
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa
File: fa3db38d-2973-332b-9416-9816f962db4c.roa (raw, json)
Hash identifier: IeuCZKYCT2/LuXZuOBKSkiLrYXcjtWvAlKUF28j5qjs=
Subject key identifier: 62:2E:B4:13:B6:AF:81:B2:0F:4A:A0:5C:67:14:F7:2A:A3:E3:9F:DE
Certificate issuer: /CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Certificate serial: 010D0C9F4328584D5234FDF3F80774444F82E280
Authority key identifier: E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa
Signing time: Sat 28 Mar 2026 18:44:38 +0000
ROA not before: Sat 28 Mar 2026 18:44:38 +0000
ROA not after: Thu 14 May 2026 20:47:46 +0000
asID: 3599
IP address blocks: 2607:fee0:a000::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/de027a1a-2695-4c0e-ae7d-e6cb10afa125.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 00:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:52:34:fd:f3:f8:07:74:44:4f:82:e2:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08d14a9b-0dce-4576-8d20-8da4bc15fb7a
Validity
Not Before: Mar 28 18:44:38 2026 GMT
Not After : May 14 20:47:46 2026 GMT
Subject: CN=661e4759-2fed-4abc-a2dc-74f39152ec51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:d9:9e:0e:3a:05:0c:3b:32:cb:6a:e7:24:33:
5c:12:bc:5a:07:7e:e5:52:54:51:6b:6d:64:a7:7f:
a3:69:ba:7c:b3:4c:13:40:e1:45:33:83:fe:33:db:
31:29:14:37:85:d0:2b:65:1f:b6:ea:03:43:19:18:
57:ec:f0:3b:a0:17:9c:f9:a3:bf:d4:8b:e2:08:e7:
ce:cc:b3:c3:af:b2:6f:37:7e:4a:a6:76:4e:a9:ea:
7a:e4:c7:5d:6c:30:d8:b7:28:33:2d:fe:10:a4:15:
b4:eb:38:ff:ea:5d:08:43:b4:09:bd:f5:d2:57:7a:
6d:f1:4f:43:79:83:08:70:6f:5d:8f:17:78:dc:ea:
f9:55:05:8c:85:ec:7e:5f:a4:b9:4d:56:a2:eb:7f:
14:34:d6:56:fb:1a:a9:50:f0:e7:fc:b9:fd:1f:31:
3a:5e:be:4a:06:2a:94:27:35:aa:ab:64:27:ca:43:
c3:33:db:b1:c8:6e:c7:a2:5c:69:f2:db:d3:87:13:
50:2b:d4:91:5a:b1:7a:04:dd:a0:7f:9e:35:a7:2d:
30:f1:fb:aa:55:3b:36:18:63:19:2a:7b:ca:5e:7e:
cb:ec:18:a2:c9:7c:42:f2:52:9d:bf:fc:cc:21:e2:
84:74:17:7d:2f:9a:c1:36:30:49:ce:f0:2e:1b:14:
3e:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:2E:B4:13:B6:AF:81:B2:0F:4A:A0:5C:67:14:F7:2A:A3:E3:9F:DE
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/fa3db38d-2973-332b-9416-9816f962db4c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.crl
X509v3 Authority Key Identifier:
keyid:E7:5F:01:26:E5:6F:7A:55:FE:4C:1A:B7:AB:E7:BB:EF:A3:CE:DE:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/de027a1a-2695-4c0e-ae7d-e6cb10afa125/08d14a9b-0dce-4576-8d20-8da4bc15fb7a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:fee0:a000::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
85:19:5e:92:ab:ee:b5:9c:72:d7:08:31:0f:0d:5d:61:b9:7a:
14:5a:08:0a:d8:5d:1d:bb:0a:37:24:88:93:eb:8d:81:c3:f4:
59:9e:8c:d5:f6:5c:5c:2f:39:fb:8b:d4:9d:6e:5a:09:c7:7a:
e2:eb:31:07:d5:00:da:02:72:20:7a:4c:b2:f6:0b:e6:34:a3:
49:b4:47:56:6a:00:44:82:9f:4f:4c:fd:0c:45:f3:14:c4:f2:
c9:28:0f:d2:4e:ed:fb:b6:e1:2e:85:78:d3:bb:a4:55:e2:db:
7d:8a:df:20:0f:11:77:fd:72:83:f9:00:19:00:00:22:5e:f5:
0d:7a:27:f2:cc:48:34:7e:51:64:39:fb:6f:ad:c1:42:0c:72:
fd:f7:97:e5:93:cc:b5:dd:3c:8f:7c:50:9d:3b:b4:cf:60:87:
f6:16:17:83:70:5d:c9:bc:34:93:c9:3d:27:4a:77:d1:ac:5e:
79:7e:21:ed:5f:d9:fa:9f:d0:c8:7f:65:6c:e2:00:ee:4b:55:
5e:b5:6f:8f:51:26:4b:51:ff:9f:47:2f:ce:36:79:ab:a8:0d:
0d:73:25:1d:e0:98:98:29:2c:77:9f:ac:4c:03:5c:5e:07:cd:
5f:9d:60:6e:fa:8f:c4:1a:ff:09:7e:0d:41:50:28:31:92:82:
e0:c4:fe:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:16:43 2026 by rpki-client