
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d6f1f78-523b-3164-ba8e-0898bf47a170.roa
File: 3d6f1f78-523b-3164-ba8e-0898bf47a170.roa (raw, json)
Hash identifier: clK/OdwnE7Qdg5s1NbIte7jNxqW+qEoOwpeW2MvvLMg=
Subject key identifier: EE:D4:46:68:13:38:C9:E8:33:30:43:8F:9F:DB:D6:6E:EB:3D:62:D9
Certificate issuer: /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial: 010D0C9F4328584D7F9A83106F91BA39F908E680
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d6f1f78-523b-3164-ba8e-0898bf47a170.roa
Signing time: Tue 14 Apr 2026 01:00:24 +0000
ROA not before: Tue 14 Apr 2026 01:00:24 +0000
ROA not after: Mon 13 Jul 2026 01:00:24 +0000
asID: 35819
IP address blocks: 2600:1417:d800::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 18 Apr 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7f:9a:83:10:6f:91:ba:39:f9:08:e6:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Validity
Not Before: Apr 14 01:00:24 2026 GMT
Not After : Jul 13 01:00:24 2026 GMT
Subject: CN=50ddfcb1-7a66-432c-a2f3-7ac02ba3afa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:81:06:56:93:54:80:80:13:58:7a:85:59:a0:
33:a7:ae:dd:37:ed:12:80:24:b5:08:7f:be:85:65:
41:18:bd:8d:f3:1c:b1:9b:03:ad:50:d7:9b:92:d2:
2b:7b:d8:ca:3b:2d:d1:75:68:6e:b2:1a:ba:09:af:
6f:cd:89:f5:35:e3:5d:fa:15:a7:d4:de:e3:26:0c:
6b:b4:21:1f:29:a1:49:dd:7c:c8:04:eb:32:50:a7:
db:3c:bd:ee:eb:e4:be:9b:76:4e:55:ff:e7:ef:d6:
bb:a8:a3:ee:44:18:e9:33:f8:40:3c:ae:ce:51:d2:
e6:6e:2d:e9:b1:b9:4c:fd:12:dd:7b:d6:15:d4:a5:
9c:a9:5b:b4:62:6d:79:d4:84:13:24:5e:5d:cc:27:
5d:e5:8e:8e:db:82:75:0e:f6:31:7b:67:93:a2:03:
33:e2:45:0d:d5:4a:c8:7f:40:9c:21:9e:49:47:f4:
18:82:e6:9e:fa:2c:bc:a4:3b:ee:4e:23:f0:37:93:
e6:14:4c:aa:68:02:ee:0d:94:7f:f7:39:19:f4:dc:
68:7c:27:90:6b:eb:7d:21:5d:06:7c:91:03:85:73:
b4:2b:75:32:27:94:75:7f:ba:9c:af:97:9c:0b:90:
b0:1d:fd:09:5d:b8:c7:b8:b5:dd:70:1e:a2:65:f7:
18:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:D4:46:68:13:38:C9:E8:33:30:43:8F:9F:DB:D6:6E:EB:3D:62:D9
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/3d6f1f78-523b-3164-ba8e-0898bf47a170.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
X509v3 Authority Key Identifier:
keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1417:d800::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
24:5e:af:04:85:cc:1c:44:35:f2:91:d7:a9:e7:b3:16:54:37:
10:c0:f9:28:79:dc:62:b9:43:c4:9e:75:e0:b2:d1:84:d0:02:
1e:80:dc:50:a0:17:ab:47:72:c8:b3:93:52:19:6a:57:af:db:
5f:7f:7b:49:35:e0:3c:44:65:92:27:ff:61:c5:15:c1:9c:f7:
b0:13:37:8a:60:bc:70:8b:06:92:cf:6b:61:5f:f7:9c:27:e4:
06:23:36:6c:42:9f:4a:cc:5a:0d:96:5b:f0:8f:ea:bc:31:19:
21:30:b6:04:9c:56:94:16:b9:57:fc:b0:5a:cb:72:70:30:e4:
86:80:4f:f1:4d:eb:00:9d:46:9c:be:f7:08:1c:41:1c:49:92:
8c:22:f6:0c:6e:dd:1c:68:1e:7b:8a:c9:b5:4e:ba:87:c5:5a:
5d:50:79:4a:37:79:87:aa:4e:fc:74:7c:32:ce:7f:ee:5b:1c:
cb:45:ff:d0:5b:93:ec:f2:dd:de:ac:70:03:a6:7a:b9:63:c3:
8c:16:5d:7a:b6:c1:89:59:52:b6:1d:9c:45:a5:f2:b4:cb:33:
65:7d:86:f8:0b:49:2e:e7:db:98:14:05:9d:00:bb:2e:39:8e:
c4:ac:a2:89:51:f0:a7:e0:63:89:b9:5f:85:c6:25:4a:29:f4:
6b:c2:7a:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 15:40:41 2026 by rpki-client