
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
File: ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa (raw, json)
Hash identifier: P+gxm67ZSkr+ZmFhuR6jA5F/HHoZ2R2IlY9h7vdIukU=
Subject key identifier: 12:D0:5B:3A:4B:88:BE:1A:70:34:F4:42:FD:64:F3:A7:C7:0D:82:8C
Certificate issuer: /CN=208edf3a-73a5-4614-9c76-5702d5c88977
Certificate serial: 010D0C9F4328584D5243488BED07C0AC39716CC0
Authority key identifier: 8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
Signing time: Sat 28 Mar 2026 19:13:19 +0000
ROA not before: Sat 28 Mar 2026 19:13:19 +0000
ROA not after: Fri 26 Jun 2026 19:13:19 +0000
asID: 398549
IP address blocks: 2605:dd40:8225::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 22:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:43:48:8b:ed:07:c0:ac:39:71:6c:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=208edf3a-73a5-4614-9c76-5702d5c88977
Validity
Not Before: Mar 28 19:13:19 2026 GMT
Not After : Jun 26 19:13:19 2026 GMT
Subject: CN=5a5f2421-7a0e-4844-a7dc-a2789d6a6ee3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:45:33:55:75:91:b6:1e:38:be:b6:03:4b:62:
37:5a:ce:03:32:e2:03:5e:03:91:b8:20:9d:fa:66:
d9:94:8c:dd:67:a0:46:65:61:9e:b3:8d:cb:56:5f:
93:44:d8:20:75:ac:3c:f3:02:52:bf:41:6a:6b:9d:
1f:bf:e3:d8:a7:02:65:ed:22:d4:f7:48:0a:4e:59:
8b:bb:43:9c:a6:f7:05:e7:84:f3:69:0f:00:37:77:
68:3e:e1:cd:2b:a7:90:51:d1:f2:69:5c:e7:72:51:
6d:08:9e:d0:18:dd:78:b7:24:17:1f:ef:4f:54:a7:
2d:c8:82:df:8a:e4:62:b9:0a:60:a4:68:fa:2e:9c:
fd:45:88:83:ad:54:ab:44:18:ec:d8:91:24:d9:03:
f3:80:d8:60:b5:e5:19:e9:a2:09:8a:37:22:ac:0c:
cd:98:c0:b9:c3:49:0d:c3:92:c8:58:a5:19:25:8c:
d4:c3:65:89:0f:ed:56:2c:0d:e5:97:a2:5e:eb:b8:
8b:68:3e:df:00:76:ac:81:6c:b3:a2:06:6e:d8:be:
de:b9:36:4e:90:1f:18:c9:13:84:b4:a8:42:d1:ba:
33:50:01:a0:62:08:fe:9e:f8:c6:f3:90:36:59:a9:
bf:bc:35:36:05:19:66:51:be:12:2a:ab:8d:be:a1:
6b:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:D0:5B:3A:4B:88:BE:1A:70:34:F4:42:FD:64:F3:A7:C7:0D:82:8C
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/ca6b41d0-5dfd-3ccf-984f-0aa588c980ec.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977/208edf3a-73a5-4614-9c76-5702d5c88977.crl
X509v3 Authority Key Identifier:
keyid:8E:21:B9:9B:FC:3F:2A:52:82:94:D4:B0:85:BD:F7:BC:CF:3B:55:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/208edf3a-73a5-4614-9c76-5702d5c88977.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:dd40:8225::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9e:f9:b3:ec:aa:00:90:0c:24:41:6f:9b:e4:c4:a9:44:92:7f:
57:bd:52:91:da:b9:7e:f4:0f:20:c4:02:c2:24:e0:0f:bd:0a:
a1:a4:c0:59:b2:4f:8b:70:7a:99:6c:13:bd:ca:03:c8:0b:bc:
ae:89:7e:56:fa:96:0c:cd:e4:35:c1:2f:00:de:16:92:3d:3c:
e9:0f:f2:36:c5:98:2e:1c:4c:b2:75:27:09:8e:a6:0f:e4:22:
d1:cb:68:f3:c8:25:41:55:80:ef:08:7c:68:92:13:ac:1a:e0:
ef:5f:93:57:7b:85:d3:ec:69:02:e7:fc:3a:f3:82:b1:69:19:
5b:d1:e4:65:1e:2f:56:66:04:7e:dd:48:47:07:f8:0a:fd:57:
54:4d:fd:c6:74:f8:38:00:bc:e5:df:fe:0a:97:84:bf:19:71:
42:08:0b:50:43:35:97:c8:2a:49:40:4a:8d:9a:ae:1b:83:fd:
71:4b:91:07:07:a6:ea:6b:82:c3:82:b4:91:a4:f7:fb:9b:04:
28:81:fa:13:4a:07:58:98:1c:a9:6c:3a:55:f4:e5:58:1d:0f:
57:5b:0e:fc:87:16:59:11:e8:94:d1:36:77:69:af:59:54:bf:
3e:18:d8:5d:ec:07:7b:0c:7e:85:77:60:d8:94:87:91:d3:b6:
eb:a1:0e:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:21:08 2026 by rpki-client