
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f0d63ddd-429a-3424-834a-1c6642965f6f.roa
File: f0d63ddd-429a-3424-834a-1c6642965f6f.roa (raw, json)
Hash identifier: DY/2JiBIgLCGTs4KfEFQ0q/Y3xSf2xq2KKLKDvyDh28=
Subject key identifier: C5:34:6E:0A:78:DA:13:A9:1A:41:95:75:AD:E2:1F:75:DE:64:E8:AB
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584D624A5642AB8727798CBEC840
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f0d63ddd-429a-3424-834a-1c6642965f6f.roa
Signing time: Fri 03 Apr 2026 13:00:30 +0000
ROA not before: Fri 03 Apr 2026 13:00:30 +0000
ROA not after: Thu 02 Jul 2026 13:00:30 +0000
asID: 23473
IP address blocks: 2607:f750:1000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:62:4a:56:42:ab:87:27:79:8c:be:c8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Apr 3 13:00:30 2026 GMT
Not After : Jul 2 13:00:30 2026 GMT
Subject: CN=606f4588-7675-4506-b360-22213ef8e819
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:5c:0b:59:cb:f9:d2:d3:94:b7:34:9c:80:38:
a7:0f:e1:a2:69:7c:51:17:6c:f9:08:56:ab:94:07:
9b:e0:d9:5d:2e:f9:dc:49:2e:39:0c:4e:a8:a8:a3:
c7:f0:c9:ca:59:ce:9f:04:e9:d3:6d:d8:bb:0f:84:
d7:0c:dd:8d:54:02:47:7b:78:a5:98:4b:4d:2a:7c:
62:f0:9c:b7:a1:d0:56:12:87:1f:76:5a:8a:f6:a7:
d9:7e:e1:61:8f:ac:f6:80:38:26:39:61:d5:a9:4f:
6f:44:45:c9:d7:20:a4:e5:78:83:45:52:b4:c2:d7:
82:16:f6:45:7d:ff:92:02:36:6d:23:04:04:97:76:
f0:56:fc:46:8d:4e:09:b0:ea:53:4d:69:38:4f:ce:
cd:57:75:e3:48:c5:4e:c9:e6:ce:29:41:70:f6:6f:
03:4b:29:44:d8:ca:52:ac:22:d4:82:2d:95:25:c3:
7a:d9:1a:33:4f:e3:d7:03:82:81:c1:0a:88:b3:ec:
e0:70:7b:30:5c:b4:96:b3:a7:af:09:42:69:2a:e9:
de:69:77:ca:fb:93:2e:19:82:70:a1:64:7b:ef:07:
ca:3c:4e:b2:2f:6f:e1:be:9b:89:01:3f:96:21:9d:
e4:35:a6:7a:6e:54:83:ee:1b:5c:e6:55:e3:e7:89:
82:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:34:6E:0A:78:DA:13:A9:1A:41:95:75:AD:E2:1F:75:DE:64:E8:AB
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/f0d63ddd-429a-3424-834a-1c6642965f6f.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f750:1000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
66:9f:e1:ec:cd:c0:24:d3:00:29:82:ef:0f:71:90:32:aa:a6:
df:6a:04:4d:c2:c3:d4:f3:7f:cf:a3:c9:52:ef:0b:cb:07:7f:
42:7b:ea:69:73:b0:d7:3a:f6:9f:2b:8b:17:b3:7d:58:87:25:
8c:83:c7:08:b6:dc:0a:e9:0f:0b:e3:be:e6:85:69:40:ff:a6:
d8:e7:9e:49:c3:66:66:28:d8:39:ec:78:76:58:c4:cc:f0:43:
0a:ee:af:45:bc:65:cc:35:8e:dd:19:3d:0e:a3:e7:63:fe:df:
f9:09:36:26:f1:0a:67:83:d1:7a:d3:7c:69:b9:c5:f3:e0:ba:
89:a5:05:47:b3:39:57:e1:d2:88:c5:ef:7e:6a:b2:5e:31:be:
e1:8d:01:8d:18:ad:5d:c3:dd:e2:cc:c6:28:34:90:af:13:42:
a5:cc:39:d3:dc:b2:a3:00:af:16:50:c2:69:46:59:8d:3f:0c:
ef:fe:c2:98:b0:47:52:9e:c0:77:64:9d:ed:f3:1f:4d:5d:2e:
a0:7e:26:96:f4:46:70:81:8c:25:a2:81:69:40:ea:4a:dd:b0:
c9:de:8f:e8:f5:5e:d5:ea:59:a0:d5:1a:37:c8:0a:5e:d3:f7:
03:b0:3e:6c:fd:ce:0f:9f:7f:93:ad:0c:e6:3a:dc:b3:cd:ae:
08:96:9d:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:35:46 2026 by rpki-client