
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa
File: cf0943de-32a2-326f-b6d1-1263e56b6598.roa (raw, json)
Hash identifier: 8eAgBNH4PSH2hfIcL2t5MHWzF7p7xd4EuXk2H4nyY7c=
Subject key identifier: 67:4C:E8:75:9A:C0:EF:2D:FB:2B:00:35:0E:C8:EF:64:3A:ED:62:06
Certificate issuer: /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial: 010D0C9F4328584D0217BE036DCEAD4D8E393650
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa
Signing time: Sat 28 Feb 2026 02:00:32 +0000
ROA not before: Sat 28 Feb 2026 02:00:32 +0000
ROA not after: Fri 29 May 2026 01:00:32 +0000
asID: 6167
IP address blocks: 2600:1003:a010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 03 Mar 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:02:17:be:03:6d:ce:ad:4d:8e:39:36:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Validity
Not Before: Feb 28 02:00:32 2026 GMT
Not After : May 29 01:00:32 2026 GMT
Subject: CN=746db464-a21e-4336-9028-48808535a8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:97:42:58:fa:ec:e9:75:b2:23:9b:2f:9e:
2e:d2:68:76:2a:31:5b:f3:65:d4:3b:83:a7:f3:bd:
cc:4e:58:7e:f4:e1:1d:4e:3b:a0:35:76:41:30:7b:
60:de:b9:69:c1:ca:f4:5f:5a:41:80:d3:7c:9b:a7:
de:f9:94:10:4c:68:03:35:23:d7:40:2a:4d:60:4e:
36:26:39:49:29:67:c0:b7:f9:6d:70:29:34:62:98:
32:2a:4f:85:f9:91:a6:26:1f:d5:2d:72:81:5c:7a:
48:b7:c3:ac:43:1c:ba:a5:57:c5:15:33:d9:e0:f2:
b0:f3:cc:1d:b7:73:bf:af:b4:f1:9e:38:9c:65:83:
a3:f9:10:bb:1a:2f:69:00:fc:26:f9:bf:11:45:bb:
fd:c3:6f:ed:d0:5c:e5:3d:5c:46:fb:91:cf:88:0f:
cd:6e:94:14:47:66:36:ac:fc:01:4d:c0:26:1a:09:
72:0c:d2:4e:7f:d7:77:f6:2c:51:c1:3c:be:2b:7a:
13:80:39:db:7c:80:fb:63:63:6a:7d:cb:eb:43:f7:
bd:6c:e9:2d:0e:16:d6:1e:15:4f:b6:ac:3c:54:64:
f6:28:05:9a:b9:59:cb:76:31:9e:cc:12:af:69:79:
88:2c:96:67:f2:54:1e:3e:59:6c:94:d8:66:50:ed:
50:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:4C:E8:75:9A:C0:EF:2D:FB:2B:00:35:0E:C8:EF:64:3A:ED:62:06
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/cf0943de-32a2-326f-b6d1-1263e56b6598.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
X509v3 Authority Key Identifier:
keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
sbgp-ipAddrBlock: critical
IPv6:
2600:1003:a010::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
9a:ba:a7:6c:76:97:32:de:b3:cf:c8:d8:f1:88:ff:bb:cb:c2:
36:2e:ca:a8:4e:7b:7a:c9:ea:36:46:5e:95:18:40:16:ab:11:
23:81:19:45:e4:52:6b:d3:ef:e1:58:96:62:07:c7:2b:65:3b:
b1:8c:18:b8:80:4a:c0:72:4b:72:92:4b:87:f6:99:30:59:75:
51:78:02:2e:12:6b:31:57:fe:1d:8e:32:28:c9:51:70:ea:5e:
f0:08:24:0d:84:2c:1c:7d:b2:5f:38:2d:af:51:64:80:b6:1d:
5d:8c:d8:39:51:9d:89:62:b8:f1:87:bd:8f:38:b4:82:a4:18:
9d:1a:f8:30:dc:2c:74:d5:a1:19:4a:c6:e2:aa:04:56:1e:3c:
42:e9:b6:25:29:c1:92:79:e9:36:58:07:b4:68:18:b6:58:8a:
50:f2:db:3c:df:21:48:be:84:7a:37:99:e7:5b:c0:2d:a3:ce:
57:c1:ce:dd:95:46:45:a4:94:5d:95:53:48:af:88:72:42:d8:
94:7f:f9:32:d9:21:a1:60:58:b9:3f:6c:5b:44:05:c1:75:bd:
af:02:58:60:f7:e4:df:80:79:36:bc:1f:76:44:49:64:5b:95:
62:12:3d:a7:31:57:a0:94:80:66:de:d4:83:b0:a6:16:1b:7b:
83:ff:6f:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 19:11:21 2026 by rpki-client