
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa
File: b0aead21-fe86-32c1-8560-e3f695d01240.roa (raw, json)
Hash identifier: UvhboxHBAS7WxVRoUBTWakUyQfAWKgHrIS/eCgVQA6c=
Subject key identifier: 1C:B8:E2:CC:8E:85:42:1C:E4:85:87:53:23:5E:90:D0:3A:92:29:84
Certificate issuer: /CN=66afc7a0-9424-431b-87aa-fab4c7032ed2
Certificate serial: 010D0C9F4328584E2D9F23D7540A5FB6515988E0
Authority key identifier: 8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa
Signing time: Mon 15 Jun 2026 09:00:12 +0000
ROA not before: Mon 15 Jun 2026 09:00:12 +0000
ROA not after: Sun 13 Sep 2026 09:00:12 +0000
asID: 19919
IP address blocks: 2601:1600::/28 maxlen: 28
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 26 Jun 2026 06:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4e:2d:9f:23:d7:54:0a:5f:b6:51:59:88:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=66afc7a0-9424-431b-87aa-fab4c7032ed2
Validity
Not Before: Jun 15 09:00:12 2026 GMT
Not After : Sep 13 09:00:12 2026 GMT
Subject: CN=3283f542-d153-409f-9e4f-cfb92e8bc89d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:82:40:b3:f7:22:b2:9b:d0:c1:6d:9d:de:
a0:68:dd:5e:2f:e4:89:74:99:78:42:86:10:aa:59:
e5:f2:58:50:e6:ac:74:1f:71:be:e4:94:cd:10:23:
10:e1:38:1b:84:66:75:9b:a3:fb:ac:03:47:d1:c7:
c1:43:31:82:c5:f8:26:b8:73:90:15:a7:49:3d:9b:
92:ef:8c:d0:25:42:71:ba:b9:6d:4e:4e:c1:d2:d1:
ff:13:bb:a7:94:82:9c:cf:9a:d4:17:a4:94:ae:9e:
76:78:10:40:69:2d:d9:59:e9:2a:c4:a6:98:0d:41:
91:5b:42:d1:3b:cf:a1:80:1c:46:55:f5:48:5d:f5:
60:cd:1e:7c:92:48:15:1c:e1:b6:c9:c4:9a:ee:d8:
64:7a:66:1a:6d:cf:d8:33:4d:29:be:2b:f1:df:9f:
68:f5:f3:9c:c8:c3:1f:7d:a1:d5:83:5e:0b:d4:11:
29:69:3b:e8:19:62:c1:bd:a9:a0:59:01:24:ee:99:
af:63:e5:56:5d:d3:32:77:0b:00:c2:6f:21:0a:cf:
aa:51:58:7f:93:36:be:48:f5:13:87:1d:5b:89:7b:
d0:78:94:bf:83:7d:a6:e1:31:3d:72:39:0f:7b:3a:
1b:fb:44:5e:c2:fd:75:ad:8e:ad:df:ac:13:18:8a:
bd:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1C:B8:E2:CC:8E:85:42:1C:E4:85:87:53:23:5E:90:D0:3A:92:29:84
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/b0aead21-fe86-32c1-8560-e3f695d01240.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2/66afc7a0-9424-431b-87aa-fab4c7032ed2.crl
X509v3 Authority Key Identifier:
keyid:8B:B7:43:2E:1D:4B:AF:D0:79:03:06:96:4C:AC:AD:5C:64:24:61:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/66afc7a0-9424-431b-87aa-fab4c7032ed2.cer
sbgp-ipAddrBlock: critical
IPv6:
2601:1600::/28
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
71:c5:54:4b:d0:a3:bf:7e:07:ec:29:ae:e3:2b:48:6c:b2:11:
8e:f9:b0:14:65:e4:b7:91:89:c3:2f:78:21:9b:b7:3f:45:dc:
4e:16:95:7e:bd:4b:c8:59:05:58:cd:05:a6:ac:91:dd:57:fb:
a1:2a:3d:b7:6e:17:d7:cc:5f:f3:7e:d6:e9:7f:5b:57:15:9e:
54:17:6a:4d:40:ac:cc:77:16:3c:e8:c5:7e:a3:fe:cf:54:39:
93:42:8f:7b:6f:e7:2f:4c:85:15:6c:1d:d9:50:96:5f:cc:0b:
d8:59:7d:ce:90:61:d6:8d:42:fd:d4:85:3a:81:87:44:6a:08:
a3:c4:31:9a:27:18:ae:3a:ec:6a:a1:54:af:ce:10:bb:08:4f:
17:1a:20:1a:d3:72:29:53:cd:28:28:7d:95:ac:27:9b:3a:6b:
f6:17:47:dc:e0:61:1f:08:38:2b:4c:68:82:82:99:9f:10:d8:
64:97:76:23:10:16:19:4f:6c:aa:4a:09:f5:3b:0e:83:61:bc:
67:75:af:08:f8:4a:9a:0d:3d:e2:22:36:ee:c3:8d:68:df:57:
35:b2:63:96:be:21:bb:9d:5b:0a:b9:ba:b3:ce:df:39:38:38:
a9:73:fb:2f:81:92:37:27:96:79:45:a0:9e:23:e7:6d:68:d4:
98:94:43:f6
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWE4tnyPXVApftlFZiOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZhZmM3YTAtOTQyNC00MzFiLTg3YWEtZmFiNGM3MDMy
ZWQyMB4XDTI2MDYxNTA5MDAxMloXDTI2MDkxMzA5MDAxMlowLzEtMCsGA1UEAxMk
MzI4M2Y1NDItZDE1My00MDlmLTllNGYtY2ZiOTJlOGJjODlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdGCQLP3IrKb0MFtnd6gaN1eL+SJdJl4QoYQ
qlnl8lhQ5qx0H3G+5JTNECMQ4TgbhGZ1m6P7rANH0cfBQzGCxfgmuHOQFadJPZuS
74zQJUJxurltTk7B0tH/E7unlIKcz5rUF6SUrp52eBBAaS3ZWekqxKaYDUGRW0LR
O8+hgBxGVfVIXfVgzR58kkgVHOG2ycSa7thkemYabc/YM00pvivx359o9fOcyMMf
faHVg14L1BEpaTvoGWLBvamgWQEk7pmvY+VWXdMydwsAwm8hCs+qUVh/kza+SPUT
hx1biXvQeJS/g32m4TE9cjkPezob+0Rewv11rY6t36wTGIq9yQIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFBy44syOhUIc5IWHUyNekNA6kimEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82NmFm
YzdhMC05NDI0LTQzMWItODdhYS1mYWI0YzcwMzJlZDIvYjBhZWFkMjEtZmU4Ni0z
MmMxLTg1NjAtZTNmNjk1ZDAxMjQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjZhZmM3YTAtOTQyNC00MzFiLTg3
YWEtZmFiNGM3MDMyZWQyLzY2YWZjN2EwLTk0MjQtNDMxYi04N2FhLWZhYjRjNzAz
MmVkMi5jcmwwHwYDVR0jBBgwFoAUi7dDLh1Lr9B5AwaWTKytXGQkYSAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82NmFmYzdhMC05NDI0LTQzMWItODdhYS1mYWI0
YzcwMzJlZDIuY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUEJgEWADBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBxxVRL0KO/fgfsKa7jK0hsshGO+bAUZeS3kYnDL3ghm7c/RdxOFpV+
vUvIWQVYzQWmrJHdV/uhKj23bhfXzF/zftbpf1tXFZ5UF2pNQKzMdxY86MV+o/7P
VDmTQo97b+cvTIUVbB3ZUJZfzAvYWX3OkGHWjUL91IU6gYdEagijxDGaJxiuOuxq
oVSvzhC7CE8XGiAa03IpU80oKH2VrCebOmv2F0fc4GEfCDgrTGiCgpmfENhkl3Yj
EBYZT2yqSgn1Ow6DYbxnda8I+EqaDT3iIjbuw41o31c1smOWviG7nVsKubqzzt85
ODipc/svgZI3J5Z5RaCeI+dtaNSYlEP2
-----END CERTIFICATE-----
Generated at Wed Jun 24 03:52:57 2026 by rpki-client