
Subject: CN=3390b215-4ce2-4e8e-a2cf-a11ab0a0e61f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:83:00:47:17:ed:e6:8e:48:0b:cc:43:42:63:65:
a5:40:44:93:f3:33:41:09:c4:aa:21:56:6b:1a:4e:
7b:b3:d5:42:e8:55:9c:1c:1a:7b:51:61:74:01:3f:
0f:ca:b3:c8:31:e1:c2:d9:91:5c:50:86:ef:62:0e:
12:65:65:3e:5e:76:f9:ee:96:70:ac:44:4c:73:4e:
aa:91:0f:72:b9:af:3d:97:8a:c2:0d:34:f6:0a:59:
75:47:cf:c4:00:ce:27:38:36:9e:48:f1:08:42:3e:
d0:a7:ef:1b:b9:e7:48:9e:99:6c:b8:bf:2b:56:8b:
84:23:16:14:e2:55:c4:f7:e8:9d:c4:08:f8:ae:03:
9d:ed:18:71:0e:8d:43:72:5b:c6:25:7b:f0:d3:d0:
89:14:6e:4f:b5:ae:9a:16:23:b0:c8:1c:d6:84:05:
10:d7:ae:a8:34:1a:a0:6c:41:8f:5a:43:08:f3:84:
a2:20:4d:d1:48:5b:a7:ec:15:3a:e5:a2:59:08:ef:
f0:57:6a:ea:ed:fb:e1:3b:c1:93:35:99:f3:ce:c5:
1a:d8:88:47:b0:e7:a5:a2:5e:db:04:cd:1d:38:e0:
8d:bb:a5:c0:97:50:5a:f1:0d:7f:de:ce:cf:ca:b8:
e8:1e:26:45:5e:94:0e:8d:58:83:d4:8c:e6:99:a9:
dd:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:F9:D8:86:F4:6F:AD:3A:6A:3F:A0:A7:40:D5:9C:F9:69:CA:BD:C0
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/a3d8fee9-c846-3939-93da-e4b162d9ec26.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085/7e463b2c-538a-4f93-bfa3-fe1643a77085.crl
X509v3 Authority Key Identifier:
keyid:29:30:ED:0F:85:A6:01:7A:2F:42:BD:40:9C:E0:C7:90:94:14:17:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7e463b2c-538a-4f93-bfa3-fe1643a77085.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:7a00:ff83::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7a:79:b4:4c:f4:e5:70:6d:93:af:1e:5e:7f:dd:56:b5:4e:bc:
72:d8:88:fa:1d:47:59:0b:8b:a3:9b:25:17:87:95:a6:ec:cc:
2b:78:d5:94:4d:cb:87:75:99:4a:4b:b7:e7:c1:93:94:09:6f:
eb:ba:ec:42:d0:6f:bd:83:22:82:9f:2c:3d:89:c1:13:04:62:
e4:d1:bc:b8:ae:5f:ac:03:19:77:30:b6:fc:ce:9d:e8:c6:33:
77:d6:90:79:80:27:92:b1:5c:be:2a:1f:38:1e:8f:da:d7:46:
55:f0:14:45:07:56:93:bc:2c:91:e7:af:64:47:89:df:d2:99:
2d:67:ba:dc:29:cf:13:49:61:9a:34:b5:91:e0:b9:a8:b5:ea:
81:d4:37:b4:2a:77:cd:1c:5e:b0:c2:2a:1e:c1:a2:85:7a:bf:
b7:4d:d4:98:44:1e:8c:01:16:53:c2:3f:db:c9:0a:9e:c8:bb:
e9:df:53:b9:1a:7d:2e:d0:a2:cf:8a:19:eb:36:9a:cc:6b:51:
06:c6:5f:a0:00:84:15:56:2c:79:81:b3:df:bf:65:86:9f:f0:
18:21:10:ce:4f:11:86:e5:6e:8b:a7:8f:8f:c5:74:26:cc:72:
2f:ad:b1:92:02:d8:98:fd:cd:ee:f9:6b:d5:71:0a:16:d2:ac:
1f:2c:f6:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 14:56:47 2026 by rpki-client