
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa
File: f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa (raw, json)
Hash identifier: IdLGHax0kRSBDP6Hxa1t9qrBgw8ruf5MXv3taWW9/Lw=
Subject key identifier: 0D:C2:DC:AE:17:8D:8E:FC:15:97:C3:84:83:05:55:0A:28:7B:1D:E5
Certificate issuer: /CN=369b937a-2420-4fd7-b5a1-0b6c4ee6c1df
Certificate serial: 010D0C9F4328584D571FC0F2BB39BD1EBCBD4000
Authority key identifier: 43:47:1E:08:C0:5B:20:4E:40:CA:36:87:74:0F:05:65:E2:58:58:0E
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa
Signing time: Mon 30 Mar 2026 13:00:30 +0000
ROA not before: Mon 30 Mar 2026 13:00:30 +0000
ROA not after: Sun 28 Jun 2026 13:00:30 +0000
asID: 589
IP address blocks: 2620:101:1000::/42 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 19 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:57:1f:c0:f2:bb:39:bd:1e:bc:bd:40:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=369b937a-2420-4fd7-b5a1-0b6c4ee6c1df
Validity
Not Before: Mar 30 13:00:30 2026 GMT
Not After : Jun 28 13:00:30 2026 GMT
Subject: CN=e87feb63-0348-4601-93ed-3c678a3b83de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1a:c0:5c:30:d6:41:61:f1:c9:63:7c:9d:72:
84:79:d8:a9:71:93:76:be:6f:ef:94:63:30:60:93:
60:ce:4a:eb:11:fc:9f:84:1b:87:8e:01:1f:fe:3d:
a4:19:22:bf:33:1c:35:2f:d2:f5:df:c8:8e:43:85:
17:e4:4a:27:0e:81:e5:d8:5f:af:4a:63:ed:2c:ca:
db:42:87:aa:ea:43:cf:31:5b:94:aa:62:e5:93:7f:
ef:cb:15:7a:37:db:55:06:b3:7f:81:3f:8c:2e:7b:
fa:c1:d5:9b:5c:bb:cc:e7:69:9a:40:4a:87:c0:08:
5a:c5:c6:ad:ef:1e:59:5f:88:d9:94:d9:e0:9c:8a:
f5:72:6a:a1:9b:f5:d9:bd:62:6e:85:44:e6:53:b4:
0a:68:2f:f0:df:38:11:6e:76:1f:9c:a6:fa:c7:fc:
83:c5:34:20:f5:91:6a:ad:b7:09:fc:2f:69:9f:6c:
95:67:ab:a7:34:ac:c2:13:f2:b8:23:18:a2:ff:19:
e0:66:93:d5:d0:15:28:94:79:70:d3:88:43:32:6e:
40:7e:d8:bc:7b:86:92:99:c4:52:e5:c0:cf:3b:75:
a4:a2:34:01:b8:a0:c3:0e:79:f6:42:a1:5c:bb:82:
e5:0c:b9:a5:5e:8c:b0:99:eb:29:bd:4a:10:dd:6c:
f3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:C2:DC:AE:17:8D:8E:FC:15:97:C3:84:83:05:55:0A:28:7B:1D:E5
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/f2a7b5de-fceb-3ffb-8978-5491cb6d1f34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.crl
X509v3 Authority Key Identifier:
keyid:43:47:1E:08:C0:5B:20:4E:40:CA:36:87:74:0F:05:65:E2:58:58:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/369b937a-2420-4fd7-b5a1-0b6c4ee6c1df.cer
sbgp-ipAddrBlock: critical
IPv6:
2620:101:1000::/42
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
16:02:44:1b:84:42:d6:e7:46:7e:e0:5a:65:bb:61:8f:a3:d6:
0b:d2:34:95:87:f1:bf:7a:4b:8b:bc:09:05:c6:eb:29:51:f2:
67:77:d8:77:80:00:8a:1d:ea:b6:11:7b:80:16:3c:1b:17:87:
df:d2:88:fa:92:0c:47:da:4b:55:73:20:d4:c9:91:8c:4e:76:
64:d1:5a:cd:24:23:99:6b:c5:aa:11:34:f0:c7:18:a6:29:8e:
a1:94:c1:b6:a1:26:37:ce:dd:f4:bf:81:ab:06:1c:d3:a4:1c:
6d:9c:2f:56:2a:2e:87:35:c1:21:7f:aa:78:cd:8c:b2:4d:e6:
93:95:45:a2:91:76:d2:66:eb:26:12:ef:27:d7:92:28:a3:d3:
72:cc:c7:d9:9f:2e:3a:56:f8:a8:c4:6c:5e:1a:93:5b:b1:9d:
3c:a7:fc:0c:13:70:4c:e6:2f:cd:54:a2:33:54:cf:a7:40:6f:
19:91:8b:b0:e6:38:4e:4e:fc:6d:29:e5:ea:0b:b8:39:14:2c:
b2:04:38:38:cc:bf:9c:a9:f5:d8:f6:64:80:80:63:02:84:19:
2b:4d:ae:01:f6:ab:c3:f4:b1:e3:e6:72:c3:81:50:6e:4b:c4:
2d:12:75:5a:1c:9f:86:78:75:fe:f9:49:30:5f:85:35:48:ee:
ec:ac:db:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 12:15:58 2026 by rpki-client