
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af3288f4-75be-314e-b936-36017a52c830.roa
File: af3288f4-75be-314e-b936-36017a52c830.roa (raw, json)
Hash identifier: chymM9Qur5OXXFCxwHO0SAC/TOubb+BAIZrm3IHASkI=
Subject key identifier: 5D:42:90:D5:82:BE:85:C3:BA:CA:53:AE:B6:6C:F0:C8:BA:3C:69:7F
Certificate issuer: /CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Certificate serial: 010D0C9F4328584E90487B1B050FF4C941518800
Authority key identifier: C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af3288f4-75be-314e-b936-36017a52c830.roa
Signing time: Mon 20 Jul 2026 17:10:57 +0000
ROA not before: Mon 20 Jul 2026 17:10:57 +0000
ROA not after: Sun 18 Oct 2026 17:10:57 +0000
asID: 26969
IP address blocks: 2604:3140::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:90:48:7b:1b:05:0f:f4:c9:41:51:88:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66dea2a5-837d-46d8-8f8e-9447ece20c09
Validity
Not Before: Jul 20 17:10:57 2026 GMT
Not After : Oct 18 17:10:57 2026 GMT
Subject: CN=3198faf6-616c-4ba6-917f-c9a3c44d6490
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:9d:5f:c9:4d:b6:9a:b7:08:1c:10:ed:ae:3a:
72:2e:6b:ca:95:9f:98:9e:bd:fe:36:26:0f:1e:4f:
34:9f:de:a4:22:84:82:28:54:01:13:de:25:86:af:
af:83:2f:97:13:4c:e7:75:12:47:47:46:4b:19:e8:
8b:56:f9:f9:6f:4f:d3:52:b7:38:a6:6c:11:8f:02:
bb:33:ea:91:b4:3f:6c:81:68:5e:ec:91:de:ce:ca:
c5:7f:1f:c2:7f:86:b3:d7:6d:bf:01:20:84:9e:d3:
4b:79:a4:5f:c9:54:53:84:19:bb:6c:a7:41:7c:11:
79:18:1c:ee:90:5c:d7:6b:18:4d:78:b5:d9:60:36:
00:12:6c:9d:13:d2:c5:ee:69:6e:25:89:cc:4f:14:
20:e7:a6:a2:f0:25:2c:eb:bf:32:39:ce:f9:7e:a3:
ba:6c:dd:02:0e:41:73:33:54:6d:29:0c:f0:26:b3:
2a:81:61:df:ea:94:8b:95:e1:a2:fc:2c:4a:8f:fb:
6f:26:e7:9e:10:84:16:98:11:bb:1b:1f:70:39:66:
d5:f7:fc:00:70:a1:7c:49:4c:79:7e:21:ce:f5:09:
bf:21:80:34:15:59:73:44:3e:16:b3:fd:cc:10:6e:
13:89:86:1b:55:cb:81:00:d4:25:43:3c:71:19:1f:
11:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5D:42:90:D5:82:BE:85:C3:BA:CA:53:AE:B6:6C:F0:C8:BA:3C:69:7F
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/af3288f4-75be-314e-b936-36017a52c830.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09/66dea2a5-837d-46d8-8f8e-9447ece20c09.crl
X509v3 Authority Key Identifier:
keyid:C3:86:AD:8B:F4:19:4B:35:94:24:9B:90:BA:9D:80:11:C2:08:71:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/66dea2a5-837d-46d8-8f8e-9447ece20c09.cer
sbgp-ipAddrBlock: critical
IPv6:
2604:3140::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
28:08:7c:4c:c7:00:c6:15:13:bc:c1:4e:5b:15:04:15:47:04:
7c:71:f1:ac:fd:82:86:d9:23:3f:7a:7f:bd:4b:ab:d4:b0:b6:
00:f2:7c:26:42:72:cc:ba:64:28:4e:f8:ce:64:14:34:32:44:
cb:c8:06:07:72:9f:49:a1:a5:bf:d8:94:8f:f0:21:c4:ee:bc:
7e:f5:fa:4e:d7:93:c5:e9:cd:4b:80:18:48:ea:44:86:f2:08:
c3:7c:cc:8f:5f:e3:b0:b2:3a:1f:14:e9:d4:a1:2f:ca:b9:6d:
d5:ae:86:c3:5a:90:47:24:8c:7e:ca:56:b0:af:0b:a8:9f:a4:
14:83:f1:c5:ae:a8:00:2c:dd:be:ec:bf:c0:19:7c:5a:58:b0:
a3:9c:70:56:81:9c:66:45:90:ab:4a:f4:39:de:71:e8:0b:03:
f8:8a:6a:4f:dc:dc:9a:45:db:7a:b4:9b:74:cd:81:28:92:f9:
53:bf:7d:84:43:ab:aa:a2:a6:fa:d8:18:0e:d5:43:31:5c:10:
f8:56:59:1b:0d:62:69:17:af:14:ef:ec:2b:65:fe:96:f8:79:
b5:ac:cc:1d:01:13:4e:25:68:35:96:df:de:c8:40:ff:06:75:
06:25:36:96:4d:aa:1b:c7:11:1d:86:3b:bc:63:9a:d8:5f:7c:
d4:12:2b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 09:20:08 2026 by rpki-client