
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa
File: 3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa (raw, json)
Hash identifier: gCrJIZoMNMwtE1Zp1YElOKVY/v/Qq2TMQZMq5voR58k=
Subject key identifier: A3:7A:DA:93:DA:2F:C3:A9:C1:CB:0D:63:DD:CA:40:83:3F:98:C2:48
Certificate issuer: /CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Certificate serial: 010D0C9F4328584D1DE490DF92BB81D422198DC0
Authority key identifier: 49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa
Signing time: Tue 10 Mar 2026 01:00:31 +0000
ROA not before: Tue 10 Mar 2026 01:00:31 +0000
ROA not after: Mon 08 Jun 2026 01:00:31 +0000
asID: 23473
IP address blocks: 2607:f750:9300::/40 maxlen: 40
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Sun 22 Mar 2026 20:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:1d:e4:90:df:92:bb:81:d4:22:19:8d:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b87907d9-edd4-4370-9686-7b4af7d0fe2a
Validity
Not Before: Mar 10 01:00:31 2026 GMT
Not After : Jun 8 01:00:31 2026 GMT
Subject: CN=aaa30bc4-9a75-4298-8d6b-dc4745c994ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:d3:b8:bc:db:05:b0:d6:b6:77:96:bb:37:79:
83:36:11:f4:a6:7f:ed:7e:b9:0b:0d:ef:8d:18:e0:
dc:fe:4a:79:fe:ce:b4:42:78:b3:a2:bc:f4:a8:43:
78:26:84:ab:89:0e:86:6b:3c:d8:b5:28:51:66:d9:
b8:9a:4c:a0:b2:e8:cf:b6:44:c4:f7:6c:bd:6c:4a:
9b:c7:86:d0:2a:99:2e:11:cb:99:6b:9c:fd:34:19:
a8:55:39:6b:75:c3:ed:71:a6:15:84:a2:fc:69:cf:
8c:d7:bf:87:c3:f3:39:22:7e:ba:ce:0b:58:74:bb:
26:6e:a7:46:f5:3a:13:d0:64:9d:3e:61:e2:4a:86:
8b:cc:3d:8a:30:44:43:ac:7f:b5:b3:2d:9b:b8:38:
0b:19:de:8d:58:fe:f6:72:ce:4e:b2:ca:21:5b:0c:
3a:49:77:5c:47:5b:e1:85:3b:bc:0e:16:b1:e7:51:
e9:8f:e9:1e:62:49:42:4b:9a:87:32:57:e4:80:ab:
e5:0a:60:0d:fd:5c:88:d4:d1:13:7f:d7:f6:75:22:
5e:99:66:42:e1:80:88:c6:34:4b:f0:82:25:5a:a7:
af:f8:a0:c0:46:a5:71:9b:84:c2:f3:e1:df:46:20:
48:80:e0:50:ac:0c:dc:c3:b8:f5:c5:87:49:19:bb:
71:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:7A:DA:93:DA:2F:C3:A9:C1:CB:0D:63:DD:CA:40:83:3F:98:C2:48
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/3964f2e6-ffe1-3467-839a-fa09f1904ab0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a/b87907d9-edd4-4370-9686-7b4af7d0fe2a.crl
X509v3 Authority Key Identifier:
keyid:49:EB:A8:9E:D4:72:C5:D9:15:74:BD:C8:A1:06:AA:39:7D:F9:8B:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/b87907d9-edd4-4370-9686-7b4af7d0fe2a.cer
sbgp-ipAddrBlock: critical
IPv6:
2607:f750:9300::/40
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
33:4f:8d:e6:59:81:c0:d4:97:bf:e9:59:96:05:39:69:28:ef:
7f:7d:5a:fe:3f:99:34:00:9c:1c:47:b6:ef:f0:99:3d:34:39:
ac:e4:66:bd:97:be:76:3c:8d:50:7d:65:df:30:70:b8:04:2a:
0d:e3:42:49:c4:a1:a6:7d:2d:ba:f0:8a:54:d0:7b:ed:06:7b:
42:16:f7:03:c4:b4:53:fe:5d:8c:43:2d:29:f7:cf:cd:eb:84:
5e:a8:21:12:16:6c:dc:e4:fc:7a:bd:92:02:f5:da:5f:1c:f1:
00:e8:6e:e4:2c:aa:b1:f0:d8:ad:c1:ed:c2:37:ba:c0:8c:3f:
a2:27:b9:a2:95:e0:db:dd:d3:2a:4a:68:62:b6:b9:cf:7e:7b:
ea:a7:21:65:cf:4e:b8:56:f6:16:94:f3:f6:67:26:83:22:0e:
6e:31:20:9c:57:e8:52:56:3b:8c:84:c4:f1:c3:52:bc:9b:97:
14:c4:1c:36:79:69:49:be:85:7d:9a:0c:a4:09:6b:92:79:72:
00:43:a4:ec:8f:40:87:0e:34:c7:b4:7d:4a:bd:e0:54:f1:4c:
af:61:7e:c0:0c:b9:6a:e3:de:57:bc:6d:e2:1d:9d:ca:3a:43:
71:67:08:fc:8f:26:6e:0e:3d:5c:4b:21:0a:37:39:86:b3:e2:
14:b0:ed:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 21 20:58:16 2026 by rpki-client