
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa
File: 0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa (raw, json)
Hash identifier: QHZQmLWBwj+PjZMRmuQACmLLrW52g+XEkfH3Nh1Itxs=
Subject key identifier: 45:94:8C:50:41:9C:51:CF:7C:31:5A:BC:7A:C5:6F:FD:DE:1F:D0:BA
Certificate issuer: /CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Certificate serial: 010D0C9F4328584D09125CE740375FEAFA76CB40
Authority key identifier: E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa
Signing time: Mon 02 Mar 2026 14:00:41 +0000
ROA not before: Mon 02 Mar 2026 14:00:41 +0000
ROA not after: Sun 31 May 2026 13:00:41 +0000
asID: 9009
IP address blocks: 2607:740:3b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Wed 04 Mar 2026 13:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:09:12:5c:e7:40:37:5f:ea:fa:76:cb:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35e99eeb-90e3-4a3e-b866-39294b437d3d
Validity
Not Before: Mar 2 14:00:41 2026 GMT
Not After : May 31 13:00:41 2026 GMT
Subject: CN=284bef65-f9d6-420a-8d02-b563462ea97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:fb:6e:69:ad:1a:d5:f6:3b:fd:ba:d7:77:b5:60:
31:b1:8b:63:cf:10:59:3c:08:13:b0:52:75:a1:85:
e3:70:be:ab:57:e9:81:d8:9f:08:f7:ff:4f:c2:8a:
45:6c:f7:b0:25:ce:03:6e:f9:1e:78:8f:07:af:f4:
80:fc:7f:2b:c6:f5:08:78:c8:89:ef:2e:d5:b5:5a:
bf:2a:32:a3:1d:06:be:b3:b5:52:d9:e0:ee:d4:e4:
a2:40:c7:b9:18:f7:99:9b:f2:85:cb:b4:f1:43:af:
60:94:75:02:24:b3:3e:4b:69:f3:f1:89:98:97:6a:
81:69:61:e8:a1:a9:b9:1d:6b:fc:71:d5:25:20:8d:
79:f8:e0:e2:fb:56:91:48:42:a9:6d:ad:b9:c5:1a:
92:95:88:27:44:b5:d5:1d:b7:2b:27:24:a8:52:94:
23:99:ec:ba:0e:19:c0:2d:55:b2:10:ea:be:13:a3:
6e:d4:b7:c8:21:b7:99:d6:80:aa:58:99:51:a3:10:
48:87:98:54:12:c0:cb:ce:9a:04:d6:be:02:c9:bc:
8d:a9:67:4d:dd:ff:1a:da:90:16:ca:e4:4c:a2:e7:
66:27:f0:02:da:1f:ab:7c:85:31:58:cd:59:1a:8a:
3e:75:0d:e9:da:8b:86:77:7a:c0:3a:7b:1f:30:7a:
87:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:94:8C:50:41:9C:51:CF:7C:31:5A:BC:7A:C5:6F:FD:DE:1F:D0:BA
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/0e9fadf4-f7bc-3ae0-9d69-9145fe04e17b.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d/35e99eeb-90e3-4a3e-b866-39294b437d3d.crl
X509v3 Authority Key Identifier:
keyid:E5:5B:A0:02:57:F9:60:BC:20:5B:AD:CA:B3:EE:D0:EA:27:2A:99:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/35e99eeb-90e3-4a3e-b866-39294b437d3d.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:740:3b::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
40:c5:3c:fe:1f:a2:3f:7d:57:f7:ff:6b:03:81:58:a5:b8:ca:
8b:d4:c4:46:f1:58:31:fb:6c:ea:67:fb:61:53:2a:e1:a3:84:
21:b7:82:3d:06:e7:81:d1:e5:b5:75:a2:93:78:ab:ef:b2:4d:
a2:d8:fc:a7:c9:68:bb:80:27:cc:99:88:1b:c6:63:99:65:c0:
81:81:85:bb:f3:11:d1:7b:54:98:2c:81:22:8f:7d:56:a2:b0:
a9:0d:54:13:6d:8c:ae:11:a4:32:d1:58:18:f5:89:9d:a9:ec:
17:a3:78:29:52:e8:8b:09:36:89:76:f2:03:75:70:aa:a8:e9:
ba:4c:61:b3:d6:4c:b8:55:e7:c6:8e:b4:93:6d:92:22:db:30:
82:97:9e:46:bf:e6:99:bb:21:06:de:6b:c8:2f:93:9e:d3:b4:
82:18:6e:f1:98:e2:01:05:6b:17:bf:1b:39:5c:79:df:61:58:
66:82:61:6c:36:e5:9e:42:b7:69:61:19:66:9b:8a:31:ef:fd:
a1:e0:c0:62:79:76:9c:7a:b7:f7:fa:71:42:36:e2:04:97:3b:
70:9e:f0:9b:47:a3:db:1c:98:4a:41:00:da:18:10:b2:66:e4:
ef:4f:3d:7f:67:eb:5e:74:70:ec:44:0a:6f:09:fd:b3:03:cc:
01:16:79:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Mar 3 09:45:23 2026 by rpki-client