
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
File: 34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa (raw, json)
Hash identifier: Lcl9pUgv6GSrveGuCNOPsw81mFjfnBglUSzSWoTrUjU=
Subject key identifier: F6:B5:6F:96:F1:8F:45:8F:D9:7F:EC:65:9E:2F:B6:67:11:01:00:3E
Certificate issuer: /CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Certificate serial: 010D0C9F4328584D7A0531E94EF1E1E6CA199480
Authority key identifier: 02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
Signing time: Sun 12 Apr 2026 01:00:24 +0000
ROA not before: Sun 12 Apr 2026 01:00:24 +0000
ROA not after: Sat 11 Jul 2026 01:00:24 +0000
asID: 31898
IP address blocks: 2602:fdaa:21::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 14 Apr 2026 21:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:7a:05:31:e9:4e:f1:e1:e6:ca:19:94:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d06ed66-9fdd-4048-8645-e33e8cec1d41
Validity
Not Before: Apr 12 01:00:24 2026 GMT
Not After : Jul 11 01:00:24 2026 GMT
Subject: CN=34dc195e-6a7e-42ce-afef-c5cf4b81ffe5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:5c:c6:cf:eb:10:eb:f1:1a:ab:8e:c1:bf:a8:
a6:e2:06:79:54:12:71:cf:34:23:34:43:5a:03:b5:
c2:e8:48:1b:8b:cf:03:93:8d:12:bf:22:4e:5d:e8:
24:cf:dd:83:45:59:b7:de:60:0b:7a:dc:dd:72:cc:
7d:5b:b5:55:be:b1:68:b8:3d:66:04:ff:4f:71:ee:
0d:1d:eb:de:7c:e2:dd:bc:82:fd:92:b1:7c:44:75:
d9:1c:09:97:6b:40:3e:5c:3c:f5:e0:af:dc:c1:36:
45:f8:74:8d:4e:c8:10:5b:26:ad:39:4d:be:aa:0f:
c4:24:2a:ae:13:82:47:5b:fe:ea:ef:ce:f7:65:3d:
f8:5c:18:29:bf:31:07:31:3b:f5:ce:97:d2:e7:71:
21:9d:dd:61:68:c8:63:66:fc:69:e4:93:4c:62:99:
97:d2:14:9a:45:9e:09:7a:e8:c1:af:7d:84:1c:dc:
5c:cf:82:35:9a:68:18:4e:bd:6b:28:a5:0f:b5:f0:
d4:1b:af:8e:5a:3d:50:79:6e:ad:09:84:a4:08:b7:
bf:95:55:37:4f:0d:8b:b0:8d:d3:3a:26:da:0c:28:
29:31:c7:40:8a:a3:f7:f0:77:65:00:8b:ad:cd:5f:
41:6b:4a:eb:ac:04:53:51:e2:e9:ed:d7:c9:f0:6d:
8e:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B5:6F:96:F1:8F:45:8F:D9:7F:EC:65:9E:2F:B6:67:11:01:00:3E
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/34ffd1f7-f78d-3b78-ab5d-48fa4fd36589.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41/9d06ed66-9fdd-4048-8645-e33e8cec1d41.crl
X509v3 Authority Key Identifier:
keyid:02:44:4D:5E:6D:0A:9E:ED:FD:DC:F5:34:D7:31:63:B9:CB:7A:C2:0C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/9d06ed66-9fdd-4048-8645-e33e8cec1d41.cer
sbgp-ipAddrBlock: critical
IPv6:
2602:fdaa:21::/48
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
7e:37:bc:98:36:ca:3e:73:91:c2:93:cb:2e:8e:19:c2:86:5c:
c4:cd:6a:a3:8e:cf:70:93:77:e8:38:9f:90:21:62:6c:42:ad:
7d:d4:eb:fa:9a:50:95:45:8e:98:31:fc:b4:4c:a6:db:90:cb:
d2:f7:35:7c:0b:db:2e:fc:0f:b0:ec:36:eb:8d:8d:aa:99:d1:
c7:0a:54:3b:a3:6c:70:92:5c:ef:d1:4b:ee:a1:9e:2e:0f:2e:
78:96:43:70:ce:e0:30:bd:e9:46:d8:41:84:57:e2:da:6b:4d:
98:a1:7a:99:2c:3f:0c:f1:29:c8:9e:66:3b:21:ab:f2:d5:68:
7c:f5:b3:57:a4:61:73:72:7c:89:5e:32:84:3b:e2:34:19:d5:
12:cf:bf:95:6d:2d:c6:c2:ed:ec:57:d8:a6:57:5d:61:bd:07:
76:71:69:7d:75:3b:48:0b:01:4b:20:e0:03:63:31:57:93:20:
6a:0e:68:19:6c:86:ab:c4:9d:74:cb:c1:2a:47:20:11:62:c2:
1c:af:f8:44:ce:7c:6a:92:3e:c9:2a:a3:94:d0:3e:35:32:c5:
45:d3:9a:ed:f8:df:79:ec:c6:63:23:0c:bb:6a:78:09:ce:af:
0b:78:b1:f2:42:d5:63:86:59:f4:eb:23:48:26:16:0d:cc:81:
2d:d5:5c:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 13 14:39:33 2026 by rpki-client