
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa
File: 8671b8c7-29cb-389f-8097-41b06c4c4466.roa (raw, json)
Hash identifier: ymP1K+/xNJfeDmm0WujlZGhwSa+1lvMBICMhgh0YdKk=
Subject key identifier: 0B:89:B1:84:4C:3C:2B:02:22:03:BF:AC:B6:10:71:99:0A:19:3E:74
Certificate issuer: /CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Certificate serial: 010D0C9F4328584D5E1A5074B9EA6A82CF193480
Authority key identifier: 57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa
Signing time: Thu 02 Apr 2026 01:00:23 +0000
ROA not before: Thu 02 Apr 2026 01:00:23 +0000
ROA not after: Wed 01 Jul 2026 01:00:23 +0000
asID: 209864
IP address blocks: 2605:f440:cafe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 05:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:5e:1a:50:74:b9:ea:6a:82:cf:19:34:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f3d25a0-f7e5-421d-8842-fc967bf08f72
Validity
Not Before: Apr 2 01:00:23 2026 GMT
Not After : Jul 1 01:00:23 2026 GMT
Subject: CN=8aae9cd1-f8f2-455d-9abb-467f190b4f13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:5b:4c:a0:e2:3c:97:c8:f6:ed:ab:7e:4d:97:
c0:c8:8e:7a:f3:7b:d5:91:b1:02:8b:5c:1c:47:4d:
25:f8:36:a9:52:2a:41:9d:ce:da:8d:ac:dd:0e:d0:
a9:6e:08:a0:78:36:78:1a:16:52:aa:d2:47:32:d6:
c5:e2:d2:13:56:6a:f8:9b:f2:89:3f:5d:be:81:90:
4e:fa:0e:66:4e:54:d2:9c:20:05:40:65:2f:9c:88:
94:b6:a5:9d:a6:a3:d9:e1:4d:3a:a0:a3:7e:42:bd:
64:17:cc:dc:2d:b7:ea:23:29:9c:03:7c:14:2b:50:
5f:f5:f5:e2:c5:33:1b:8d:13:31:04:38:47:35:99:
1c:35:3e:3c:1b:c0:44:16:9b:e0:50:9a:5f:32:72:
9f:4e:36:8b:d3:66:5d:9f:79:59:80:e3:e5:5d:5e:
46:82:e2:10:8a:8e:7e:59:74:8f:9c:35:d6:92:2f:
34:70:2e:96:10:e9:b8:96:10:ce:8a:ad:50:91:25:
fc:bc:21:67:6c:9a:5a:6a:21:f8:d4:7a:db:54:46:
5c:3d:6e:03:0a:44:9b:dc:e6:20:1d:be:69:a3:fe:
89:3b:9f:6e:e0:03:38:63:29:76:ff:f6:5a:0d:57:
9c:d8:f7:ce:01:c2:46:d9:58:69:75:14:ec:9d:7a:
33:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:89:B1:84:4C:3C:2B:02:22:03:BF:AC:B6:10:71:99:0A:19:3E:74
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/8671b8c7-29cb-389f-8097-41b06c4c4466.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72/6f3d25a0-f7e5-421d-8842-fc967bf08f72.crl
X509v3 Authority Key Identifier:
keyid:57:D0:A4:F9:63:7E:3D:00:47:81:2C:DD:A6:7E:CC:7E:4E:BD:E9:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/6f3d25a0-f7e5-421d-8842-fc967bf08f72.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:f440:cafe::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
36:5f:06:6d:25:9d:92:ba:6b:38:55:17:c9:21:b9:04:55:eb:
93:ac:9a:c3:9f:6f:76:d6:5a:e5:ca:9a:a3:70:2b:78:c3:bf:
6c:f3:11:e6:0d:d1:81:7f:6d:27:fa:eb:fd:e9:f1:c4:46:11:
98:45:99:0a:18:18:38:f1:fd:f9:15:8a:78:49:ab:5a:2e:68:
50:96:ff:a7:a3:f4:c9:98:f6:e8:3d:5e:a1:d6:3e:83:54:66:
2e:74:ad:a3:59:25:8f:a5:20:d8:ad:d0:4a:b3:42:61:27:9a:
3d:05:cd:ae:bc:c9:33:a2:a2:fd:d3:cd:03:42:c1:56:87:58:
ac:91:cc:bd:0b:96:7d:64:19:7b:19:13:e2:0a:02:a7:dd:eb:
83:6e:e3:fc:2e:7b:1a:ca:51:9b:e5:2d:6e:b7:5a:c9:1a:f5:
5a:bc:c3:9a:f9:81:2a:9e:e8:b1:90:31:d9:f4:3d:23:7a:52:
07:f1:31:57:de:88:69:24:74:f2:3a:f0:11:02:05:9f:8f:7d:
39:38:38:5b:8c:ad:c0:73:ab:8e:8c:0e:7a:24:b5:64:2a:ac:
54:18:f9:83:d8:db:5d:a5:51:46:51:ab:a4:9c:98:68:2f:a2:
e6:4c:99:fe:31:7e:2d:f5:4d:fe:2e:76:9f:79:db:a9:17:82:
3f:ca:4a:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 22:06:11 2026 by rpki-client