
$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
File: c062b811-5af4-3d93-883f-cd801dbdc422.roa (raw, json)
Hash identifier: ofIpOxKqtWELUD0EdxFbGcD/Htfc0qbRjDFP2FMu1u8=
Subject key identifier: 90:C0:2D:E0:A6:B8:D3:E2:6F:05:D0:2E:E2:26:8C:99:B9:3B:34:4A
Certificate issuer: /CN=68b39235-773a-4108-9528-465304a966b3
Certificate serial: 010D0C9F4328584D746FCCD0A9B744A457DE0C80
Authority key identifier: BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
Authority info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
Subject info access: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
Signing time: Fri 10 Apr 2026 01:00:24 +0000
ROA not before: Fri 10 Apr 2026 01:00:24 +0000
ROA not after: Thu 09 Jul 2026 01:00:24 +0000
asID: 63296
IP address blocks: 2605:fa40::/32 maxlen: 64
Validation: OK
Signature path: rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires: Fri 17 Apr 2026 14:00:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:0d:0c:9f:43:28:58:4d:74:6f:cc:d0:a9:b7:44:a4:57:de:0c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68b39235-773a-4108-9528-465304a966b3
Validity
Not Before: Apr 10 01:00:24 2026 GMT
Not After : Jul 9 01:00:24 2026 GMT
Subject: CN=1057e6bd-0166-4738-a237-7fdaa7808ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2f:94:8c:76:a7:1d:d3:0b:33:25:6f:1b:ca:
b1:da:63:04:8e:4b:fe:1d:ce:00:7e:98:a4:ee:47:
76:63:9c:86:fd:dd:82:93:a0:99:ec:26:07:f4:10:
1c:d5:44:bd:31:99:c8:c4:32:0b:65:63:a2:91:70:
cd:dc:d3:9c:4c:1d:06:80:83:bd:7e:50:34:53:17:
d6:20:f5:40:33:1e:53:a2:be:c6:47:d6:5f:4a:27:
32:4c:2e:58:2e:44:91:ba:14:ee:31:ae:50:4d:27:
5f:15:ce:e9:c3:e9:a9:8b:a5:fc:f8:92:5c:7c:36:
fc:e8:01:cd:43:c0:db:1a:3a:37:59:3d:d8:09:1c:
0f:e1:e4:70:0d:7b:05:5c:b8:75:4b:28:d6:2d:ec:
2d:04:0c:0a:af:4b:54:3d:8e:42:b5:43:87:1f:70:
e1:ff:8e:79:64:da:32:28:2b:34:dc:4a:ed:2b:31:
a9:0c:1c:1d:40:1b:44:fa:86:02:5d:d2:2c:b5:fa:
4a:5d:b8:82:b5:09:84:5b:bf:43:24:4f:f2:fb:82:
71:37:8b:69:bf:f6:aa:b2:0e:17:d8:ff:49:01:90:
60:25:04:58:16:76:c8:be:b6:60:6f:95:2f:85:77:
f0:70:36:e7:ec:d2:ec:20:97:e6:58:a7:de:4f:f6:
31:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:C0:2D:E0:A6:B8:D3:E2:6F:05:D0:2E:E2:26:8C:99:B9:3B:34:4A
Subject Information Access:
Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/c062b811-5af4-3d93-883f-cd801dbdc422.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3/68b39235-773a-4108-9528-465304a966b3.crl
X509v3 Authority Key Identifier:
keyid:BE:B7:8E:0F:E3:65:3F:5A:C9:05:7A:62:4C:DC:7B:71:AE:FE:45:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/68b39235-773a-4108-9528-465304a966b3.cer
sbgp-ipAddrBlock: critical
IPv6:
2605:fa40::/32
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.arin.net/resources/rpki/cps.html
Signature Algorithm: sha256WithRSAEncryption
c1:4e:a0:a2:42:f9:5b:1e:5c:a2:cc:e4:60:33:f2:e2:19:34:
e7:13:8d:f7:a1:c2:a9:46:e0:d2:40:81:31:5a:a4:f3:e1:2b:
f3:14:86:19:41:86:a8:5f:1d:ff:ce:a6:75:c6:9b:9d:2c:fa:
7f:ee:43:36:9c:88:f1:db:09:c7:f2:e0:af:e4:d9:3b:79:94:
aa:40:66:6c:27:06:ee:dc:58:70:1b:ea:5e:2c:fc:d9:11:59:
b4:5f:4e:37:4d:21:85:bf:5c:43:10:ca:f6:38:78:0c:49:7b:
9b:f0:22:ce:30:ef:09:54:fa:88:b1:59:1b:e8:b5:9a:dd:ba:
b5:4c:32:4c:94:00:09:ab:73:a7:23:94:11:b1:4d:33:a1:bc:
68:3f:23:6c:f5:e1:65:92:76:a1:7a:48:aa:12:cf:68:51:db:
dc:84:95:bd:0f:db:81:de:ce:33:ac:f4:f3:c8:e1:a4:bd:90:
3c:17:04:f5:f8:95:bb:00:9a:ca:bc:d3:52:82:5e:34:bb:6f:
a4:e9:ee:f1:5f:b8:6f:f3:1e:0a:1e:62:56:6c:dc:b9:90:fb:
5e:84:7d:50:3d:f1:e5:6e:a0:48:03:70:9a:80:1f:4b:45:be:
5f:c3:36:b5:2a:a7:90:ea:95:94:ae:5f:56:a8:59:f0:c4:a1:
8e:cd:e7:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Apr 16 11:40:54 2026 by rpki-client