
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa
File: a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa (raw, json)
Hash identifier: uItBfOZmS2xUAriANgRsnuyKiUqmkQm+oHRRjr847CI=
Subject key identifier: 42:64:EA:5D:DF:BA:FF:F1:30:25:AE:A7:AC:AC:7B:18:9B:DA:5B:F9
Certificate issuer: /CN=58d440e8-959f-43ab-a410-371a599ce552
Certificate serial: 010D0C9F4328584D59EA7A730CAC9ED33DE06C00
Authority key identifier: FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa
Signing time: Tue 31 Mar 2026 13:00:30 +0000
ROA not before: Tue 31 Mar 2026 13:00:30 +0000
ROA not after: Mon 29 Jun 2026 13:00:30 +0000
asID: 26806
IP address blocks: 2620:f6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:59:ea:7a:73:0c:ac:9e:d3:3d:e0:6c:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58d440e8-959f-43ab-a410-371a599ce552
Validity
Not Before: Mar 31 13:00:30 2026 GMT
Not After : Jun 29 13:00:30 2026 GMT
Subject: CN=b6874c47-43dc-4a5d-a22a-0278e2e99511
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:84:eb:c4:13:40:62:a4:29:a9:61:aa:c6:ea:
55:9d:1f:1f:58:4a:25:7e:6e:f5:fe:98:4b:e4:d3:
b3:55:e3:69:47:c4:76:63:ec:db:18:65:65:ca:b7:
0b:93:8f:b7:a4:a6:0f:8a:39:a5:ad:82:58:15:ad:
d3:33:a2:c0:9c:06:69:98:ad:5f:da:a6:1f:e1:79:
bc:40:13:68:0e:6a:2e:7c:04:be:5f:c8:ae:1b:c9:
a4:65:e8:3e:73:8b:c0:3d:ad:e3:dd:21:b2:b6:12:
90:b0:26:00:4b:f5:1e:4d:55:c2:17:14:02:09:ac:
b8:00:9c:cf:97:aa:75:68:79:6a:f5:81:ab:94:f2:
6d:5a:4e:b2:8c:fb:33:77:a7:50:fd:8f:98:d7:57:
c4:5f:22:97:16:c5:14:0e:5b:94:a6:b6:dd:75:71:
a2:f8:e7:a4:49:32:d9:59:0f:06:5a:82:90:cf:9a:
ad:85:cc:91:cc:1c:74:2a:0b:c4:43:4d:12:8a:9e:
02:7e:af:01:c8:54:89:79:bc:57:6b:df:20:83:8f:
bd:93:6b:f1:06:c7:ee:5e:68:13:b9:c6:22:4e:2a:
ec:74:11:06:08:54:3a:9e:f0:99:1c:62:ff:5a:61:
89:f0:fe:d7:91:0a:d5:48:7d:e3:c5:c7:b4:5c:13:
78:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:64:EA:5D:DF:BA:FF:F1:30:25:AE:A7:AC:AC:7B:18:9B:DA:5B:F9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/a6d68c1e-9961-33a5-b8a2-3e917f115c56.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552/58d440e8-959f-43ab-a410-371a599ce552.crl
X509v3 Authority Key Identifier:
keyid:FA:8F:D3:BC:E0:72:04:46:78:07:43:1B:41:90:EA:40:C1:6E:F8:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/58d440e8-959f-43ab-a410-371a599ce552.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:f6::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
64:f8:04:60:be:13:a6:6e:d9:21:be:06:61:d0:b5:c3:5f:39:
f4:bf:76:26:69:43:e2:98:99:a5:7a:21:de:d8:27:fd:f9:6a:
67:7d:d3:ce:b7:3f:6c:e3:d5:43:9b:6c:f1:f8:93:eb:07:04:
d1:6f:be:2a:eb:53:0f:c2:f8:5d:91:f4:10:cc:f5:3b:01:df:
a9:c5:92:cf:ad:3c:20:ae:54:6f:79:78:a7:22:0c:8a:8e:84:
46:fb:3d:c8:ed:ac:9b:76:29:54:06:77:31:d8:72:de:f7:18:
0c:79:d7:69:50:c9:36:a8:d9:83:85:20:34:70:0a:2f:91:16:
e1:c8:f7:82:76:45:c8:34:d2:c2:8d:a1:60:0b:91:95:c5:73:
7d:d6:a0:68:30:1e:63:57:b2:4f:21:0f:0f:c2:b9:2e:e4:0c:
f6:4d:ca:12:70:50:e9:2d:bc:bb:2d:ad:e8:19:0b:ec:62:c4:
fe:42:15:df:6c:96:f6:22:2d:03:1d:6d:f0:b5:2e:da:b0:ad:
8a:0e:95:c2:f1:3f:01:42:22:59:00:b2:4f:38:27:bd:9f:04:
71:3e:53:0b:cf:12:65:83:2d:4f:2a:25:40:6c:12:6d:88:ee:
a2:30:50:8d:06:d6:37:13:7b:f0:12:ad:cf:55:87:b4:69:ec:
b1:34:97:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:59:34 2026 by rpki-client