
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a95f9b31-d487-3b38-84a7-bad66aec3412.roa
File: a95f9b31-d487-3b38-84a7-bad66aec3412.roa (raw, json)
Hash identifier: FisSalgMyooBj8GCxHEjHYIPyq42GIKW8Rq5XtIJ/8w=
Subject key identifier: 74:E8:90:21:8D:A0:64:98:89:8F:35:30:1F:17:59:53:81:5F:D6:4A
Certificate issuer: /CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Certificate serial: 010D0C9F4328584D1707E57C9124F9FB72EBCB00
Authority key identifier: 6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a95f9b31-d487-3b38-84a7-bad66aec3412.roa
Signing time: Sat 07 Mar 2026 14:00:41 +0000
ROA not before: Sat 07 Mar 2026 14:00:41 +0000
ROA not after: Fri 05 Jun 2026 13:00:41 +0000
asID: 30036
IP address blocks: 2604:2d80:2400::/41 maxlen: 41
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sat 14 Mar 2026 01:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:17:07:e5:7c:91:24:f9:fb:72:eb:cb:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3c4491b9-92bb-4e3e-a60c-c28bc100dfdc
Validity
Not Before: Mar 7 14:00:41 2026 GMT
Not After : Jun 5 13:00:41 2026 GMT
Subject: CN=225f3cce-c000-4bcd-9c87-da7c03d0389e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:61:86:62:9a:1b:b4:45:dc:24:29:ea:1c:f1:
8f:46:13:60:47:38:5b:be:bc:82:81:1f:0f:8b:c1:
ca:d6:03:7e:0b:67:0c:37:64:ce:c7:a0:b0:f7:1d:
4a:e0:68:85:7e:1f:dc:be:2e:24:d3:27:bc:6b:10:
92:c4:66:89:4d:20:d1:36:00:8b:4b:cd:10:19:5d:
c4:26:f0:9b:bc:5c:cc:a5:17:b1:de:97:7a:57:1d:
fd:b5:0d:f0:14:3b:4d:eb:55:d0:7e:3a:86:2b:cc:
ec:72:7a:c9:96:9c:42:e9:99:c8:54:00:79:0f:77:
41:20:1d:ac:25:54:cb:c1:c6:dd:12:e2:6d:0a:b2:
3a:73:c0:1e:34:c3:1a:b0:cf:1f:50:83:f2:08:fb:
49:16:3e:f7:f0:ba:9b:4c:38:00:fd:57:b6:2e:28:
83:93:e4:28:3c:de:97:39:9f:6a:1b:f0:36:2f:f0:
82:3d:e4:7f:00:2b:d8:b7:de:73:24:6b:88:7d:5b:
bf:fe:c5:66:5a:64:4f:28:b3:1f:69:62:04:4c:45:
31:ee:1b:b7:43:e3:fd:b0:e6:7d:d8:23:c4:4c:92:
00:f3:8d:4e:e9:f3:be:09:00:c5:af:1e:81:88:98:
65:4b:34:53:7f:d2:65:d4:6b:6f:e9:92:91:77:d2:
3b:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:E8:90:21:8D:A0:64:98:89:8F:35:30:1F:17:59:53:81:5F:D6:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/a95f9b31-d487-3b38-84a7-bad66aec3412.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.crl
X509v3 Authority Key Identifier:
keyid:6B:DF:32:CC:AD:5B:E9:A7:0F:3F:5A:C3:57:4E:43:8A:EC:4E:D3:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/3c4491b9-92bb-4e3e-a60c-c28bc100dfdc.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:2d80:2400::/41
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
3b:af:f8:91:9e:7f:5f:5b:6e:6a:dc:d4:a9:bd:df:31:f1:d2:
02:a4:2a:64:05:49:01:c5:31:ad:00:3c:bd:2f:8c:72:ff:bd:
ea:bc:83:d5:12:b0:dc:30:71:6f:6e:b2:6c:3d:a8:69:d4:c9:
c1:a1:22:53:7f:de:6c:d1:ae:98:d0:7f:24:b8:20:41:ad:c2:
54:a2:1a:c9:d1:42:b2:cb:3a:9e:c4:99:e3:ee:9a:2e:96:dc:
a2:e2:61:aa:8a:36:82:02:26:bb:60:47:f3:77:59:5a:fc:8f:
f1:65:a5:51:f0:f3:b7:b3:67:7b:0f:eb:cc:da:f4:f1:c6:4c:
e5:a0:5f:b2:f7:0e:f7:21:5a:45:07:f0:04:e1:26:03:13:44:
ef:7b:b9:a1:0d:b7:3c:7d:a7:ef:80:2e:e4:84:8c:01:61:39:
a9:f4:7a:15:3e:44:de:51:1f:ea:a0:95:ca:bc:b3:14:67:e7:
2b:04:26:ed:f7:3c:f4:20:f4:31:00:22:a9:55:3b:73:8a:cb:
e7:13:ae:c9:ab:e1:4e:aa:6c:dd:4b:bc:dd:19:08:8b:51:e1:
35:88:79:22:e1:69:24:d3:6e:17:4b:6e:fe:20:69:ff:6d:9d:
54:1a:29:e9:c8:18:5d:79:5c:8d:23:7a:65:61:e5:57:ee:21:
38:6a:b5:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 05:05:04 2026 by rpki-client