
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa
File: de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa (raw, json)
Hash identifier: nBE8CPOjFXskW/5jNGYAyv7kxda9/XZUtvBlixskUPg=
Subject key identifier: 6D:35:45:F0:EA:04:CF:1E:47:96:82:2F:F3:9B:86:2B:A8:09:45:3D
Certificate issuer: /CN=706d4f00-fa89-4b22-8684-b968d577fab7
Certificate serial: 010D0C9F4328584E18AEE6FF4ED7D60806EC90C0
Authority key identifier: 28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa
Signing time: Sun 07 Jun 2026 21:00:12 +0000
ROA not before: Sun 07 Jun 2026 21:00:12 +0000
ROA not after: Sat 05 Sep 2026 21:00:12 +0000
asID: 5744
IP address blocks: 2610:20:5120::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Tue 16 Jun 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:18:ae:e6:ff:4e:d7:d6:08:06:ec:90:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=706d4f00-fa89-4b22-8684-b968d577fab7
Validity
Not Before: Jun 7 21:00:12 2026 GMT
Not After : Sep 5 21:00:12 2026 GMT
Subject: CN=f217ed8b-d0e5-46df-839b-75a2402fe205
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:df:af:6e:f7:0d:45:48:46:28:80:57:86:f1:
cd:d9:4f:45:8b:02:82:34:6e:68:9e:ef:b8:a2:70:
ae:5d:f9:f4:16:8a:dd:05:a4:a0:34:00:40:20:63:
a2:f3:50:e3:b8:ec:c4:9c:eb:92:2b:51:69:4d:80:
94:cc:7e:b5:11:eb:0a:f6:d2:ab:bc:2d:ad:41:9f:
a9:3d:b7:c4:52:93:b8:e8:89:b4:7b:a9:e1:04:80:
80:90:a7:f7:a1:ac:6b:89:14:a9:4c:ed:83:96:58:
50:09:49:0c:5d:21:94:7d:5a:51:34:f3:89:16:e9:
d7:c5:01:b3:f2:d9:75:1f:7e:2a:5a:b8:7a:1d:f2:
82:86:de:59:af:3a:5e:78:b6:3b:32:ee:26:e5:f2:
ab:9c:30:c1:5b:86:2e:a5:e1:86:db:7f:2a:c0:bc:
54:c2:99:fe:06:ec:77:6e:99:21:4d:ef:cf:42:bc:
a8:8f:d0:88:07:37:ce:9b:c8:7e:59:0b:8d:63:33:
11:fa:7f:d1:a0:b3:e4:71:02:7a:6c:f2:d0:68:a8:
2a:f3:ee:1d:55:08:41:a2:a4:79:ab:e5:00:75:f3:
8b:ab:9f:cc:5d:f2:dc:63:da:ca:a4:35:3c:fe:2b:
3e:01:7a:30:35:22:b3:bb:ca:a0:f9:a7:56:f0:31:
35:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:35:45:F0:EA:04:CF:1E:47:96:82:2F:F3:9B:86:2B:A8:09:45:3D
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/de6c9681-7f04-385f-80d1-e86f0f8a4bc2.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7/706d4f00-fa89-4b22-8684-b968d577fab7.crl
X509v3 Authority Key Identifier:
keyid:28:CD:22:12:7C:2F:19:D8:1B:64:4F:54:1F:12:27:FB:22:C9:E4:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/706d4f00-fa89-4b22-8684-b968d577fab7.cer
sbgp-ipAddrBlock: critical
IPv6:
2610:20:5120::/44
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
55:22:21:00:3c:a7:2d:f4:b2:07:db:a8:6d:55:72:a7:fa:94:
39:35:89:ca:81:69:67:e2:8f:36:0c:fa:0e:13:70:58:79:11:
29:35:c4:19:1a:66:97:3e:46:78:30:b1:75:49:34:c6:99:b2:
3c:2b:16:d4:06:93:32:19:a9:1d:e8:2e:d6:7c:3e:d6:22:7b:
3e:9a:0a:05:36:47:b8:36:b0:09:98:fb:ed:30:06:f3:38:ce:
39:14:72:0d:e9:d1:b6:42:1e:b3:b6:40:3a:4d:0c:e5:94:7c:
a4:2c:69:e5:a6:9f:7e:52:31:c6:f7:6f:d3:81:8a:e9:3f:a0:
c7:de:e8:1c:5c:1a:f9:d4:0e:9b:b8:dd:db:a2:74:bb:e3:8f:
50:98:93:3e:03:41:14:a8:94:84:63:cd:a7:9a:30:f2:b8:ac:
26:bd:1f:77:49:5c:6a:b1:89:0e:b5:95:46:5a:5f:27:bf:91:
31:61:e4:18:38:97:be:c8:af:db:0c:8a:d2:36:69:e8:e8:0f:
7a:9f:4f:53:84:bb:00:5c:74:7d:d6:c8:c9:f5:80:b1:53:b4:
e5:2a:3e:60:2e:b8:e9:d4:5f:49:4d:12:bb:7f:4c:c8:11:34:
61:c1:f5:ba:f4:e3:b7:4d:f4:95:e5:6a:b1:c5:1d:05:ad:06:
b6:90:09:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 22:55:40 2026 by rpki-client